Static task
static1
Behavioral task
behavioral1
Sample
2024-08-10_6291a2ae894c5675f32428e884ad7fe6_bkransomware.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-08-10_6291a2ae894c5675f32428e884ad7fe6_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-10_6291a2ae894c5675f32428e884ad7fe6_bkransomware
-
Size
595KB
-
MD5
6291a2ae894c5675f32428e884ad7fe6
-
SHA1
080a0cd9a1e6e60d1589ebd696ec1f5166f5cb66
-
SHA256
a2860a4ec1486e087120f01603c23bf503d305ce4a47c5a8305510bcb29bc54d
-
SHA512
26707ee060bd98161a301cc70199459f6ac1db60101b2fe140331c77f0d54426c4f614cec11e8322b311dab094da5dea7609edc16e39d6a218ecf38dd60f8c33
-
SSDEEP
12288:ObywFvJHGB6zrBKAwdo7DWes4ae+Q49dxCvviTia:QxGIzYAwdgZ35g/x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-10_6291a2ae894c5675f32428e884ad7fe6_bkransomware
Files
-
2024-08-10_6291a2ae894c5675f32428e884ad7fe6_bkransomware.exe windows:5 windows x86 arch:x86
630e7971038dc68c0f416cdb1ffb8b0f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextCharacterExtra
GetTextAlign
SetSystemPaletteUse
SetPixel
GetDCPenColor
GetTextCharsetInfo
GetClipRgn
GetNearestColor
GetMapMode
GetMetaRgn
GetNearestPaletteIndex
GetObjectType
GetSystemPaletteUse
GetFontLanguageInfo
GetPixelFormat
GetFontUnicodeRanges
SetTextCharacterExtra
GetDeviceCaps
GetTextColor
SetTextColor
GetBkColor
GetStretchBltMode
user32
GetWindowContextHelpId
GetQueueStatus
GetForegroundWindow
BeginPaint
GetMenuCheckMarkDimensions
GetInputState
GetDlgItemInt
GetDialogBaseUnits
GetKeyboardType
PostMessageA
DrawTextA
WindowFromDC
RemovePropA
EndPaint
GetCursor
SetDlgItemTextA
CheckDlgButton
GetScrollPos
GetWindowDC
SendMessageA
GetMenu
GetDC
GetMenuState
GetMenuItemID
IsWindowUnicode
GetWindowLongA
EndDialog
GetDlgItem
GetMenuContextHelpId
EnableWindow
GetMenuItemCount
LoadIconA
GetPropA
SetFocus
kernel32
SetEndOfFile
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
WriteConsoleW
SetStdHandle
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
ReadConsoleW
ReadFile
SetEnvironmentVariableW
SetEnvironmentVariableA
RaiseException
GetFileAttributesExW
GetStringTypeW
SetFilePointerEx
GetConsoleMode
GetModuleHandleA
GetProcAddress
SetFilePointer
FlushFileBuffers
GetProcessHeap
GetCurrentProcess
QueryPerformanceCounter
DeleteFileA
CloseHandle
MoveFileA
LockResource
LoadResource
GetTickCount
IsProcessorFeaturePresent
GetCurrentProcessId
IsDebuggerPresent
LocalFlags
GetLastError
WriteFile
GlobalHandle
GetFileTime
GetDriveTypeA
GetVersion
FindClose
FindResourceA
GlobalSize
GetFileType
GlobalFlags
HeapFree
HeapAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetTimeZoneInformation
GetLocalTime
DeleteCriticalSection
DeleteFileW
GetSystemTimeAsFileTime
HeapReAlloc
GetCommandLineA
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
RtlUnwind
GetCurrentThread
GetCurrentThreadId
GetConsoleCP
GetFullPathNameA
Sections
.text Size: 536KB - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE