Static task
static1
Behavioral task
behavioral1
Sample
2024-08-08_1d48e36d1092d1c132b06492c68fa96d_bkransomware.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-08-08_1d48e36d1092d1c132b06492c68fa96d_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-08_1d48e36d1092d1c132b06492c68fa96d_bkransomware
-
Size
617KB
-
MD5
1d48e36d1092d1c132b06492c68fa96d
-
SHA1
b94c7d7a7f5579ee130ac1f108a88e1d3365fda6
-
SHA256
06116068631031d4a20c611be2611b215ea723d034d076144c535a9697731776
-
SHA512
8752125623f42d12029e8d945fa96ca96c21cf48679313fa2e5c86829e6e07a7de06e9ff81242f307332485e984641eb206566300f3b70ce3df06bc03ce119c5
-
SSDEEP
12288:5uJXpkNNjdfcA5o70LWPrBFGQ9JMZcJ+b0KwF+gP4PJSaH:5uJZQjru70E9icJaKFhy0u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-08_1d48e36d1092d1c132b06492c68fa96d_bkransomware
Files
-
2024-08-08_1d48e36d1092d1c132b06492c68fa96d_bkransomware.exe windows:5 windows x86 arch:x86
55abd37365849cb4148ddc0b5fb5d48a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetNearestPaletteIndex
GetSystemPaletteUse
GetBkColor
GetStretchBltMode
GetFontLanguageInfo
GetNearestColor
GetRandomRgn
GetTextCharsetInfo
GetDCPenColor
GetTextCharset
GetDCBrushColor
SetPixel
SetTextColor
GetMapMode
GetClipRgn
GetGraphicsMode
SetTextCharacterExtra
SetSystemPaletteUse
user32
GetMenuItemID
GetMenuState
SetWindowTextA
GetWindowContextHelpId
GetQueueStatus
WindowFromDC
GetMenu
GetForegroundWindow
CheckDlgButton
DrawTextA
GetDlgItemInt
GetMenuItemCount
GetPropA
GetWindowDC
SendMessageA
GetInputState
LoadIconA
EndDialog
MoveWindow
EndPaint
IsWindowUnicode
SetFocus
GetDC
RemovePropA
BeginPaint
CallWindowProcA
GetMenuContextHelpId
GetDlgItem
SetDlgItemTextA
GetDialogBaseUnits
GetCursor
EnableWindow
GetWindowLongA
ShowWindow
IsWindowEnabled
GetScrollPos
kernel32
SetEnvironmentVariableA
SetEndOfFile
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
CreatePipe
GetExitCodeProcess
WaitForSingleObject
SetFilePointerEx
ReadConsoleW
SetStdHandle
ReadFile
RaiseException
GetStringTypeW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
GetProcAddress
GetModuleHandleA
GetStdHandle
IsDebuggerPresent
GlobalHandle
FlushFileBuffers
GetLastError
GetVersion
QueryPerformanceCounter
GlobalSize
DeleteFileA
SizeofResource
GlobalAlloc
MoveFileA
LocalFlags
SetFilePointer
GetFileType
GetCurrentProcess
GetCurrentThreadId
FindClose
LoadResource
GlobalFlags
GetProcessHeap
GetCurrentProcessId
LockResource
GetDriveTypeA
WriteFile
IsProcessorFeaturePresent
GetTickCount
FindResourceA
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
GetTimeZoneInformation
Beep
Sleep
CloseHandle
DuplicateHandle
CreateProcessA
GetTempPathA
GetCommandLineA
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
GetConsoleCP
GetConsoleMode
GetFullPathNameA
Sections
.text Size: 541KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE