Static task
static1
Behavioral task
behavioral1
Sample
2024-08-11_da710166a1fb4078d5d124099447b5d3_bkransomware.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-11_da710166a1fb4078d5d124099447b5d3_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-11_da710166a1fb4078d5d124099447b5d3_bkransomware
-
Size
504KB
-
MD5
da710166a1fb4078d5d124099447b5d3
-
SHA1
31dcc837e687827d9472a32ff79b57ce505d7e8d
-
SHA256
20844177ad436f99d9df02a6bc6e6f3289147f4213186204c4e5c3a1b890c03a
-
SHA512
92ddffef6824a9ea44b94a72a04ec2bb41b5d3964e2fc7d6c7d0210aa3013c693df9053a811c77f3e800e1d663f75e6875c140601d9bd110fba142af2280ec36
-
SSDEEP
6144:r+T8q+8a6FxAp1qVJmxUHttPFVGWrJy/JF8tqT6QZWi+RvXkPI82bx:Coqp6IJmSHvFrU8k/8i6vmI8ux
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-11_da710166a1fb4078d5d124099447b5d3_bkransomware
Files
-
2024-08-11_da710166a1fb4078d5d124099447b5d3_bkransomware.exe windows:5 windows x86 arch:x86
14b157533c15a5514e8c22fbc96c67a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextColor
GetPixelFormat
GetNearestPaletteIndex
GetFontLanguageInfo
GetRandomRgn
GetGraphicsMode
GetCurrentObject
GetObjectType
GetMapMode
GetMetaRgn
GetPolyFillMode
SetSystemPaletteUse
GetStretchBltMode
GetNearestColor
GetDCPenColor
GetTextCharsetInfo
GetSystemPaletteUse
GetTextCharacterExtra
SetTextCharacterExtra
user32
GetWindowDC
GetDC
BeginPaint
GetKeyboardType
GetMenuCheckMarkDimensions
EndDialog
SetDlgItemTextA
EnableWindow
EndPaint
GetMenuItemCount
GetMenu
GetScrollPos
WindowFromDC
GetPropA
IsWindowUnicode
PostMessageA
CheckDlgButton
GetCursor
LoadIconA
GetInputState
CallWindowProcA
GetWindowLongA
IsWindowEnabled
RemovePropA
GetDialogBaseUnits
SetWindowTextA
GetQueueStatus
GetWindowContextHelpId
kernel32
GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GlobalFlags
GetTickCount
GetFileTime
SetFilePointer
GetLastError
GetCurrentProcessId
GlobalHandle
GetStdHandle
LoadResource
GlobalSize
GetCurrentThreadId
QueryPerformanceCounter
GetVersion
FlushFileBuffers
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
IsProcessorFeaturePresent
GetProcessHeap
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
SetLastError
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileType
SetEnvironmentVariableA
Sections
.text Size: 439KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE