Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_bed002653060dc4ab8bd9b0ebd5fb436_bkransomware.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-06-11_bed002653060dc4ab8bd9b0ebd5fb436_bkransomware.exe
Resource
win10v2004-20240508-en
Target
2024-06-11_bed002653060dc4ab8bd9b0ebd5fb436_bkransomware
Size
1.1MB
MD5
bed002653060dc4ab8bd9b0ebd5fb436
SHA1
b1027f18ceb488e98522ee526f59894b65aad3e2
SHA256
36d9b66bc7def4897ec8b2b744649d429ac5a3080a995a73817354f420649d50
SHA512
51529dddb49bb41924dc1047c106c3ee6831f0a018a1b6b975e2a9b8a12c65b42b4416071e511ecc3e8fead351495ac818cc66e654645b2daa5b7da0b52d7955
SSDEEP
12288:FMgHElQoYpdVy1SMpXMQdSC+3NRk+IeiYeLLU585vqn6vN3BnJm/H3a+m/H3YpG+:dH6NsytpX0CUjmbF5v+6Mf3a3f3Of
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcessImageFileNameW
WinHttpSetCredentials
WinHttpSetStatusCallback
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryOption
WinHttpSetOption
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpQueryDataAvailable
WinHttpQueryAuthSchemes
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpGetProxyForUrl
WNetGetUniversalNameW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
FreeResource
EncodePointer
GetSystemDirectoryW
GlobalUnlock
MulDiv
LoadLibraryA
GlobalFindAtomW
GetThreadLocale
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GlobalFlags
CompareStringW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
FlushFileBuffers
GetVolumeInformationW
LockFile
UnlockFile
DuplicateHandle
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetTickCount
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleExW
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
GlobalAddAtomW
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
GetConsoleCP
GetConsoleMode
OutputDebugStringW
LCMapStringW
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
GetCommandLineW
DecodePointer
RaiseException
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FreeLibrary
GetModuleFileNameW
CloseHandle
WaitForSingleObject
GetCurrentProcessId
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFullPathNameW
CreateEventW
Sleep
GetCurrentThreadId
GetLocalTime
GetEnvironmentVariableW
CreateDirectoryW
GetDriveTypeW
GetFileAttributesExW
GetFileSize
GetStdHandle
GetFileSizeEx
LockFileEx
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
FindResourceW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
LoadLibraryExW
GetCurrentThread
GetModuleHandleA
OutputDebugStringA
GetACP
SetFileTime
GetFileTime
OpenMutexW
CreateMutexW
ReleaseMutex
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ResumeThread
CreateThread
GlobalFree
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
GetTimeZoneInformation
SetFilePointerEx
WideCharToMultiByte
MultiByteToWideChar
GetLocaleInfoW
GetComputerNameW
MoveFileExW
MoveFileW
LoadLibraryW
lstrcmpiW
FormatMessageW
LocalFree
GetProcAddress
GetModuleHandleW
GetVersionExW
GetComputerNameExW
ProcessIdToSessionId
CreateProcessW
GetCurrentProcess
GetOverlappedResult
WriteFile
UnlockFileEx
SetFilePointer
SetFileAttributesW
SetEndOfFile
ReadFile
PostThreadMessageW
InvalidateRgn
CopyAcceleratorTableW
WindowFromPoint
ReleaseCapture
SetCapture
CharUpperW
InvalidateRect
KillTimer
SetTimer
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
SetRectEmpty
IsZoomed
OffsetRect
CharNextW
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextW
RemovePropW
GetPropW
SetPropW
UpdateWindow
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
GetWindowRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
EqualRect
UnregisterClassW
GetActiveWindow
SendMessageW
DrawTextW
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
MapDialogRect
GetWindow
SetWindowContextHelpId
SetWindowPos
GetLastActivePopup
GetWindowLongW
RegisterClipboardFormatW
SetRect
DestroyMenu
MessageBeep
GetNextDlgGroupItem
IsRectEmpty
IntersectRect
RedrawWindow
GetDesktopWindow
EnableWindow
SetForegroundWindow
LoadIconW
GetClientRect
AttachThreadInput
GetForegroundWindow
GetWindowThreadProcessId
IsIconic
GetSystemMetrics
DrawIcon
FillRect
LoadImageW
MessageBoxW
SendDlgItemMessageA
GetParent
UnhookWindowsHookEx
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
PostMessageW
PostQuitMessage
SetCursor
IsWindowEnabled
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetMapMode
GetStockObject
SetTextColor
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetBkColor
GetTextColor
GetTextExtentPoint32W
GetTextMetricsW
GetRgnBox
GetMapMode
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
GetDeviceCaps
CreateBitmap
GetObjectW
CreateSolidBrush
CreateFontIndirectW
DocumentPropertiesW
OpenPrinterW
ClosePrinter
RegQueryValueW
RegEnumKeyW
RegEnumValueW
ConvertSidToStringSidW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
LookupAccountNameW
IsValidSid
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey
ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW
SHDeleteKeyW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
OpenThemeData
CloseThemeData
DrawThemeBackground
DrawThemeParentBackground
CoUninitialize
CoInitialize
CoInitializeEx
CoCreateGuid
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleInitialize
StgCreateDocfileOnILockBytes
OleUninitialize
CoRevokeClassObject
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
VariantChangeType
OleCreateFontIndirect
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantClear
VariantCopy
VariantInit
SysAllocString
SysFreeString
SysAllocStringLen
RSA_DecodeMsg
RSA_EncodeMsg
RSA_RawPrivate
RSA_RawPublic
RSA_CheckKey
RSA_FromXMLString
RSA_KeyBytes
OleUIBusyW
inet_ntoa
LresultFromObject
CreateStdAccessibleObject
CertGetIssuerCertificateFromStore
CertOpenStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CertOpenSystemStoreW
GetUserNameExW
?setErrorHandler@XercesDOMParser@xercesc_2_8@@QAEXQAVErrorHandler@2@@Z
?resetDocumentPool@XercesDOMParser@xercesc_2_8@@QAEXXZ
?getDOMImplementation@DOMImplementationRegistry@xercesc_2_8@@SAPAVDOMImplementation@2@PB_W@Z
??0MemBufInputSource@xercesc_2_8@@QAE@QBEIQB_W_NQAVMemoryManager@1@@Z
??1MemBufInputSource@xercesc_2_8@@UAE@XZ
?TextDecl@AbstractDOMParser@xercesc_2_8@@UAEXQB_W0@Z
?XMLDecl@AbstractDOMParser@xercesc_2_8@@UAEXQB_W000@Z
?attDef@AbstractDOMParser@xercesc_2_8@@UAEXABVDTDElementDecl@2@ABVDTDAttDef@2@_N@Z
?createElementNSNode@AbstractDOMParser@xercesc_2_8@@MAEPAVDOMElement@2@PB_W0@Z
?docCharacters@AbstractDOMParser@xercesc_2_8@@UAEXQB_WI_N@Z
?docComment@AbstractDOMParser@xercesc_2_8@@UAEXQB_W@Z
?docPI@AbstractDOMParser@xercesc_2_8@@UAEXQB_W0@Z
?doctypeComment@AbstractDOMParser@xercesc_2_8@@UAEXQB_W@Z
?doctypeDecl@AbstractDOMParser@xercesc_2_8@@UAEXABVDTDElementDecl@2@QB_W1_N2@Z
?doctypePI@AbstractDOMParser@xercesc_2_8@@UAEXQB_W0@Z
?doctypeWhitespace@AbstractDOMParser@xercesc_2_8@@UAEXQB_WI@Z
?elementDecl@AbstractDOMParser@xercesc_2_8@@UAEXABVDTDElementDecl@2@_N@Z
?elementTypeInfo@AbstractDOMParser@xercesc_2_8@@UAEXQB_W0@Z
?endAttList@AbstractDOMParser@xercesc_2_8@@UAEXABVDTDElementDecl@2@@Z
?endDocument@AbstractDOMParser@xercesc_2_8@@UAEXXZ
?endElement@AbstractDOMParser@xercesc_2_8@@UAEXABVXMLElementDecl@2@I_NQB_W@Z
?endEntityReference@AbstractDOMParser@xercesc_2_8@@UAEXABVXMLEntityDecl@2@@Z
?endExtSubset@AbstractDOMParser@xercesc_2_8@@UAEXXZ
?endInputSource@XercesDOMParser@xercesc_2_8@@UAEXABVInputSource@2@@Z
?endIntSubset@AbstractDOMParser@xercesc_2_8@@UAEXXZ
?entityDecl@AbstractDOMParser@xercesc_2_8@@UAEXABVDTDEntityDecl@2@_N1@Z
?error@XercesDOMParser@xercesc_2_8@@UAEXIQB_WW4ErrTypes@XMLErrorReporter@2@000JJ@Z
?expandSystemId@XercesDOMParser@xercesc_2_8@@UAE_NQB_WAAVXMLBuffer@2@@Z
?getEncoding@InputSource@xercesc_2_8@@UBEPB_WXZ
?getIssueFatalErrorIfNotFound@InputSource@xercesc_2_8@@UBE_NXZ
?getPublicId@InputSource@xercesc_2_8@@UBEPB_WXZ
?getSystemId@InputSource@xercesc_2_8@@UBEPB_WXZ
?handleAttributesPSVI@AbstractDOMParser@xercesc_2_8@@UAEXQB_W0PAVPSVIAttributeList@2@@Z
?handleElementPSVI@AbstractDOMParser@xercesc_2_8@@UAEXQB_W0PAVPSVIElement@2@@Z
?handlePartialElementPSVI@AbstractDOMParser@xercesc_2_8@@UAEXQB_W0PAVPSVIElement@2@@Z
?ignorableWhitespace@AbstractDOMParser@xercesc_2_8@@UAEXQB_WI_N@Z
?makeStream@MemBufInputSource@xercesc_2_8@@UBEPAVBinInputStream@2@XZ
?notationDecl@AbstractDOMParser@xercesc_2_8@@UAEXABVXMLNotationDecl@2@_N@Z
?resetDocType@AbstractDOMParser@xercesc_2_8@@UAEXXZ
??1XercesDOMParser@xercesc_2_8@@UAE@XZ
?resetEntities@XercesDOMParser@xercesc_2_8@@UAEXXZ
?resetErrors@XercesDOMParser@xercesc_2_8@@UAEXXZ
?resolveEntity@XercesDOMParser@xercesc_2_8@@UAEPAVInputSource@2@PAVXMLResourceIdentifier@2@@Z
?resolveEntity@XercesDOMParser@xercesc_2_8@@UAEPAVInputSource@2@QB_W00@Z
?setEncoding@InputSource@xercesc_2_8@@UAEXQB_W@Z
?setIssueFatalErrorIfNotFound@InputSource@xercesc_2_8@@UAEX_N@Z
?setPSVIHandler@AbstractDOMParser@xercesc_2_8@@UAEXQAVPSVIHandler@2@@Z
?setPublicId@InputSource@xercesc_2_8@@UAEXQB_W@Z
?setSystemId@InputSource@xercesc_2_8@@UAEXQB_W@Z
?startAttList@AbstractDOMParser@xercesc_2_8@@UAEXABVDTDElementDecl@2@@Z
?startDocument@AbstractDOMParser@xercesc_2_8@@UAEXXZ
?startElement@AbstractDOMParser@xercesc_2_8@@UAEXABVXMLElementDecl@2@IQB_WABV?$RefVectorOf@VXMLAttr@xercesc_2_8@@@2@I_N3@Z
?startEntityReference@AbstractDOMParser@xercesc_2_8@@UAEXABVXMLEntityDecl@2@@Z
?startExtSubset@AbstractDOMParser@xercesc_2_8@@UAEXXZ
?startInputSource@XercesDOMParser@xercesc_2_8@@UAEXABVInputSource@2@@Z
?startIntSubset@AbstractDOMParser@xercesc_2_8@@UAEXXZ
?fgXercescDefaultLocale@XMLUni@xercesc_2_8@@2QBDB
?fgMemoryManager@XMLPlatformUtils@xercesc_2_8@@2PAVMemoryManager@2@A
?release@XMLString@xercesc_2_8@@SAXPAPAXQAVMemoryManager@2@@Z
??1ErrorHandler@xercesc_2_8@@UAE@XZ
??_7ErrorHandler@xercesc_2_8@@6B@
?parse@AbstractDOMParser@xercesc_2_8@@QAEXQB_W@Z
?parse@AbstractDOMParser@xercesc_2_8@@QAEXABVInputSource@2@@Z
?setValidationSchemaFullChecking@AbstractDOMParser@xercesc_2_8@@QAEX_N@Z
?setDoSchema@AbstractDOMParser@xercesc_2_8@@QAEX_N@Z
?setValidationScheme@AbstractDOMParser@xercesc_2_8@@QAEXW4ValSchemes@12@@Z
?setDoNamespaces@AbstractDOMParser@xercesc_2_8@@QAEX_N@Z
?getErrorCount@AbstractDOMParser@xercesc_2_8@@QBEHXZ
?getDocument@AbstractDOMParser@xercesc_2_8@@QAEPAVDOMDocument@2@XZ
?adoptDocument@AbstractDOMParser@xercesc_2_8@@QAEPAVDOMDocument@2@XZ
?Terminate@XMLPlatformUtils@xercesc_2_8@@SAXXZ
??3XMemory@xercesc_2_8@@SAXPAX@Z
??2XMemory@xercesc_2_8@@SAPAXI@Z
?resetDocument@AbstractDOMParser@xercesc_2_8@@UAEXXZ
??0XercesDOMParser@xercesc_2_8@@QAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z
?Initialize@XMLPlatformUtils@xercesc_2_8@@SAXQBD0QAVPanicHandler@2@QAVMemoryManager@2@_N@Z
SHA2_BytesHash
AES_Bytes
RAN_Long
BLF_Bytes
SHA1_BytesHexHash
ZLIB_Inflate
GetAdaptersInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ