Static task
static1
Behavioral task
behavioral1
Sample
2024-07-09_32198160fda12a2ed5950793ee013060_bkransomware.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-07-09_32198160fda12a2ed5950793ee013060_bkransomware.exe
Resource
win10v2004-20240704-en
General
-
Target
2024-07-09_32198160fda12a2ed5950793ee013060_bkransomware
-
Size
621KB
-
MD5
32198160fda12a2ed5950793ee013060
-
SHA1
21a520f3366e8ca9b9e2abb368f46cc08afa8003
-
SHA256
8ba367ece6f66d37dc6bdb08c345879b39293c41f8363dda5a0c3f93f4da4a05
-
SHA512
ba4152dab4719b552ae72bdff923c42567d6e121bbf47bbe8281d0595e28ac67aa2c694b36903e81d23aa0ef821bfdc74c9991ed9f754766e335f8c06cab6066
-
SSDEEP
12288:0beo/2OP3C0APMpBOyxbbi4eTPF0BhJyc52B0eQsZq+:0yo/2OPC0APMXOyxfeTPFuhJy/0AZq+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-09_32198160fda12a2ed5950793ee013060_bkransomware
Files
-
2024-07-09_32198160fda12a2ed5950793ee013060_bkransomware.exe windows:5 windows x86 arch:x86
39436788dccb4111545d606da401316e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextAlign
GetFontLanguageInfo
GetClipRgn
GetMetaRgn
GetBkColor
SetTextColor
GetTextCharset
GetRandomRgn
GetTextColor
GetObjectType
SetTextAlign
GetTextCharsetInfo
GetDCBrushColor
GetGraphicsMode
SetTextJustification
GetDCPenColor
user32
GetMenuContextHelpId
EndPaint
GetWindowDC
GetDialogBaseUnits
GetDC
GetDlgItemInt
GetDlgItem
GetMenu
CallWindowProcA
EnableWindow
GetWindowLongA
GetMenuCheckMarkDimensions
IsWindowEnabled
GetScrollPos
WindowFromDC
RemovePropA
BeginPaint
LoadIconA
IsWindowUnicode
GetCursor
GetForegroundWindow
SendMessageA
MoveWindow
GetInputState
SetFocus
GetMenuItemID
CheckDlgButton
ShowWindow
EndDialog
PostMessageA
GetMenuItemCount
GetMenuState
GetWindowContextHelpId
GetQueueStatus
kernel32
SetEnvironmentVariableW
SetEndOfFile
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
FlushFileBuffers
WriteConsoleW
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
SetStdHandle
DeleteFileW
CreatePipe
GetExitCodeProcess
WaitForSingleObject
GetFullPathNameW
RaiseException
ReadConsoleW
SetFilePointerEx
GetStringTypeW
GetFileAttributesExW
GetFileType
GetProcAddress
GetModuleHandleA
GetVersion
GlobalFlags
GetFileTime
IsProcessorFeaturePresent
GlobalAlloc
GlobalSize
IsDebuggerPresent
LoadResource
QueryPerformanceCounter
GetCurrentThreadId
GetTickCount
LockResource
GetCurrentProcess
GetLastError
WriteFile
FindClose
GetCurrentProcessId
SetFilePointer
DeleteFileA
CloseHandle
GlobalHandle
GetStdHandle
LocalFlags
MoveFileA
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
SetErrorMode
GetTempPathA
ReadFile
GetFullPathNameA
DuplicateHandle
CreateProcessA
GetTempPathW
GetLocalTime
CreateProcessW
GetCommandLineA
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeZoneInformation
SetEnvironmentVariableA
Sections
.text Size: 551KB - Virtual size: 550KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE