Static task
static1
Behavioral task
behavioral1
Sample
2024-06-16_0c9097eaf623acac9c8247084a70a6c4_bkransomware.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-16_0c9097eaf623acac9c8247084a70a6c4_bkransomware.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-06-16_0c9097eaf623acac9c8247084a70a6c4_bkransomware
-
Size
8.8MB
-
MD5
0c9097eaf623acac9c8247084a70a6c4
-
SHA1
5e0227f023223f5acb1088dbf7b53b95da05c31b
-
SHA256
8d88e4c9c33505e70f5cc8e2b869365ba72266170ec279febd1e99747e238425
-
SHA512
30c7bf2a45721bbe922cb46ee7b12f6ba47c38523c9c7dc79364369bb0677fc1e86568df39dad6b4ff6d3406cbd7374931137bfd09a1b56186a86ed455c5563f
-
SSDEEP
49152:xtEMtuSROPpIP6EuQgfQ/Cdhm2CYA2O7Z5lMAPStEE/grtCnBd9G05eF1W2HzjQh:xtEIjOPpHM25Ul5lM3LsO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-16_0c9097eaf623acac9c8247084a70a6c4_bkransomware
Files
-
2024-06-16_0c9097eaf623acac9c8247084a70a6c4_bkransomware.exe windows:5 windows x86 arch:x86
54e752ddc6ae9fe3b2b53b325a89db1a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
SetFilePointerEx
LoadLibraryW
GetStringTypeW
SetStdHandle
WriteConsoleW
FreeConsole
GetThreadLocale
GetLocaleInfoW
WideCharToMultiByte
GetVersionExW
CreateDirectoryW
GetSystemDirectoryW
ExpandEnvironmentStringsW
FormatMessageW
GetSystemTime
CloseHandle
InitializeCriticalSectionAndSpinCount
GetLastError
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
HeapSize
HeapAlloc
IsDebuggerPresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetProcessHeap
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
VirtualAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
RaiseException
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
CreateFileW
psapi
EnumDeviceDrivers
GetModuleFileNameExW
GetModuleBaseNameW
GetDeviceDriverFileNameW
ole32
ReleaseStgMedium
CoTaskMemFree
CoTaskMemRealloc
secur32
QuerySecurityPackageInfoW
mpr
WNetGetConnectionW
comctl32
PropertySheetW
InitCommonControlsEx
ImageList_Destroy
ImageList_GetImageCount
FlatSB_SetScrollProp
FlatSB_GetScrollInfo
CreateStatusWindowW
ImageList_Write
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_LoadImageW
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_AddMasked
ImageList_GetBkColor
ImageList_ReplaceIcon
ImageList_Add
CreatePropertySheetPageW
user32
InvalidateRect
EndPaint
CreatePopupMenu
KillTimer
GetCursorPos
GetScrollPos
RegisterClassExW
GetClassInfoW
PostThreadMessageW
GetCursor
SetDlgItemInt
SetWindowTextW
CreateIcon
DrawIconEx
CharUpperW
GetIconInfo
oleaut32
CreateErrorInfo
GetErrorInfo
SetErrorInfo
RegisterTypeLi
LoadTypeLi
VarBoolFromStr
VarBstrFromBool
VarBstrFromDate
VarCyFromStr
VarR8FromStr
VarI4FromStr
VariantChangeType
VariantCopy
VariantInit
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SafeArrayCreate
SysStringLen
SysReAllocStringLen
SysAllocStringLen
VariantChangeTypeEx
wininet
HttpQueryInfoW
comdlg32
PrintDlgW
CommDlgExtendedError
GetSaveFileNameW
PageSetupDlgW
Sections
.text Size: 318KB - Virtual size: 317KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 61.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ