Static task
static1
Behavioral task
behavioral1
Sample
2024-08-08_e56049fc37d6663e38e16364fcae93c7_bkransomware.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-08_e56049fc37d6663e38e16364fcae93c7_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-08_e56049fc37d6663e38e16364fcae93c7_bkransomware
-
Size
605KB
-
MD5
e56049fc37d6663e38e16364fcae93c7
-
SHA1
01c2329e0bce457bc5bff577782b7939f23b9fb0
-
SHA256
b3b96af7dd5681936ef054c28f3bde1265477fd861ad6bd7d331a35681de439a
-
SHA512
35d4198d5bfc1fd1d5a6b6e01afae402fe7103cf3c45e12b41a632d153df79fbf7ba8432e72de71e06d82c051473726ab7831ce9a14c822776289a4464580143
-
SSDEEP
6144:LbCCZbXrocERZ3t7/wzWCRKK8eVT8TD/g4wMWtbp5LbLOwPQ0Xl6zZpiZ0mKvXBV:LbBqZ3BYBR3VoX447cdHX0zZI0mYBP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-08_e56049fc37d6663e38e16364fcae93c7_bkransomware
Files
-
2024-08-08_e56049fc37d6663e38e16364fcae93c7_bkransomware.exe windows:5 windows x86 arch:x86
3e4a06823a5d8166da943d5268c094ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextColor
GetTextCharset
SetTextCharacterExtra
GetCurrentObject
GetBkColor
SetTextAlign
GetGraphicsMode
GetFontUnicodeRanges
GetNearestPaletteIndex
GetDeviceCaps
GetPixelFormat
SetTextJustification
UpdateColors
GetDCBrushColor
GetMapMode
GetObjectType
SetPixel
GetTextCharsetInfo
GetTextAlign
GetFontLanguageInfo
GetDCPenColor
GetClipRgn
GetMetaRgn
GetTextCharacterExtra
SetSystemPaletteUse
GetSystemPaletteUse
GetNearestColor
SetTextColor
GetPolyFillMode
user32
CallWindowProcA
GetMenuItemID
GetWindowLongA
IsWindowEnabled
EnableWindow
GetDialogBaseUnits
GetMenuState
SetWindowTextA
IsWindowUnicode
BeginPaint
EndPaint
SendMessageA
RemovePropA
GetInputState
SetFocus
GetCursor
LoadIconA
GetQueueStatus
GetDlgItemInt
GetPropA
GetMenuContextHelpId
ShowWindow
GetWindowContextHelpId
GetWindowDC
GetForegroundWindow
EndDialog
PostMessageA
GetMenuCheckMarkDimensions
GetMenuItemCount
GetScrollPos
GetDlgItem
WindowFromDC
GetMenu
CheckDlgButton
kernel32
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
SetStdHandle
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
GetFullPathNameA
ReadConsoleW
SetFilePointerEx
SetEnvironmentVariableW
SetEnvironmentVariableA
DeleteFileW
GetFileAttributesExW
GetTimeZoneInformation
GetCurrentProcessId
RaiseException
GetProcAddress
LockResource
GetProcessHeap
DeleteFileA
WriteFile
GetCurrentProcess
GetVersion
GetFileType
GetTickCount
QueryPerformanceCounter
GlobalHandle
FindClose
GetModuleHandleA
LocalFlags
IsDebuggerPresent
GlobalAlloc
GetStdHandle
IsProcessorFeaturePresent
GetCurrentThreadId
FlushFileBuffers
SizeofResource
GetLastError
SetFilePointer
GetFileTime
FindResourceA
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetTempPathA
GetFullPathNameW
GetTempPathW
ReadFile
GetCommandLineA
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
SetLastError
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
SetEndOfFile
Sections
.text Size: 541KB - Virtual size: 541KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE