Static task
static1
Behavioral task
behavioral1
Sample
2024-08-26_7d85040e20dc119915cdf61de7ff68c9_bkransomware.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-08-26_7d85040e20dc119915cdf61de7ff68c9_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-26_7d85040e20dc119915cdf61de7ff68c9_bkransomware
-
Size
6.7MB
-
MD5
7d85040e20dc119915cdf61de7ff68c9
-
SHA1
534c08a528b11c0d0aec83cbb039371a10c11d23
-
SHA256
a6476d9731dae6da6e4045c47ff9bd9533e71d75d63852872c1f855a3c664888
-
SHA512
ef169f6de92a229f9495ea6332f378fd53eb4289666ed527c49f65ea382f5cdaddaf414967a8b5e3ac10c95273817cd09a60566ee31df5de035b92dc584935da
-
SSDEEP
98304:M+d1x53O0JjyP3oIbeC+MgEfya25Gl8mIsWN9lcx9znucEsPVlpnpKmQ1NNeJA6F:tn+roaD25Gq7nenursnQr8JjK7egQuK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-26_7d85040e20dc119915cdf61de7ff68c9_bkransomware
Files
-
2024-08-26_7d85040e20dc119915cdf61de7ff68c9_bkransomware.exe windows:6 windows x86 arch:x86
a1fcbfb2aea5fbc8c1a19a71b8e29228
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
OutputDebugStringW
FreeEnvironmentStringsW
QueryPerformanceCounter
WriteFile
GetFileType
GetStdHandle
GetCPInfo
IsValidCodePage
IsDebuggerPresent
GetProcessHeap
HeapAlloc
WideCharToMultiByte
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
SetEvent
CreateTimerQueue
HeapFree
LoadLibraryExW
ExitThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetConsoleMode
SetFilePointerEx
LoadLibraryW
SetStdHandle
CreateThread
TlsFree
GetThreadTimes
GetCurrentProcessId
CloseHandle
UnmapViewOfFile
FindNextFileA
GetOEMCP
CreateEventW
LoadLibraryA
GetLocalTime
ResetEvent
FindFirstFileA
GlobalUnlock
MultiByteToWideChar
GetACP
CompareStringW
GetOverlappedResult
CreateFileW
GetModuleFileNameW
GetFileAttributesA
OpenProcess
GetCommandLineA
WaitForSingleObjectEx
GlobalLock
GetModuleHandleExW
GetEnvironmentStringsW
SetEndOfFile
GlobalMemoryStatus
GetCommandLineW
ExitProcess
LocalFree
OpenFileMappingA
GetModuleFileNameA
CreatePipe
CreateNamedPipeA
IsDBCSLeadByteEx
RaiseException
FlushFileBuffers
TerminateProcess
MulDiv
LeaveCriticalSection
Sleep
GetConsoleCP
GetProcessTimes
SetCommState
GetWindowsDirectoryA
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
GetCurrentThread
ConnectNamedPipe
SetHandleInformation
GetCommState
VirtualQuery
HeapSize
SetLastError
SetUnhandledExceptionFilter
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThreadId
GetExitCodeThread
EnterCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
WriteConsoleW
user32
EndPaint
GetMessageW
LoadStringA
LoadIconA
GetWindowInfo
CreateMenu
SetFocus
DrawEdge
ShowCaret
GetDoubleClickTime
DrawFocusRect
GetKeyboardLayout
MessageBoxA
UnregisterClassA
GetWindowLongA
SystemParametersInfoW
EnableMenuItem
DrawStateW
GetDlgItem
SetWindowsHookExA
RedrawWindow
DestroyCaret
GetSysColor
ShowWindow
CreatePopupMenu
DrawMenuBar
IsWindow
CreateWindowExW
BeginDeferWindowPos
SetWindowTextA
SendMessageW
UpdateWindow
EnableWindow
EndMenu
DialogBoxParamA
ToUnicode
ValidateRect
GetMessageTime
ToAsciiEx
GetMessageA
SetWindowRgn
SetTimer
HideCaret
GetWindowRect
PostQuitMessage
SendDlgItemMessageA
DrawIconEx
GetWindowTextLengthA
SetScrollRange
WaitMessage
GetDC
InflateRect
GetWindowPlacement
SetPropA
CheckMenuRadioItem
UnionRect
ReleaseDC
DestroyCursor
GetDesktopWindow
CheckDlgButton
CreateCaret
FlashWindow
MessageBoxW
ScrollWindowEx
GetSystemMetrics
SetCaretPos
LoadCursorA
DrawFrameControl
TranslateMDISysAccel
CopyRect
RegisterClassA
GetCaretBlinkTime
gdi32
SetWindowOrgEx
BitBlt
GetWindowOrgEx
Arc
SetViewportOrgEx
GetMetaFileBitsEx
MaskBlt
GetCharacterPlacementW
CreateHatchBrush
DeleteDC
CreateFontA
CreateFontIndirectA
CopyEnhMetaFileA
CreatePalette
CreateBitmap
SelectObject
GetPaletteEntries
PolyPolyline
PlayEnhMetaFile
CreateBrushIndirect
Ellipse
OffsetRgn
SetPolyFillMode
CreateBitmapIndirect
GetCurrentPositionEx
SetPaletteEntries
GetDIBColorTable
GetObjectW
GetNearestPaletteIndex
CreatePatternBrush
SetTextAlign
IntersectClipRect
CreateDIBitmap
SetWinMetaFileBits
ExtTextOutA
MoveToEx
SetLayout
GetTextExtentPoint32A
SetWindowExtEx
Polygon
StretchBlt
GdiFlush
GetEnhMetaFileHeader
SetPixel
DeleteObject
CreateCompatibleDC
RectInRegion
CreateCompatibleBitmap
Rectangle
ExtCreateRegion
StretchDIBits
GetTextExtentPointW
GetCharABCWidthsW
GetCharWidth32A
GetTextExtentPointA
GetCharABCWidthsFloatA
GetStockObject
CreateSolidBrush
GetRegionData
advapi32
LookupPrivilegeValueW
RegOpenKeyExA
SetSecurityDescriptorDacl
shell32
ShellExecuteExW
Sections
.text Size: 722KB - Virtual size: 722KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.AoHf Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ