Static task
static1
Behavioral task
behavioral1
Sample
2024-08-24_68966ead0d3081ab5d2ff9adeb6fa936_bkransomware.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-24_68966ead0d3081ab5d2ff9adeb6fa936_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-24_68966ead0d3081ab5d2ff9adeb6fa936_bkransomware
-
Size
598KB
-
MD5
68966ead0d3081ab5d2ff9adeb6fa936
-
SHA1
ae16455e20083e6fe7301188c4346e3e34c40502
-
SHA256
42c309853734560ec061c7a286f06084b11a86a49ec7fe45d663a9b56234f4bc
-
SHA512
6d45350fff186549e14e7522693dab3a20011889c03cdcc97f38b75a650d6840bd48c88c5e79660ff43dbe16abf1488e75d58464773f5afb2380794b48546090
-
SSDEEP
12288:FWcr8fhQvhKyar7hZbLXLfHj+AGBH0y3By/b/RevPcbT1:Iq4yAHLXLf1yM/bAvPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-24_68966ead0d3081ab5d2ff9adeb6fa936_bkransomware
Files
-
2024-08-24_68966ead0d3081ab5d2ff9adeb6fa936_bkransomware.exe windows:5 windows x86 arch:x86
22620353d730745c7177a0bff8b28d67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
UpdateColors
SetTextCharacterExtra
GetTextCharsetInfo
GetFontLanguageInfo
GetBkColor
GetClipRgn
GetTextColor
GetStretchBltMode
GetSystemPaletteUse
GetFontUnicodeRanges
GetMetaRgn
GetMapMode
SetSystemPaletteUse
GetTextCharset
SetTextColor
GetNearestPaletteIndex
user32
GetMenuState
GetDC
RemovePropA
PostMessageA
GetWindowDC
GetMenu
MoveWindow
GetDlgItem
IsWindowUnicode
EndDialog
GetMenuContextHelpId
GetForegroundWindow
GetKeyboardType
ShowWindow
GetDlgItemInt
EndPaint
DrawTextA
SetDlgItemTextA
BeginPaint
CheckDlgButton
WindowFromDC
GetWindowContextHelpId
SendMessageA
GetCursor
GetQueueStatus
GetMenuItemID
SetWindowTextA
GetScrollPos
GetWindowLongA
GetInputState
EnableWindow
SetFocus
IsWindowEnabled
LoadIconA
kernel32
SetEndOfFile
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
SetStdHandle
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GetFullPathNameA
MoveFileExW
RaiseException
ReadConsoleW
ReadFile
GetExitCodeProcess
WaitForSingleObject
SetEnvironmentVariableW
SetEnvironmentVariableA
SetFilePointerEx
GetStringTypeW
GetFileType
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetLastError
GlobalFlags
CloseHandle
GetFileTime
GetCurrentThreadId
IsDebuggerPresent
GetVersion
LoadResource
QueryPerformanceCounter
LockResource
FindResourceA
GlobalHandle
FindClose
GetDriveTypeA
GlobalAlloc
SetFilePointer
GetTickCount
GetProcessHeap
DeleteFileA
MoveFileA
GetCurrentProcess
GlobalSize
GetStdHandle
FlushFileBuffers
SizeofResource
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
GetTempPathW
DuplicateHandle
CreateProcessW
Beep
Sleep
CreateProcessA
GetTimeZoneInformation
SetErrorMode
GetCommandLineA
IsProcessorFeaturePresent
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileAttributesExW
CreatePipe
DeleteFileW
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE