Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_de9bbba3c15d1b9d01c9c0930260fca4_bkransomware.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-11_de9bbba3c15d1b9d01c9c0930260fca4_bkransomware.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-11_de9bbba3c15d1b9d01c9c0930260fca4_bkransomware
-
Size
6.6MB
-
MD5
de9bbba3c15d1b9d01c9c0930260fca4
-
SHA1
c5089e13be50e8e567fd0234cbeb60fe9bc895b1
-
SHA256
9ab0ec0cb725c32ba4412ccc20b97e76fb3f7ca4d29bc74177b8e478fc5914c2
-
SHA512
ac6b6055c09f2b950493c2b1efac78ca78b8d3540da0d722addb4909b5184e524dde6d58ef8358e96b08afbdb7a60b32b85770269eb01167bd5df6059a01dde8
-
SSDEEP
196608:xQC8jpiOt2HAlwzMsqcOf1dK5DMWfChgTG:xQzpiOAgRsqcOrilfI6G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-11_de9bbba3c15d1b9d01c9c0930260fca4_bkransomware
Files
-
2024-06-11_de9bbba3c15d1b9d01c9c0930260fca4_bkransomware.exe windows:6 windows x86 arch:x86
1715fe6b4a5471275a855f3415e7352c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
Sleep
DeleteFileW
GetVersion
IsDebuggerPresent
EnumResourceTypesW
RemoveDirectoryW
GetCPInfoExW
VerifyVersionInfoW
GetTempPathW
ExitThread
HeapCreate
FileTimeToSystemTime
LoadLibraryW
CompareFileTime
VirtualQueryEx
GetSystemDefaultUILanguage
RtlCaptureContext
WinExec
GetDiskFreeSpaceW
GetVersionExW
GetUserDefaultLangID
VirtualAlloc
LoadResource
GetACP
IsValidCodePage
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
ExitProcess
GetModuleHandleExW
CreateFileW
user32
GetMessageW
ShowWindow
CreateWindowExW
SendMessageW
UpdateWindow
DestroyWindow
GetDlgItemInt
CharNextW
PostMessageW
IsZoomed
RemovePropA
CharLowerBuffW
SetParent
SetFocus
GetWindowTextLengthA
BeginPaint
GetWindowTextA
TrackPopupMenu
MonitorFromWindow
CreatePopupMenu
IsDlgButtonChecked
PostMessageA
GetDlgItemTextW
SetMenuItemInfoW
SetCursor
SetTimer
DeleteMenu
ModifyMenuW
GetDC
GetWindowPlacement
GetKeyboardLayout
PeekMessageA
ScrollWindow
SendDlgItemMessageW
GetDesktopWindow
IsWindow
InsertMenuW
ReleaseCapture
ScrollWindowEx
GetDlgCtrlID
DialogBoxParamA
CheckMenuItem
GetWindowLongW
gdi32
EndPage
ExcludeClipRect
CreatePalette
CreatePenIndirect
SelectPalette
GetSystemPaletteEntries
RectVisible
RoundRect
UpdateColors
CreateSolidBrush
GetBitmapBits
TranslateCharsetInfo
GetWindowOrgEx
SetBkColor
DeleteObject
GetPaletteEntries
CreateCompatibleDC
GetTextExtentExPointA
SetTextAlign
TextOutA
MoveToEx
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
GetUserNameA
InitializeSecurityDescriptor
EqualSid
CopySid
ControlService
OpenSCManagerW
RegUnLoadKeyW
shell32
ShellExecuteExW
oleaut32
SafeArrayPtrOfIndex
SafeArrayCreate
VariantInit
VariantCopy
Sections
.text Size: 643KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ