Static task
static1
Behavioral task
behavioral1
Sample
2024-07-26_f93131af8f7b5821a543570e075aab50_bkransomware.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-07-26_f93131af8f7b5821a543570e075aab50_bkransomware.exe
Resource
win10v2004-20240709-en
General
-
Target
2024-07-26_f93131af8f7b5821a543570e075aab50_bkransomware
-
Size
551KB
-
MD5
f93131af8f7b5821a543570e075aab50
-
SHA1
b252d51d995437b0a83c451c1a47f65c546a2a81
-
SHA256
747cbf57dd0bb1897fcddbaea6f1d7a75d713aba5e605df7dd492a479fc0131e
-
SHA512
27ada957efe25819a863f9e5c88b5e5aab92b47f8d8a1d99180871f46e6bde615762390aa39a7ba3e6f659e64cbc32889b4bc7ca2124393072007280a6010a35
-
SSDEEP
12288:yO5A3+gbytIcYm8fxZlu/EZCCvveTkLtjM1WBVwdlOEN:HA3qvYm8fxZk/EZCCvvbZGcCdk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-26_f93131af8f7b5821a543570e075aab50_bkransomware
Files
-
2024-07-26_f93131af8f7b5821a543570e075aab50_bkransomware.exe windows:5 windows x86 arch:x86
da49cd964c8c15e1ecb160223f148ce8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetSystemPaletteUse
GetTextCharacterExtra
SetTextCharacterExtra
GetNearestPaletteIndex
GetGraphicsMode
GetTextCharset
GetDCPenColor
GetTextCharsetInfo
GetTextAlign
GetFontUnicodeRanges
GetMetaRgn
GetTextColor
SetTextAlign
GetDeviceCaps
GetNearestColor
SetPixel
GetClipRgn
GetFontLanguageInfo
GetCurrentObject
GetMapMode
SetTextColor
GetObjectType
SetSystemPaletteUse
SetTextJustification
GetPixelFormat
GetPolyFillMode
GetDCBrushColor
GetRandomRgn
UpdateColors
GetStretchBltMode
user32
MoveWindow
LoadIconA
CheckDlgButton
GetWindowContextHelpId
GetMenuCheckMarkDimensions
RemovePropA
GetPropA
IsWindowEnabled
EnableWindow
EndPaint
GetCursor
EndDialog
GetMenuItemCount
GetMenuContextHelpId
GetMenu
GetScrollPos
GetMenuState
GetDialogBaseUnits
GetDlgItemInt
SetFocus
SetWindowTextA
IsWindowUnicode
ShowWindow
GetDlgItem
WindowFromDC
GetMenuItemID
GetWindowDC
CallWindowProcA
PostMessageA
GetQueueStatus
GetInputState
kernel32
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
SetStdHandle
OutputDebugStringW
QueryPerformanceCounter
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetFileAttributesExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
ReadConsoleW
ReadFile
CreatePipe
GetExitCodeProcess
WaitForSingleObject
GetProcAddress
GetCurrentProcessId
LocalFlags
GetLastError
DeleteFileA
FindResourceA
WriteFile
GetModuleHandleA
MoveFileA
GetVersion
SetFilePointer
GlobalSize
GetCurrentThreadId
LockResource
FindClose
GlobalHandle
GetFileType
GetCurrentProcess
IsDebuggerPresent
GetDriveTypeA
CloseHandle
LoadResource
GlobalFlags
GetTickCount
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetTempPathA
GetFullPathNameA
GetTimeZoneInformation
DeleteFileW
DuplicateHandle
CreateProcessA
GetCommandLineA
IsProcessorFeaturePresent
GetProcessHeap
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
SetLastError
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetDriveTypeW
RaiseException
FlushFileBuffers
GetStringTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFilePointerEx
SetEndOfFile
Sections
.text Size: 495KB - Virtual size: 494KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE