Static task
static1
Behavioral task
behavioral1
Sample
2024-07-07_1dafbe91fbadd4d1d215317cc0a17126_bkransomware.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-07-07_1dafbe91fbadd4d1d215317cc0a17126_bkransomware.exe
Resource
win10v2004-20240704-en
General
-
Target
2024-07-07_1dafbe91fbadd4d1d215317cc0a17126_bkransomware
-
Size
576KB
-
MD5
1dafbe91fbadd4d1d215317cc0a17126
-
SHA1
bc1b528056d1b34bbb89b0a53034bc1ff9bbebed
-
SHA256
721e85174ba87bc82d59b67bc6462f8e9aabe5a370d3c310d59ce4eb5c64a597
-
SHA512
1e6f7a14f8c8c853d9509851d57b711ea7416403650799d44a0c94a7a72f29116f9bc66f559044d40cab43eaf61773543bb9651d3e459fa0dd332fc22568fe37
-
SSDEEP
12288:xGTG0P6csRu5MhZI7vT6v5wupDFInuW5ExbtOY:xGCxcsRu5Mhu7vK5lZInlC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-07_1dafbe91fbadd4d1d215317cc0a17126_bkransomware
Files
-
2024-07-07_1dafbe91fbadd4d1d215317cc0a17126_bkransomware.exe windows:5 windows x86 arch:x86
79a2d207539510714cd893195cac0ea2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetRandomRgn
GetCurrentObject
GetMapMode
GetFontLanguageInfo
GetDeviceCaps
SetSystemPaletteUse
GetTextCharsetInfo
GetStretchBltMode
GetFontUnicodeRanges
GetMetaRgn
GetPixelFormat
GetNearestPaletteIndex
GetBkColor
GetDCPenColor
SetTextJustification
GetNearestColor
SetTextColor
GetDCBrushColor
SetTextCharacterExtra
GetGraphicsMode
GetTextAlign
GetObjectType
SetTextAlign
user32
CallWindowProcA
GetInputState
GetMenuItemCount
GetDialogBaseUnits
GetMenuState
GetMenuCheckMarkDimensions
GetWindowDC
GetKeyboardType
SetFocus
IsWindowUnicode
EndDialog
GetMenu
GetWindowLongA
GetPropA
EnableWindow
CheckDlgButton
GetMenuContextHelpId
GetDlgItemInt
BeginPaint
GetWindowContextHelpId
GetScrollPos
RemovePropA
WindowFromDC
SetDlgItemTextA
GetDC
LoadIconA
GetDlgItem
GetCursor
GetForegroundWindow
kernel32
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
ReadConsoleW
SetEnvironmentVariableA
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
CreateFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
OutputDebugStringW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
FindClose
DeleteFileW
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
DeleteFileA
IsDebuggerPresent
CloseHandle
LockResource
MoveFileA
GetCurrentProcess
GlobalHandle
LoadResource
GetTickCount
GlobalSize
GetLastError
GetFileTime
GetProcessHeap
GetDriveTypeA
FlushFileBuffers
GetModuleHandleA
WriteFile
QueryPerformanceCounter
GetFileType
GetStdHandle
SetFilePointer
SizeofResource
GlobalAlloc
IsProcessorFeaturePresent
FindResourceA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetTempPathW
GetLocalTime
GetFullPathNameA
DeleteCriticalSection
GetTempPathA
GetSystemTimeAsFileTime
GetCommandLineA
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetFilePointerEx
GetStringTypeW
GetFileAttributesExW
SetStdHandle
RaiseException
ReadFile
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDriveTypeW
SetEndOfFile
Sections
.text Size: 518KB - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE