Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_a5dca05edc6eda6e2acfe7ca41641cc5_bkransomware.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-31_a5dca05edc6eda6e2acfe7ca41641cc5_bkransomware.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-31_a5dca05edc6eda6e2acfe7ca41641cc5_bkransomware
-
Size
6.7MB
-
MD5
a5dca05edc6eda6e2acfe7ca41641cc5
-
SHA1
b772813e63a424ae31a2bd75c0067be03aae0165
-
SHA256
986e2f087fe32332daf7215461a103fa25d86209ab704e29a81dc419435367ae
-
SHA512
c3d865918176c064e638d2c892cb2ef45bc722fa9f3b4e1fb10ca6886054ff2d37cd9fd97fff08cdd95a017374109495bf48069fdc67355b34729fae654da2ed
-
SSDEEP
196608:SHCP14wM9513s7KJjkWSPr+2GA/wQaWU6l9rp:SQ1O1smmWi+2GACWHl9r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-31_a5dca05edc6eda6e2acfe7ca41641cc5_bkransomware
Files
-
2024-05-31_a5dca05edc6eda6e2acfe7ca41641cc5_bkransomware.exe windows:6 windows x86 arch:x86
27d714eda4ec93c62aa6787cbf65c7ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
GetProcessHeap
Sleep
ResumeThread
SuspendThread
GetUserDefaultUILanguage
GetThreadPriority
GetExitCodeThread
GetDiskFreeSpaceW
VirtualAlloc
GetLastError
GetTempPathW
GetFileAttributesW
GetExitCodeProcess
FormatMessageW
SizeofResource
GetUserDefaultLangID
GetLogicalDrives
CreateDirectoryW
SignalObjectAndWait
VerSetConditionMask
GetDriveTypeW
SwitchToThread
QueryDosDeviceW
HeapCreate
LoadLibraryW
GetTempFileNameW
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
UnregisterWait
CreateFileW
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
user32
GetMessageW
ShowWindow
CreateWindowExW
SendMessageW
UpdateWindow
SetCursor
SetWindowRgn
GetSystemMenu
CharUpperBuffW
MapDialogRect
SendDlgItemMessageA
TrackPopupMenu
SetCapture
MsgWaitForMultipleObjects
GetParent
AttachThreadInput
CharLowerBuffW
ShowCaret
GetWindowRect
WaitMessage
ShowCursor
UnregisterClassA
ScrollWindow
SetWindowLongW
DestroyCaret
GetSysColor
AppendMenuA
IsWindow
FlashWindow
ScrollWindowEx
GetDlgItemTextA
GetKeyState
MessageBeep
GetDC
GetQueueStatus
GetCapture
EnableMenuItem
DefWindowProcA
SetWindowsHookExA
GetDesktopWindow
GetKeyboardType
SystemParametersInfoA
SetWindowTextA
GetCaretBlinkTime
SetMenuItemInfoW
SetDlgItemTextA
SetScrollRange
gdi32
MaskBlt
CreateFontA
SetBkColor
SelectClipRgn
SetMapMode
GetTextExtentExPointA
Polyline
UpdateColors
MoveToEx
GetDIBits
CreateBitmap
PolyPolyline
CreateRectRgn
SetTextAlign
GetStockObject
ExtTextOutA
ExtCreatePen
advapi32
RegLoadKeyW
AllocateAndInitializeSid
ChangeServiceConfigW
RegGetKeySecurity
InitializeSecurityDescriptor
QueryServiceStatus
RegSetValueExW
shell32
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
oleaut32
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayGetLBound
VariantChangeType
Sections
.text Size: 683KB - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ