Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_c5940ed6f1cc5ad9245d0be869731083_bkransomware.exe
Resource
win7-20240508-en
General
-
Target
2024-05-31_c5940ed6f1cc5ad9245d0be869731083_bkransomware
-
Size
6.6MB
-
MD5
c5940ed6f1cc5ad9245d0be869731083
-
SHA1
67f52db7d7436e391a1d3a9b7f65872c64be6640
-
SHA256
25035c51aa34d384eee55fea9e522fce6b55b8a7cd19c9a8487ee620d01852d9
-
SHA512
156cfb85817a7ad15a53dbeeaa8d68c3c7bf621d1ad1246c02ff9267276ae431fa4f5052dd1bf312eeb7d18642deac603d63c878a451ffb6e8a2b95ee60a9745
-
SSDEEP
196608:lNZIiQZcwn8N+1+vyKEXKmno6P421Yf0gryYrK/oI:lNUL82+qKwKOo6w2qbej/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-31_c5940ed6f1cc5ad9245d0be869731083_bkransomware
Files
-
2024-05-31_c5940ed6f1cc5ad9245d0be869731083_bkransomware.exe windows:6 windows x86 arch:x86
342481cdf96fca495b29facb945add49
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
HeapAlloc
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
Sleep
DeleteFileW
GetVersion
GetWindowsDirectoryW
DeviceIoControl
FileTimeToSystemTime
GetFileAttributesW
LoadResource
GetExitCodeProcess
GetFileSize
FindFirstFileW
IsDebuggerPresent
GetSystemInfo
GetThreadLocale
FormatMessageW
LoadLibraryW
GetSystemDirectoryW
SignalObjectAndWait
GetModuleHandleA
GetSystemDefaultUILanguage
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
CreateFileW
user32
MapDialogRect
GetMessageW
ShowWindow
CreateWindowExW
UpdateWindow
ShowOwnedPopups
SetTimer
HideCaret
GetWindowRect
GetDoubleClickTime
GetMenu
SetWindowLongA
UnregisterClassA
GetWindowLongA
PeekMessageA
EnableMenuItem
AppendMenuA
GetMenuItemCount
GetDlgItemTextA
DialogBoxParamA
DestroyWindow
CharUpperBuffW
SetWindowTextW
SetCapture
KillTimer
MsgWaitForMultipleObjects
IsZoomed
GetKeyState
ModifyMenuW
GetDC
GetKeyboardState
OffsetRect
GetWindowTextA
InvalidateRect
ReleaseDC
GetDlgItem
EndDialog
DefWindowProcA
RedrawWindow
GetDesktopWindow
EnumChildWindows
IsWindow
InsertMenuW
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
MapWindowPoints
EnableWindow
gdi32
ExcludeClipRect
SetPixel
SelectClipRgn
GetTextExtentPointA
CreateDIBitmap
GetStockObject
UpdateColors
CreateSolidBrush
GetBitmapBits
TranslateCharsetInfo
GetPaletteEntries
SetMapMode
CreateCompatibleBitmap
GetTextExtentExPointA
GetCharWidth32A
ExtTextOutA
SetTextColor
comdlg32
GetSaveFileNameW
advapi32
GetUserNameA
OpenSCManagerW
CloseServiceHandle
RegLoadKeyW
RegEnumKeyExW
ControlService
EqualSid
RegUnLoadKeyW
shell32
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
Shell_NotifyIconW
ole32
CoInitialize
oleaut32
SysFreeString
SysAllocStringLen
SafeArrayCreate
VariantCopy
Sections
.text Size: 606KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ