2024-08-05_c833dcc981d0ed7da20020673d280378_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-05_c833dcc981d0ed7da20020673d280378_bkransomware
Size

3.5MB
MD5

c833dcc981d0ed7da20020673d280378
SHA1

6d5f1b522b4a2d746745dd6e8bae2079ff92dae6
SHA256

4db6d9aeff934fb18c98d6356918d0063c4c68924ed782af38ac17c58ad2dadd
SHA512

63a60568c4fdc9ad3b4586f473aa1df307081332bea91d655554b86f2e98f7995bfe897fe9b71d0d3003dc362e5512935fe1b1eb7611f77a603f50da81a35c32
SSDEEP

98304:VPGDDzfiYb9Ny/305ww9R/mmQg2XAlfhryRz+YwHRkeK:QDHb/c/mfhry4FK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-05_c833dcc981d0ed7da20020673d280378_bkransomware

Files

2024-08-05_c833dcc981d0ed7da20020673d280378_bkransomware
.exe windows:5 windows x86 arch:x86

ebb88eacf7a2b59aac7a24c800dd7630

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Jenkins\.jenkins\workspace\BkavUtil\Release\BkavUtil.pdb

Imports

kernel32

IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteConsoleW
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetStringTypeW
GetDriveTypeW
GetFullPathNameA
TerminateProcess
GetEnvironmentStringsW
GetSystemTime
GetTempPathA
GetVersionExA
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
LockFileEx
HeapValidate
HeapCreate
FormatMessageA
UnlockFileEx
WaitForSingleObjectEx
InterlockedCompareExchange
UnmapViewOfFile
MapViewOfFile
TryEnterCriticalSection
HeapCompact
lstrlenA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEnvironmentVariableA
FreeEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
VirtualQuery
VirtualAlloc
HeapQueryInformation
GetFileType
SetStdHandle
ExitThread
GetModuleHandleExW
ExitProcess
RtlUnwind
AreFileApisANSI
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
SetFilePointerEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
FindResourceExW
GetUserDefaultLCID
GetDiskFreeSpaceW
VirtualProtect
SearchPathW
GetProfileIntW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
GetWindowsDirectoryW
GetFileSizeEx
GetFileAttributesExW
lstrcmpiW
UnlockFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GlobalGetAtomNameW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
LocalReAlloc
GlobalHandle
GlobalReAlloc
GetThreadLocale
GlobalFindAtomW
EncodePointer
GlobalAddAtomW
ResumeThread
SetThreadPriority
FormatMessageW
MulDiv
GlobalSize
GlobalUnlock
GetModuleHandleA
GlobalFree
FreeResource
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
ReleaseMutex
FileTimeToSystemTime
SystemTimeToFileTime
DeviceIoControl
WTSGetActiveConsoleSessionId
GetSystemInfo
DecodePointer
HeapSize
RaiseException
HeapDestroy
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLocalTime
GetTempPathW
SetFilePointer
GetFileTime
SetEndOfFile
MoveFileW
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileA
ReadFile
GetCurrentProcessId
SetNamedPipeHandleState
TlsSetValue
TlsGetValue
TlsAlloc
DisconnectNamedPipe
FlushFileBuffers
GetCurrentThreadId
GetCurrentThread
DuplicateHandle
TlsFree
FindVolumeClose
FindNextVolumeW
QueryDosDeviceW
FindFirstVolumeW
GetVolumePathNamesForVolumeNameW
CreateProcessW
SetLastError
WriteFile
GetTickCount
lstrlenW
TerminateThread
GetExitCodeThread
SetEvent
CreateEventW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
OutputDebugStringA
Sleep
GetFileSize
GetSystemDirectoryW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetVersionExW
LoadLibraryA
GetFileAttributesA
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileInformationByHandle
CreateFileA
OpenProcess
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindClose
FindNextFileW
FindFirstFileW
MoveFileExW
DeleteFileW
CopyFileW
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
SizeofResource
SetErrorMode
IsWow64Process
GetCurrentProcess
WaitForSingleObject
GetCommandLineW
WaitForMultipleObjects
CreateThread
OutputDebugStringW
GetLastError
CreateMutexW
LoadLibraryExW
GetModuleHandleW
CloseHandle
LoadLibraryW
CreateFileW
LocalFree
LocalAlloc
FreeLibrary
GetProcAddress

user32

InvalidateRect
KillTimer
RealChildWindowFromPoint
DeleteMenu
CopyImage
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
SendDlgItemMessageA
OffsetRect
CharNextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
FillRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
UnhookWindowsHookEx
CopyAcceleratorTableW
InvalidateRgn
SetRect
SetMenuDefaultItem
ModifyMenuW
SendMessageTimeoutW
LoadIconW
SendMessageW
GetLastActivePopup
MessageBoxW
SetCursor
ShowOwnedPopups
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetDesktopWindow
SetActiveWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IsDialogMessageW
GetWindow
GetParent
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
SetWindowTextW
IsWindowEnabled
GetFocus
SetFocus
GetDlgCtrlID
IntersectRect
IsRectEmpty
GetNextDlgGroupItem
MessageBeep
GetSysColorBrush
DestroyIcon
CharUpperW
InflateRect
DestroyMenu
GetMenuItemInfoW
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
CreatePopupMenu
InsertMenuItemW
SetRectEmpty
LoadImageW
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatW
GetMenuDefaultItem
DrawFocusRect
DrawIconEx
GetIconInfo
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
GetWindowTextW
GetWindowThreadProcessId
SetWindowPos
SetTimer
SystemParametersInfoW
LoadBitmapW
EnumWindows
IsWindow
SetForegroundWindow
LoadStringW
UnregisterClassW
GetClassNameW
PostMessageW
GetDlgItem
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
ShowWindow
MoveWindow
CheckDlgButton
GetUpdateRect
SubtractRect
CreateMenu
DestroyCursor
GetWindowRgn
CopyIcon
GetDoubleClickTime
SetClassLongW
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
LockWindowUpdate
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
PostThreadMessageW
SetParent
GetSystemMenu
UnionRect
GetKeyNameTextW
MapVirtualKeyW

gdi32

GetObjectW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
CombineRgn
GetMapMode
PatBlt
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
SetPixel
CreateCompatibleDC
DeleteDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

OpenServiceW
CloseServiceHandle
QueryServiceStatusEx
CryptReleaseContext
CryptAcquireContextW
CryptImportKey
RegEnumKeyW
DuplicateTokenEx
CreateProcessAsUserW
GetTokenInformation
OpenProcessToken
SetNamedSecurityInfoW
SetEntriesInAclW
FreeSid
GetNamedSecurityInfoW
AllocateAndInitializeSid
OpenSCManagerW
RegQueryValueW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExW
CryptEncrypt
CryptDestroyKey

shell32

CommandLineToArgvW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
StrStrIW
PathFindFileNameW
SHGetValueW
AssocQueryStringW
StrStrW
PathFindExtensionW
StrFormatKBSizeW
PathIsUNCW

uxtheme

DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
GetThemePartSize
IsAppThemed
GetThemeSysColor
GetWindowTheme

ole32

CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoDisconnectObject
OleInitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
DoDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoInitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoFreeUnusedLibraries

oleaut32

SafeArrayCreateVector
SysAllocString
LoadTypeLi
VarBstrFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
OleCreateFontIndirect
VariantChangeType
SysAllocStringLen
SysFreeString
VariantCopy
VariantClear
VariantInit
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData

oledlg

OleUIBusyW

gdiplus

GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI

psapi

EnumProcessModules
GetModuleFileNameExW
GetProcessImageFileNameW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wtsapi32

WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsW

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

winhttp

WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpQueryDataAvailable
WinHttpSendRequest
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpOpen
WinHttpConnect
WinHttpReadData

ws2_32

connect
send
recv
gethostbyname
closesocket
WSACleanup
socket
htons
WSAStartup

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 416KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 405KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 704KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ebb88eacf7a2b59aac7a24c800dd7630

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

psapi

version

wtsapi32

userenv

winhttp

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 416KB - Virtual size: 415KB

.data Size: 31KB - Virtual size: 64KB

.rsrc Size: 405KB - Virtual size: 405KB

.reloc Size: 704KB - Virtual size: 708KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 416KB - Virtual size: 415KB

.data
Size: 31KB - Virtual size: 64KB

.rsrc
Size: 405KB - Virtual size: 405KB

.reloc
Size: 704KB - Virtual size: 708KB