Static task
static1
Behavioral task
behavioral1
Sample
2024-06-29_716700a41bcf0ec13d58e96ca16b355c_bkransomware.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-29_716700a41bcf0ec13d58e96ca16b355c_bkransomware.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-29_716700a41bcf0ec13d58e96ca16b355c_bkransomware
-
Size
589KB
-
MD5
716700a41bcf0ec13d58e96ca16b355c
-
SHA1
358ab0cb52c41b64d5d09b9727751bd3ce8598a0
-
SHA256
1ccc494589ad54e1d205b2e9008c57475beab0017cd7ce5712770509b7406084
-
SHA512
b46b9207f7f8cb5739c74051a99fede8ad6c35afacbb35f2868fd797efee25cd144eabdba682c860f55befe369f33a2dec8ef2bb8a767485ca614168e475f849
-
SSDEEP
12288:6Wz5JoWpo9BZDDUiz9dYk04GxlwPCErIim5Tsn:6Wz8Wpo9vDoi7GwPCEcHU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-29_716700a41bcf0ec13d58e96ca16b355c_bkransomware
Files
-
2024-06-29_716700a41bcf0ec13d58e96ca16b355c_bkransomware.exe windows:5 windows x86 arch:x86
caca9027da6ec2fe19a028123c50817b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetMetaRgn
GetMapMode
GetBkColor
GetNearestColor
GetFontLanguageInfo
GetFontUnicodeRanges
SetPixel
GetTextCharsetInfo
GetCurrentObject
GetClipRgn
SetSystemPaletteUse
GetDeviceCaps
GetTextColor
GetGraphicsMode
GetPolyFillMode
SetTextAlign
SetTextColor
GetSystemPaletteUse
SetTextJustification
user32
GetPropA
GetMenuItemCount
GetWindowLongA
GetCursor
GetForegroundWindow
MoveWindow
PostMessageA
IsWindowUnicode
LoadIconA
GetMenuContextHelpId
GetDC
BeginPaint
GetMenuItemID
GetMenuState
EndPaint
GetScrollPos
GetDialogBaseUnits
GetWindowDC
GetMenu
SetFocus
DrawTextA
GetMenuCheckMarkDimensions
GetDlgItem
GetWindowContextHelpId
IsWindowEnabled
GetInputState
GetDlgItemInt
GetKeyboardType
WindowFromDC
ShowWindow
GetQueueStatus
CheckDlgButton
SetWindowTextA
kernel32
ReadConsoleW
GetTimeZoneInformation
WriteConsoleW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
SetEnvironmentVariableW
SetEnvironmentVariableA
GetFullPathNameW
SetStdHandle
GetFileAttributesExW
SetFilePointerEx
ReadFile
RaiseException
CreatePipe
GetExitCodeProcess
WaitForSingleObject
GetStringTypeW
GetModuleHandleA
GetProcAddress
GlobalHandle
GetCurrentThreadId
GlobalAlloc
IsDebuggerPresent
GetProcessHeap
MoveFileA
QueryPerformanceCounter
GetVersion
CloseHandle
SizeofResource
DeleteFileA
FindResourceA
GetCurrentProcess
FlushFileBuffers
GetDriveTypeA
GlobalSize
GetCurrentProcessId
GetLastError
GlobalFlags
GetTickCount
LockResource
SetFilePointer
IsProcessorFeaturePresent
GetFileTime
LoadResource
FindClose
WriteFile
HeapFree
HeapAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetSystemTimeAsFileTime
HeapReAlloc
DuplicateHandle
CreateProcessA
GetLocalTime
GetTempPathA
CreateProcessW
GetCommandLineA
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
RtlUnwind
GetCurrentThread
GetConsoleCP
GetConsoleMode
DeleteFileW
GetFileType
GetFullPathNameA
SetEndOfFile
Sections
.text Size: 517KB - Virtual size: 517KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE