Static task
static1
Behavioral task
behavioral1
Sample
2024-08-06_d35be63a6f9eb35e85e19d308e46ea19_bkransomware.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-06_d35be63a6f9eb35e85e19d308e46ea19_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-06_d35be63a6f9eb35e85e19d308e46ea19_bkransomware
-
Size
506KB
-
MD5
d35be63a6f9eb35e85e19d308e46ea19
-
SHA1
3304c45dc1e358de32b994eaee7ca35f471a2fdd
-
SHA256
47fa050d06d863a2b9fca34a1537a0a79b9f4dc949cb3a6d319827aa6a441688
-
SHA512
e29e7fbe888567fd85408e982f4d2974d14324053fcbec108090e54e31ab9d662b46a66406730b67347c4b2791be75078406cffdab559983cd0e6a667184c490
-
SSDEEP
12288:2oAZIU5KPdxjwJA4Si9fKWzdYVLIluPKlVNkT3dwwBn:2o7Uijb4J9iWy9IluPANIdwO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-06_d35be63a6f9eb35e85e19d308e46ea19_bkransomware
Files
-
2024-08-06_d35be63a6f9eb35e85e19d308e46ea19_bkransomware.exe windows:5 windows x86 arch:x86
ba9ac40d01d3d1f1dbb8853cc8ec352a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextAlign
GetDCPenColor
GetSystemPaletteUse
GetTextAlign
GetClipRgn
GetMetaRgn
GetRandomRgn
GetCurrentObject
GetTextColor
GetTextCharset
GetFontLanguageInfo
GetGraphicsMode
GetDeviceCaps
GetTextCharsetInfo
GetFontUnicodeRanges
SetTextJustification
SetSystemPaletteUse
GetMapMode
SetTextCharacterExtra
SetTextColor
SetPixel
GetTextCharacterExtra
UpdateColors
GetObjectType
GetPixelFormat
GetDCBrushColor
GetNearestColor
user32
MoveWindow
GetDC
SetFocus
GetCursor
DrawTextA
GetQueueStatus
BeginPaint
GetScrollPos
GetMenuCheckMarkDimensions
GetForegroundWindow
EndPaint
GetWindowLongA
GetInputState
IsWindowEnabled
GetMenuItemCount
WindowFromDC
SendMessageA
GetDlgItemInt
CallWindowProcA
RemovePropA
GetPropA
GetDlgItem
GetKeyboardType
CheckDlgButton
GetWindowContextHelpId
LoadIconA
GetMenuItemID
GetMenuContextHelpId
ShowWindow
EndDialog
kernel32
GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
MoveFileA
GetCurrentThreadId
GetFileType
GetStdHandle
FindResourceA
GetTickCount
IsProcessorFeaturePresent
GlobalSize
DeleteFileA
SizeofResource
LocalFlags
GetLastError
GlobalAlloc
QueryPerformanceCounter
IsDebuggerPresent
GetProcessHeap
GetDriveTypeA
GetFileTime
GetCurrentProcess
SetFilePointer
GlobalFlags
CloseHandle
LoadResource
FlushFileBuffers
GetVersion
LockResource
GlobalHandle
FindClose
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetDriveTypeW
SetEnvironmentVariableA
Sections
.text Size: 457KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE