Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_6ba085f441b35f10c74f81c5af4e2e07_bkransomware.exe
Resource
win7-20240508-en
General
-
Target
2024-05-31_6ba085f441b35f10c74f81c5af4e2e07_bkransomware
-
Size
6.7MB
-
MD5
6ba085f441b35f10c74f81c5af4e2e07
-
SHA1
ffc167d3a1ab4cb2651c6285822045442133d9e5
-
SHA256
95cfa551765326ee813da69471a0dcc1009e48e339a4cf58a4bdb052b3e7dabf
-
SHA512
d13ec7dab8f4485db4cefbba7c96ba2d6064ee1c8395de1bcda9194cb4e6a24bc23597e0f85a5b3a05a4d4eac9b06fd720485201e8aaa5908401c6c56508238f
-
SSDEEP
196608:chjvlMAV8XuTTH67G/vhU/xVqcB5HGVtZPWm:cdviAwITHm4vhU/xVqicVtZP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-31_6ba085f441b35f10c74f81c5af4e2e07_bkransomware
Files
-
2024-05-31_6ba085f441b35f10c74f81c5af4e2e07_bkransomware.exe windows:6 windows x86 arch:x86
8081177e2a10d3a69787d7025f432d38
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetStringTypeW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryW
SetStdHandle
WriteConsoleW
Sleep
SuspendThread
FileTimeToLocalFileTime
DeviceIoControl
RemoveDirectoryW
GetLastError
GetCPInfoExW
VerifyVersionInfoW
GetTempPathW
FileTimeToSystemTime
GetFileAttributesW
GetVersionExW
CreateDirectoryW
GetLogicalDrives
FindResourceW
VerSetConditionMask
FindFirstFileW
GetFullPathNameW
GetThreadPriority
GetSystemInfo
lstrcpynW
HeapCreate
SizeofResource
SignalObjectAndWait
VirtualAlloc
SystemTimeToTzSpecificLocalTime
IsDebuggerPresent
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
CreateFileW
GetModuleHandleExW
ExitProcess
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SwitchToThread
SetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
user32
GetMessageW
ShowWindow
CreateWindowExW
SendMessageW
UpdateWindow
MapDialogRect
CharNextW
MsgWaitForMultipleObjects
GetKeyState
GetParent
AttachThreadInput
MessageBeep
BeginPaint
OffsetRect
GetKeyboardLayout
SetWindowsHookExA
GetSysColorBrush
RegisterWindowMessageW
CheckRadioButton
SystemParametersInfoA
GetDlgItemTextW
GetCaretBlinkTime
CheckMenuItem
RegisterClassA
GetWindow
ToAsciiEx
EndPaint
SetCursor
HideCaret
PostMessageW
LoadIconA
GetDC
GetScrollInfo
UnionRect
InvalidateRect
LoadMenuW
ScrollWindow
SendDlgItemMessageW
GetDesktopWindow
IsWindow
PostMessageA
InsertMenuW
ReleaseCapture
SetCaretPos
SetDlgItemTextW
FlashWindow
gdi32
PatBlt
SetDIBColorTable
CreatePalette
DeleteObject
CreatePenIndirect
CreateRectRgnIndirect
GetObjectType
SelectPalette
SetPaletteEntries
RoundRect
IntersectClipRect
GetPixel
CreateSolidBrush
BitBlt
CreateHalftonePalette
Rectangle
GetTextExtentPointA
GetCharABCWidthsFloatA
RectVisible
EndDoc
TextOutA
GetTextExtentPoint32W
comdlg32
GetSaveFileNameW
advapi32
RegEnumKeyExW
CloseServiceHandle
GetUserNameA
RegConnectRegistryW
QueryServiceStatus
RegGetKeySecurity
RegQueryInfoKeyW
EqualSid
RegSetValueExW
shell32
ShellExecuteExW
CommandLineToArgvW
ExtractIconExW
Shell_NotifyIconW
oleaut32
VariantInit
SafeArrayGetLBound
SafeArrayCreate
SafeArrayPtrOfIndex
Sections
.text Size: 766KB - Virtual size: 766KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ