2024-08-05_b5e2be7065d98df070ddef9fcb2a137f_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-05_b5e2be7065d98df070ddef9fcb2a137f_bkransomware
Size

2.5MB
MD5

b5e2be7065d98df070ddef9fcb2a137f
SHA1

27a112083c99566680ceee39faa9d623621420c7
SHA256

0a8be83c555a402decf3321dedfb0b923067e7bdaaaac03a4ad1fdacb13f2d23
SHA512

3a472858c0047d3ff1ab77813ab17bfc4e69e19f3d928f91396d6065b89d1b2ee645a4eb66e1aacb5f04014f10da4250dd7058af621e3eecceb635dac538edb8
SSDEEP

49152:VJsE843+kr3AVy6fr1VkiuIvIGhVYwbPuJ6IBxTUhyzUhgiM76t4Zb+YktHRFcbc:cE89kr3sTfBSt6IGhGwbPlIHTUhyzUNI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-05_b5e2be7065d98df070ddef9fcb2a137f_bkransomware

Files

2024-08-05_b5e2be7065d98df070ddef9fcb2a137f_bkransomware
.exe windows:5 windows x86 arch:x86

5291b60ec462ae43a5bbba57a0887531

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Jenkins\.jenkins\workspace\BkavUtil\Release\BkavUninstallAV.pdb

Imports

kernel32

GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetACP
GetStringTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
WriteConsoleW
SetEnvironmentVariableA
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsValidCodePage
SetUnhandledExceptionFilter
TerminateProcess
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
ExitThread
Sleep
GetModuleHandleExW
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineW
FindResourceExW
VirtualProtect
GetWindowsDirectoryW
GetProfileIntW
GetTickCount
GetTempPathW
GetTempFileNameW
SearchPathW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
GetFileAttributesW
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
DeleteFileW
GetCurrentDirectoryW
GetThreadLocale
FileTimeToSystemTime
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalGetAtomNameW
GetCurrentProcessId
ResumeThread
SetThreadPriority
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetCurrentThread
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
MultiByteToWideChar
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
GetModuleHandleA
FreeResource
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
OutputDebugStringA
GetFileSize
InitializeCriticalSection
GetModuleFileNameW
ReleaseMutex
CreateMutexW
DeleteCriticalSection
DecodePointer
EnterCriticalSection
HeapSize
RaiseException
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
lstrlenW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WideCharToMultiByte
GetVersionExW
InterlockedDecrement
GetLastError
WriteFile
SetFilePointer
CreateFileW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadLibraryW
CreateProcessW
OutputDebugStringW
CloseHandle
WaitForSingleObject
CreateThread

user32

HideCaret
InvertRect
GetDoubleClickTime
CreateMenu
DestroyCursor
GetComboBoxInfo
GetWindowRgn
GetKeyNameTextW
GetNextDlgGroupItem
SetRect
InvalidateRgn
CharNextW
SetClassLongW
LockWindowUpdate
RegisterClipboardFormatW
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
MapVirtualKeyW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
PostThreadMessageW
ModifyMenuW
IsMenu
NotifyWinEvent
SetWindowRgn
GetSystemMenu
GetAsyncKeyState
CharUpperW
TrackMouseEvent
IsRectEmpty
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
MonitorFromPoint
SetParent
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
IntersectRect
SetRectEmpty
InsertMenuItemW
CreatePopupMenu
LoadMenuW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
InvalidateRect
KillTimer
SetTimer
DeleteMenu
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
SendDlgItemMessageA
CopyImage
InflateRect
GetMenuItemInfoW
DestroyMenu
FillRect
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
GetIconInfo
SetCursor
ShowOwnedPopups
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageW
MapDialogRect
SetWindowContextHelpId
SystemParametersInfoW
OffsetRect
MessageBeep
IsZoomed
PostQuitMessage
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
SetDlgItemTextW
MoveWindow
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetParent
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetDC
keybd_event
EnumWindows
GetClassNameW
GetWindowTextW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
DrawIconEx
GetUpdateRect
SubtractRect
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
IsClipboardFormatAvailable
FrameRect
CopyIcon
GetMenu
GetCapture
SetMenuDefaultItem
GetMenuDefaultItem
EnableScrollBar
UpdateLayeredWindow
CharUpperBuffW
SetCursorPos
DrawFocusRect
UnionRect
DrawEdge
GetWindowThreadProcessId
EnumChildWindows
GetDlgCtrlID
SendMessageW
GetWindowRect
ShowWindow
SetForegroundWindow
GetSystemMetrics
GetMessageExtraInfo
SendInput
EnableWindow
LoadIconW
IsIconic
GetClientRect
DrawIcon
UnregisterClassW
OpenWindowStationW
SetProcessWindowStation
OpenInputDesktop
GetUserObjectInformationW
SetThreadDesktop
CloseDesktop
CloseWindowStation
SetWindowPos
GetDlgItem
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
PostMessageW
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
IsChild
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetFocus
GetFocus
GetKeyState
DrawFrameControl

gdi32

SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateDIBitmap
CreateRectRgnIndirect
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CombineRgn
GetDIBits
PatBlt
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
GetRgnBox
OffsetRgn
GetTextColor
GetBkColor
GetMapMode
SetRectRgn
DPtoLP
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
SetWindowExtEx
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
SetTextAlign
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
Polyline
GetDeviceCaps
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
CreateDCW
CopyMetaFileW
GetObjectW
SetTextColor
SetBkColor
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegOpenKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW

shell32

DragQueryFileW
DragFinish
SHAppBarMessage
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

SHGetValueW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
StrStrIW

uxtheme

GetWindowTheme
DrawThemeText
DrawThemeParentBackground
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
GetThemePartSize
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetThemeSysColor

ole32

DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
CoDisconnectObject
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
OleGetClipboard
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleUninitialize
OleLockRunning
CoRegisterMessageFilter
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries

oleaut32

SysAllocStringLen
VariantChangeType
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysFreeString
VariantCopy
LoadTypeLi
OleCreateFontIndirect
SysAllocString
VariantClear
VariantInit
VarBstrFromDate

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 688KB - Virtual size: 692KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5291b60ec462ae43a5bbba57a0887531

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 338KB - Virtual size: 338KB

.data Size: 26KB - Virtual size: 55KB

.rsrc Size: 101KB - Virtual size: 100KB

.reloc Size: 688KB - Virtual size: 692KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 338KB - Virtual size: 338KB

.data
Size: 26KB - Virtual size: 55KB

.rsrc
Size: 101KB - Virtual size: 100KB

.reloc
Size: 688KB - Virtual size: 692KB