Static task
static1
Behavioral task
behavioral1
Sample
2024-07-01_84da5fc2f43e551848349f0d0d3faca4_bkransomware.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-07-01_84da5fc2f43e551848349f0d0d3faca4_bkransomware.exe
Resource
win10v2004-20240611-en
General
-
Target
2024-07-01_84da5fc2f43e551848349f0d0d3faca4_bkransomware
-
Size
6.7MB
-
MD5
84da5fc2f43e551848349f0d0d3faca4
-
SHA1
cf0078c71fb1ef9743451b6a20d9aa0306e697db
-
SHA256
1989cb898e0e397b9acc16c453c94cf3f1873573979d36873182b18b8da86938
-
SHA512
9a605654c70dc27ae52760b2ced4aa3eedda6e98919ef96d9615c754f07e12c1748f6f978ffc916cb693e7788b21dc101a2442e3251f9a598aa223d9ead238bd
-
SSDEEP
196608:SCv+HgNF6eJ//ullmSLZb7qRZlVqxlpo55IZVLTtXRr:0+ZXymSdq3l49o4fLTtB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-01_84da5fc2f43e551848349f0d0d3faca4_bkransomware
Files
-
2024-07-01_84da5fc2f43e551848349f0d0d3faca4_bkransomware.exe windows:6 windows x86 arch:x86
48bc1532f4480edb440b7e2fb4f59c94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
OutputDebugStringW
FreeEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsDebuggerPresent
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
CreateTimerQueue
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryW
SetStdHandle
ExpandEnvironmentStringsW
TlsAlloc
FindNextFileW
CreateEventW
IsDBCSLeadByteEx
GlobalUnlock
GetSystemDirectoryA
ExitProcess
TerminateProcess
CreateProcessA
Beep
GetFileAttributesA
Sleep
GetCommandLineA
GetWindowsDirectoryA
ExpandEnvironmentStringsA
GetCurrentThread
SetCommBreak
WaitNamedPipeA
LoadLibraryExW
SetEndOfFile
VirtualQuery
GetEnvironmentVariableW
GetCommandLineW
TlsFree
EnumSystemLocalesW
OpenFileMappingA
GetThreadTimes
GetModuleFileNameA
CreatePipe
CreateFileMappingA
LoadLibraryA
ResetEvent
FindClose
RaiseException
FlushFileBuffers
CreateFileW
MulDiv
GetSystemTimeAdjustment
InitializeCriticalSectionAndSpinCount
TlsSetValue
GetProcessTimes
ConnectNamedPipe
GetEnvironmentStringsW
InitializeSListHead
GetCurrentProcess
FreeLibrary
IsValidCodePage
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TlsGetValue
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
HeapFree
WriteConsoleW
user32
DestroyWindow
GetMessageW
PostQuitMessage
SendDlgItemMessageA
TrackPopupMenu
SetCapture
KillTimer
LoadStringA
RemovePropA
CreateMenu
SetFocus
BeginPaint
CreateIconIndirect
GetCapture
GetKeyboardLayout
MessageBoxA
UnionRect
GetWindowLongA
SetClassLongA
EndDialog
DestroyCursor
ShowWindow
CreateCaret
CreateWindowExW
BeginDeferWindowPos
SendMessageW
UpdateWindow
EndMenu
ToUnicode
DestroyIcon
ValidateRect
CheckMenuItem
CopyRect
ClientToScreen
EnableScrollBar
ToAsciiEx
SetCursor
HideCaret
MapDialogRect
CreateDialogParamA
IsIconic
SetKeyboardState
IsZoomed
GetWindowInfo
MessageBeep
SetParent
GetDC
GetQueueStatus
SetPropA
GetScrollInfo
SystemParametersInfoW
SetScrollPos
DrawStateW
GetDesktopWindow
SetMenu
CreatePopupMenu
IsDlgButtonChecked
AppendMenuA
PostMessageA
MessageBoxW
InsertMenuA
EnableWindow
DrawFrameControl
TranslateMDISysAccel
RegisterClassA
IsRectEmpty
gdi32
SetWindowOrgEx
TranslateCharsetInfo
LineTo
MaskBlt
CreateHatchBrush
DeleteDC
CreateFontA
SetBkColor
SetDIBColorTable
GdiFlush
CreateHalftonePalette
GetEnhMetaFileHeader
SetPixel
CreateCompatibleDC
CreateRectRgnIndirect
CombineRgn
Ellipse
GetObjectType
GetBkColor
CreateBitmapIndirect
SelectPalette
GetTextExtentExPointA
GetCharABCWidthsFloatA
GetSystemPaletteEntries
Polyline
SetTextAlign
IntersectClipRect
EndDoc
GetStockObject
SetWinMetaFileBits
CreateSolidBrush
TextOutA
CreateDIBitmap
CreatePolygonRgn
EndPage
SetLayout
SetWindowExtEx
SetTextColor
GetCharacterPlacementW
GetDeviceCaps
CreateFontIndirectA
GetRegionData
PtInRegion
SetMapMode
CreateCompatibleBitmap
Rectangle
GetTextExtentPointA
CreatePatternBrush
CreatePen
SetROP2
RectVisible
RoundRect
CreateEnhMetaFileW
PlayEnhMetaFile
advapi32
AdjustTokenPrivileges
GetLengthSid
RegDeleteValueA
EqualSid
RegDeleteKeyA
SetSecurityDescriptorDacl
Sections
.text Size: 700KB - Virtual size: 700KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oPCw Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ