Static task
static1
Behavioral task
behavioral1
Sample
2024-06-05_bd6e095e220f5a946a1b99ad3e388957_bkransomware.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-05_bd6e095e220f5a946a1b99ad3e388957_bkransomware.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-05_bd6e095e220f5a946a1b99ad3e388957_bkransomware
-
Size
2.2MB
-
MD5
bd6e095e220f5a946a1b99ad3e388957
-
SHA1
4027c0c576da233e707e748e8477dda063e45ed1
-
SHA256
3263fd27add0e4dfe445b920cb03b7477eeed48ceed92dd9b10b7878b1c929d6
-
SHA512
c883711b800a5ca62251c99a10d0dad9da5f408a84dd7b3e91c0b00bf5cbd7d5cc0166408dd556e923f4865575fa8d09eedc29d1abf13754f859c1f434cd8d5e
-
SSDEEP
49152:RX8G2y5D1WW4iAqKwO4Qo584v2zHSrUGDXQJ2Dw+E1fKHNhAFRP:eG2y5D1WW4Tq24Qo584OzGAgDw+E1fE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-05_bd6e095e220f5a946a1b99ad3e388957_bkransomware
Files
-
2024-06-05_bd6e095e220f5a946a1b99ad3e388957_bkransomware.exe windows:5 windows x86 arch:x86
a97da3c265683ac0794ce8e509233370
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
VirtualQuery
FlushInstructionCache
LoadLibraryA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
InterlockedExchange
CompareStringA
DeleteCriticalSection
RaiseException
HeapSize
DecodePointer
GetLocalTime
GetExitCodeProcess
WaitForSingleObject
FindClose
InitializeCriticalSectionAndSpinCount
Sleep
CloseHandle
GetCurrentProcess
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
SetLastError
GetLastError
LocalFree
InterlockedDecrement
InterlockedIncrement
SetEnvironmentVariableA
GetConsoleCP
GetTimeZoneInformation
GetOEMCP
GetACP
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryPerformanceCounter
GetStdHandle
VirtualAlloc
GetSystemInfo
HeapQueryInformation
SetStdHandle
GetModuleHandleExW
ExitProcess
ExitThread
CreateThread
GetFileType
GetConsoleMode
SetFilePointerEx
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineW
VerifyVersionInfoW
VerSetConditionMask
SetErrorMode
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
LocalFileTimeToFileTime
GetFileSizeEx
VirtualProtect
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetFileTime
GetTickCount
GetCurrentProcessId
GetCurrentThread
SizeofResource
LoadResource
FreeLibrary
LockResource
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
MulDiv
lstrcmpA
OutputDebugStringA
EncodePointer
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FreeResource
GlobalDeleteAtom
SetThreadPriority
ResumeThread
advapi32
RegQueryValueExA
RegOpenKeyExA
GetFileSecurityW
SetFileSecurityW
RegCloseKey
user32
GetSysColor
MapDialogRect
GetWindow
IntersectRect
FillRect
FrameRect
CopyRect
DestroyIcon
DrawIconEx
TranslateMessage
GetSubMenu
ChildWindowFromPointEx
SetCursor
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
RemoveMenu
UnhookWindowsHookEx
SetFocus
SetScrollPos
GetScrollPos
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMessagePos
GetMessageTime
IsWindow
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetDlgItem
GetDlgCtrlID
GetCapture
GetMenu
SetMenu
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
ValidateRect
RedrawWindow
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
DrawFocusRect
MapWindowPoints
EqualRect
PtInRect
GetTopWindow
GetLastActivePopup
CallNextHookEx
SetScrollInfo
GetScrollInfo
MonitorFromWindow
ShowWindow
MoveWindow
CheckDlgButton
IsWindowEnabled
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
ShowOwnedPopups
GetWindowThreadProcessId
SetWindowContextHelpId
GetDC
ReleaseDC
SetRectEmpty
GetWindowDC
BeginPaint
EndPaint
ClientToScreen
GetSystemMetrics
DestroyMenu
InflateRect
IsIconic
GetAsyncKeyState
SetRect
IsRectEmpty
SendDlgItemMessageA
BringWindowToTop
OffsetRect
UnpackDDElParam
ReuseDDElParam
IsZoomed
SetCursorPos
DestroyCursor
GetSysColorBrush
RealChildWindowFromPoint
DeleteMenu
SetTimer
KillTimer
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnionRect
GetSystemMenu
SetParent
WindowFromPoint
DrawIcon
SetWindowRgn
GetMenuDefaultItem
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
LockWindowUpdate
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawEdge
DrawFrameControl
IsMenu
UpdateLayeredWindow
MonitorFromPoint
TrackMouseEvent
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
ToUnicodeEx
GetKeyboardState
DestroyAcceleratorTable
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
DrawMenuBar
TranslateMDISysAccel
GetUpdateRect
SubtractRect
CreateMenu
GetWindowRgn
ScreenToClient
GetWindowRect
InvalidateRect
ReleaseCapture
SetCapture
GetKeyState
GetFocus
GetParent
GetCursorPos
GetClientRect
EnableMenuItem
CreatePopupMenu
CopyImage
UpdateWindow
AdjustWindowRectEx
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAddToRecentDocs
DragFinish
SHAppBarMessage
msimg32
TransparentBlt
AlphaBlend
comctl32
ImageList_AddMasked
ImageList_GetIcon
ord17
ImageList_ReplaceIcon
shlwapi
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathFindFileNameW
PathFindExtensionW
PathRemoveExtensionW
PathRemoveFileSpecW
uxtheme
CloseThemeData
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
IsAppThemed
GetThemePartSize
OpenThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeText
ole32
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
IsAccelerator
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleGetClipboard
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
oleaut32
VariantClear
VariantInit
SysAllocString
LoadTypeLi
SysAllocStringLen
VariantChangeType
SysStringLen
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
OleCreateFontIndirect
VariantCopy
SafeArrayDestroy
gdiplus
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageWidth
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
gdi32
CreateRectRgnIndirect
PatBlt
BitBlt
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
CreateCompatibleBitmap
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
GetViewportOrgEx
GetWindowOrgEx
GetBoundsRect
FillRgn
SetPaletteEntries
ExtFloodFill
SetPixelV
PtInRegion
FrameRgn
RoundRect
CreateRoundRectRgn
OffsetRgn
Rectangle
Polyline
Polygon
CreatePolygonRgn
SetDIBColorTable
StretchBlt
SetPixel
GetTextCharsetInfo
CreateDIBitmap
RectVisible
PtVisible
CreateCompatibleDC
GetLayout
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
LPtoDP
CreateDIBSection
Ellipse
CreateEllipticRgn
GetRgnBox
GetTextColor
GetBkColor
StretchDIBits
DPtoLP
SetRectRgn
GetMapMode
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
RestoreDC
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
winspool.drv
ClosePrinter
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 380KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ