Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_94ca80095368a6bd2ed3824d7e7fdebb_bkransomware.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-02_94ca80095368a6bd2ed3824d7e7fdebb_bkransomware.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-02_94ca80095368a6bd2ed3824d7e7fdebb_bkransomware
-
Size
2.5MB
-
MD5
94ca80095368a6bd2ed3824d7e7fdebb
-
SHA1
8dc6c607e087935ad874bce4d251b327cf137b96
-
SHA256
1872d11651b1d9bf935f72ba7ae6b620e249da9c5bff4a6404fc239f993523ac
-
SHA512
52151b4b1a9bb00fb12ffceb4ff565f1d17bfb38f0b78ab64685a8d1b51b864a10353d5393edc35d6e5000fec57c03db3fb333181eb43c1826d0b26d0c68eb98
-
SSDEEP
49152:MwMFcOoihKGBMlT7n9wH1fAvrzdJLojb4e+vFBO+mvIG0q5kDZaYL72U2grQsRiH:Mr/TqB7n9wH1IvdJLov4e+vjmvIJq5kx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-02_94ca80095368a6bd2ed3824d7e7fdebb_bkransomware
Files
-
2024-06-02_94ca80095368a6bd2ed3824d7e7fdebb_bkransomware.exe windows:5 windows x86 arch:x86
456a34e8898dcb7e6af7f109153e3057
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
InterlockedExchange
CompareStringA
LoadLibraryA
GetCurrentThreadId
MapViewOfFile
ResetEvent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetLocalTime
GetFileTime
WaitForMultipleObjects
TerminateThread
Sleep
GetExitCodeProcess
TerminateProcess
GetHandleInformation
GetVersion
GetCurrentProcessId
GetTickCount
DeviceIoControl
SetFilePointer
ReadFile
WriteFile
GetFileSize
SetLastError
GlobalFree
GlobalUnlock
GlobalLock
GlobalReAlloc
GlobalAlloc
FindClose
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentThread
RaiseException
GetCurrentProcess
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
LocalFree
DecodePointer
UnmapViewOfFile
CloseHandle
SizeofResource
LoadResource
WaitForSingleObject
ReleaseMutex
SetEnvironmentVariableA
GetConsoleCP
GetTimeZoneInformation
GetOEMCP
GetACP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryPerformanceCounter
GetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
SetStdHandle
GetModuleHandleExW
ExitProcess
ExitThread
CreateThread
GetSystemTimeAsFileTime
GetFileType
GetConsoleMode
SetFilePointerEx
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
GetCommandLineW
VerifyVersionInfoW
VerSetConditionMask
SetErrorMode
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
FlushFileBuffers
SystemTimeToFileTime
SetFileTime
LocalFileTimeToFileTime
GetFileSizeEx
LeaveCriticalSection
EnterCriticalSection
FreeResource
VirtualProtect
GlobalDeleteAtom
ResumeThread
SuspendThread
SetThreadPriority
EncodePointer
OutputDebugStringA
lstrcmpA
FileTimeToLocalFileTime
MulDiv
GlobalSize
ExpandEnvironmentStringsA
SetEvent
GetLastError
FreeLibrary
LockResource
advapi32
StartServiceW
RegQueryValueExA
RegOpenKeyExA
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
RegCloseKey
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenThreadToken
OpenProcessToken
user32
SetWindowRgn
IsIconic
GetSystemMetrics
GetSystemMenu
DrawIcon
GetClientRect
GetCursorPos
GetKeyState
InvalidateRect
GetFocus
SetCapture
ReleaseCapture
UpdateWindow
GetWindowRect
ScreenToClient
DrawFocusRect
IntersectRect
GetWindow
MapDialogRect
GetSysColor
FillRect
FrameRect
CopyRect
DestroyIcon
DrawIconEx
GetSubMenu
ChildWindowFromPointEx
GetDC
ReleaseDC
ClientToScreen
IsRectEmpty
SetTimer
KillTimer
SetActiveWindow
GetDesktopWindow
SetCursor
BringWindowToTop
EnumWindows
GetWindowThreadProcessId
SetWindowPos
IsWindowVisible
GetParent
SetFocus
OpenDesktopW
SwitchDesktop
CopyImage
DrawEdge
DrawMenuBar
EnableMenuItem
EnableScrollBar
GetMenuState
GetMenuItemID
GetMenuItemCount
RemoveMenu
UnhookWindowsHookEx
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
TranslateMessage
GetActiveWindow
ValidateRect
CallNextHookEx
PostQuitMessage
ShowOwnedPopups
IsWindowEnabled
GetLastActivePopup
ShowWindow
GetDlgItem
GetAsyncKeyState
GetCapture
SetWindowContextHelpId
GetWindowDC
BeginPaint
EndPaint
DestroyMenu
InflateRect
GetMessagePos
GetMessageTime
IsWindow
IsChild
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
GetMenu
SetMenu
TrackPopupMenu
GetForegroundWindow
SetForegroundWindow
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
AdjustWindowRectEx
MapWindowPoints
EqualRect
PtInRect
GetTopWindow
SetScrollInfo
GetScrollInfo
MonitorFromWindow
MoveWindow
CheckDlgButton
CreateDesktopW
GetNextDlgTabItem
SendDlgItemMessageA
DeleteMenu
GetSysColorBrush
RealChildWindowFromPoint
MessageBeep
SetRect
WaitMessage
WindowFromPoint
OffsetRect
InvalidateRgn
GetNextDlgGroupItem
CreatePopupMenu
SetRectEmpty
UnpackDDElParam
ReuseDDElParam
GetMenuDefaultItem
GetIconInfo
HideCaret
InvertRect
NotifyWinEvent
UnionRect
SetParent
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawFrameControl
EndDialog
IsMenu
UpdateLayeredWindow
MonitorFromPoint
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetKeyboardLayout
LockWindowUpdate
ToUnicodeEx
GetKeyboardState
DestroyAcceleratorTable
SetCursorPos
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
TranslateMDISysAccel
GetUpdateRect
SubtractRect
CreateMenu
DestroyCursor
GetWindowRgn
CloseDesktop
GetThreadDesktop
GetUserObjectInformationW
gdi32
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
GetViewportExtEx
SetMapMode
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
LineTo
IntersectClipRect
SetLayout
GetWindowExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
SetStretchBltMode
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
GetBoundsRect
FillRgn
SetPaletteEntries
ExtFloodFill
SetPixelV
PtInRegion
FrameRgn
RoundRect
CreateRoundRectRgn
OffsetRgn
Rectangle
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
SetPixel
GetTextCharsetInfo
GetPaletteEntries
GetNearestPaletteIndex
GetRgnBox
GetTextColor
GetBkColor
DPtoLP
SetRectRgn
GetMapMode
CombineRgn
PatBlt
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreatePalette
DeleteDC
DeleteObject
GetDeviceCaps
GetDIBits
GetStockObject
GetSystemPaletteEntries
RealizePalette
SelectObject
SelectPalette
SetDIBitsToDevice
StretchBlt
StretchDIBits
CreateSolidBrush
SetViewportOrgEx
SetViewportExtEx
MoveToEx
shell32
SHAppBarMessage
DragFinish
SHAddToRecentDocs
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
shlwapi
PathFileExistsW
PathIsDirectoryW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
msimg32
TransparentBlt
AlphaBlend
comctl32
ord17
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
uxtheme
DrawThemeText
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
GetThemePartSize
IsAppThemed
GetThemeSysColor
GetWindowTheme
DrawThemeBackground
ole32
CoTaskMemAlloc
CoTaskMemFree
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleDuplicateData
CoRegisterMessageFilter
CreateStreamOnHGlobal
DoDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium
CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoDisconnectObject
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
oleaut32
SysAllocString
SysAllocStringLen
VariantInit
VarBstrFromDate
OleCreateFontIndirect
VariantClear
VariantChangeType
LoadTypeLi
SysStringLen
SysFreeString
SystemTimeToVariantTime
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
gdiplus
GdipDrawImageRectI
GdiplusShutdown
GdipSetInterpolationMode
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winspool.drv
ClosePrinter
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ