Static task
static1
Behavioral task
behavioral1
Sample
2024-07-22_fbe41ceacbcc05da7c13663daae53f23_bkransomware.exe
Resource
win7-20240704-en
General
-
Target
2024-07-22_fbe41ceacbcc05da7c13663daae53f23_bkransomware
-
Size
6.8MB
-
MD5
fbe41ceacbcc05da7c13663daae53f23
-
SHA1
513c259a5add75bf04f406a282bcbb864dd5dff6
-
SHA256
298b0ca53e0933e124135186477f5723d24d07f7690e287ed0da2b7fc5ba01c4
-
SHA512
8ee434e9543e5524ce98bbc174500aa6a44edcbb3196cb4a58a1e0e3a549a07e142fc4a8044740d9ec695b9aaaef56be68fd44ea0cee80e9607c7cbfb770b6b2
-
SSDEEP
98304:Kw2jdqEaSakL0KMygQdWP2zawk0Ji9p9gfplK76S6Yls/CxqWEfBoiwxTNIVTW:Kw257BLxg9sacIqplK736ks/WED6RI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-22_fbe41ceacbcc05da7c13663daae53f23_bkransomware
Files
-
2024-07-22_fbe41ceacbcc05da7c13663daae53f23_bkransomware.exe windows:6 windows x86 arch:x86
8ac3a6fddbd6c621c8b2b32e5ee61085
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
GetConsoleCP
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
WaitForSingleObjectEx
SetEvent
ReadFile
HeapAlloc
LoadLibraryExW
CreateThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCPInfo
RtlUnwind
RaiseException
GetCommandLineW
HeapFree
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentThread
WaitForSingleObject
DuplicateHandle
CloseHandle
WideCharToMultiByte
SetFilePointerEx
OutputDebugStringW
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualFree
VirtualProtect
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
SetStdHandle
WriteConsoleW
ReadConsoleW
CreateFileW
lstrcpyW
DeleteFileW
GetVersion
FileTimeToLocalFileTime
WinExec
IsDebuggerPresent
GetThreadPriority
EnumResourceTypesW
GetSystemInfo
DeviceIoControl
EnumResourceNamesW
GetExitCodeThread
VirtualAlloc
GetLastError
GetCPInfoExW
WritePrivateProfileStringW
SetThreadPriority
ExitThread
FileTimeToSystemTime
GetFileAttributesW
FormatMessageW
Sleep
LoadLibraryW
GetSystemDirectoryW
GetCommandLineA
GetTickCount
SignalObjectAndWait
GetUserDefaultLCID
CreateDirectoryW
CompareFileTime
GetCurrentProcess
FindResourceW
GetDriveTypeW
SetFilePointer
EncodePointer
GetSystemDefaultLangID
SwitchToThread
lstrcpynW
HeapDestroy
SizeofResource
GetPrivateProfileStringW
RtlCaptureContext
FindFirstFileW
CreateTimerQueue
user32
PostMessageW
MsgWaitForMultipleObjects
IsZoomed
GetKeyState
GetSubMenu
MapDialogRect
GetMenuStringW
GetClientRect
DrawTextExW
SetKeyboardState
RegisterWindowMessageW
GetMessageW
RegisterClassA
TranslateMDISysAccel
HideCaret
SetWindowRgn
GetDlgItemInt
GetMenuItemInfoW
ShowCaret
ShowCursor
GetKeyboardState
SetDlgItemInt
GetWindowTextA
MessageBoxA
GetWindowLongW
ReleaseDC
EnableMenuItem
GetDlgItem
SetWindowLongW
EndDialog
DefWindowProcA
GetSysColor
ShowWindow
IsWindow
FlashWindow
GetKeyboardType
CreateWindowExW
CheckRadioButton
SetCaretPos
SendMessageW
MapWindowPoints
UpdateWindow
LoadCursorA
SetScrollInfo
CheckMenuItem
GetWindow
DialogBoxParamA
GetMessageA
GetWindowRect
SendDlgItemMessageA
CharNextW
TrackPopupMenu
KillTimer
SetParent
WaitMessage
GetDC
GetWindowPlacement
OffsetRect
GetKeyboardLayout
UnregisterClassA
SetClassLongA
SendDlgItemMessageW
GetDesktopWindow
CheckDlgButton
SetMenu
GetSysColorBrush
IsDlgButtonChecked
CreateCaret
PostMessageA
SystemParametersInfoA
ScrollWindowEx
RegisterClassW
InsertMenuA
SetWindowTextA
EnableWindow
GetDlgItemTextA
gdi32
GetCharABCWidthsFloatA
Polyline
GetClipBox
RoundRect
CreateDIBitmap
GetPixel
EndDoc
CreateSolidBrush
TextOutA
PatBlt
LineTo
MaskBlt
CreateFontA
GetTextExtentExPointA
DeleteObject
SelectClipRgn
PolyPolyline
CreateRectRgnIndirect
Rectangle
GetCurrentPositionEx
SelectPalette
SetPaletteEntries
CreateRectRgn
GetStockObject
RestoreDC
UpdateColors
TranslateCharsetInfo
BitBlt
EndPage
ExtCreatePen
CreateBrushIndirect
CreateCompatibleBitmap
GetPaletteEntries
SetPixel
ExcludeClipRect
CopyEnhMetaFileA
SetDIBColorTable
GetDIBits
CreateFontIndirectW
CreatePalette
GetDIBColorTable
comdlg32
GetOpenFileNameW
FindTextW
advapi32
GetLengthSid
ChangeServiceConfigW
RegGetKeySecurity
RegQueryInfoKeyW
EqualSid
RegUnLoadKeyW
RegSetValueExW
RegConnectRegistryW
QueryServiceStatus
CopySid
shell32
ShellExecuteW
Shell_NotifyIconW
ole32
CoInitialize
oleaut32
SafeArrayPtrOfIndex
SysAllocStringLen
VariantInit
VariantCopy
VariantClear
SafeArrayGetUBound
SafeArrayCreate
Sections
.text Size: 728KB - Virtual size: 727KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ