Static task
static1
Behavioral task
behavioral1
Sample
2024-06-20_855bbeead81095263a1d62f697fdecfb_bkransomware.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-20_855bbeead81095263a1d62f697fdecfb_bkransomware.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-20_855bbeead81095263a1d62f697fdecfb_bkransomware
-
Size
4.2MB
-
MD5
855bbeead81095263a1d62f697fdecfb
-
SHA1
d77c31bca81371f84628d7ce5a3f7e0699d1a869
-
SHA256
6cee326b83d5d04ec60a6010e6b6db89c8c8b71c8a68b53d7ed16c33c9f2ac8b
-
SHA512
f0651cf6f117fd13cc34fb7dbd0c33697f0c4f3267a906832ef8e00bf728f3870126a7add163534f36c3b7461f8d2c2a5c688969cca505cf034f936532be0c34
-
SSDEEP
49152:CfAERGfBx8OrI8UVLOff0nkIXmtoYMORxnpfw:bERGfBx5rI8UVKff0nkIXcoYMOjpf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-20_855bbeead81095263a1d62f697fdecfb_bkransomware
Files
-
2024-06-20_855bbeead81095263a1d62f697fdecfb_bkransomware.exe windows:5 windows x86 arch:x86
ad65b80cfec865a64868eb813b6d09fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetA
ord6
InitCommonControlsEx
winmm
midiStreamClose
mciSendCommandA
PlaySoundA
zlib
ord40
ord11
ord43
ord42
ord39
kernel32
FatalAppExitA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameW
GetProcessHeap
CreateFileW
DeleteCriticalSection
GetStdHandle
CreateSemaphoreW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
SetStdHandle
AreFileApisANSI
GetModuleHandleExW
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
FlushFileBuffers
SetFilePointerEx
ReadConsoleW
GetConsoleMode
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
GetCurrentThread
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
DecodePointer
IsDebuggerPresent
EncodePointer
IsProcessorFeaturePresent
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
GetCommandLineA
GetCurrentDirectoryW
SetCurrentDirectoryW
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
UnlockFileEx
LockFileEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindClose
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetDateFormatW
LoadLibraryA
GetProcAddress
ExpandEnvironmentStringsA
CreateProcessA
WaitForSingleObjectEx
lstrcatA
lstrcpyA
FormatMessageA
GetExitCodeProcess
LocalFree
GlobalMemoryStatusEx
GetVersionExA
CreateFileA
CloseHandle
SetFilePointer
ReadFile
WriteFile
GlobalFree
GlobalUnlock
GlobalLock
GlobalReAlloc
GlobalAlloc
SetEnvironmentVariableA
GetShortPathNameA
GetWindowsDirectoryA
FindResourceA
GetModuleFileNameA
GetTickCount
GetLocalTime
LoadResource
GetLastError
ExitProcess
GlobalSize
LockResource
lstrlenA
MoveFileA
DeleteFileA
SetCurrentDirectoryA
Sleep
GetTimeFormatW
CompareStringW
LCMapStringW
WriteConsoleW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
SetEndOfFile
OutputDebugStringW
HeapSize
GetConsoleCP
user32
DestroyMenu
IsRectEmpty
GetWindowTextA
DestroyIcon
DragDetect
DrawTextA
SystemParametersInfoA
GetWindow
BringWindowToTop
ReleaseCapture
GetMenuItemRect
RemoveMenu
AppendMenuA
GetSubMenu
EnableMenuItem
DrawMenuBar
EmptyClipboard
SetClipboardData
OpenClipboard
MessageBeep
TrackPopupMenu
CreatePopupMenu
SendDlgItemMessageA
GetDlgItemInt
LoadStringA
DrawIconEx
LoadImageA
ScreenToClient
ClientToScreen
GetCursor
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetWindowDC
SetForegroundWindow
DestroyWindow
DrawEdge
GetParent
GetKeyState
SetWindowLongA
ShowCursor
ValidateRect
GetFocus
IsDlgButtonChecked
CheckRadioButton
SetDlgItemInt
WinHelpA
IsDialogMessageA
LoadIconA
LoadBitmapA
FindWindowA
GetDesktopWindow
SetClassLongA
GetSysColor
GetCursorPos
GetForegroundWindow
InsertMenuA
GetMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
KillTimer
SetTimer
RegisterClipboardFormatA
GetClipboardData
CloseClipboard
SetWindowPos
CreateWindowExA
RegisterClassA
PostQuitMessage
TranslateMessage
GetWindowLongA
MessageBoxA
ShowWindow
PeekMessageA
DispatchMessageA
GetMessageA
SetRect
FrameRect
UpdateWindow
GetSystemMetrics
EnableWindow
GetAsyncKeyState
GetDlgItemTextA
SetDlgItemTextA
MoveWindow
SetCursor
GetWindowRect
GetClientRect
SetWindowTextA
InvalidateRect
EndPaint
BeginPaint
GetDlgItem
EndDialog
DialogBoxParamA
DefWindowProcA
PostMessageA
SendMessageA
LoadCursorA
InflateRect
CopyRect
FillRect
SetCursorPos
ReleaseDC
GetDC
SetFocus
CreateDialogParamA
WaitMessage
SetCapture
gdi32
MoveToEx
SetROP2
SelectObject
LineTo
BitBlt
CreateCompatibleDC
DeleteDC
SetDIBColorTable
CreateCompatibleBitmap
CreatePen
GetStockObject
GetTextExtentPoint32A
CreatePalette
ExtFloodFill
Rectangle
SetTextColor
StretchBlt
Polygon
ExtCreatePen
Ellipse
GetTextMetricsA
GetDeviceCaps
GetDIBits
CreateFontIndirectA
StartDocA
EndDoc
StartPage
EndPage
SetAbortProc
CreateHatchBrush
SetPixel
SelectPalette
RealizePalette
ExtTextOutA
CreateSolidBrush
DeleteObject
GetNearestColor
SetBkColor
SetStretchBltMode
SetBkMode
CreateDIBSection
GetObjectA
TextOutA
SetPixelV
GdiFlush
comdlg32
PrintDlgA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.6MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 554KB - Virtual size: 554KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ