Static task
static1
Behavioral task
behavioral1
Sample
2024-08-28_3040f346c0d1a851e061ae198bd1196c_bkransomware.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-28_3040f346c0d1a851e061ae198bd1196c_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-28_3040f346c0d1a851e061ae198bd1196c_bkransomware
-
Size
6.7MB
-
MD5
3040f346c0d1a851e061ae198bd1196c
-
SHA1
c823aeb194ce3d39bbdfa9346a76066cf8c4dd8a
-
SHA256
c46bc16ac234e4330a2b1c5cd444fede9c32d97b371b29f4abe61c1111c9ad24
-
SHA512
2c2a91241968d7eed3d1f59b236bfd972da59a6e4658326f9d189fe6c28d3704b961511ffa274471d34b3c76974673cd1ac868145c135ed1574b69fbe55797b1
-
SSDEEP
196608:lAPK1cXde6w70RPLUHkJJ3Hw94J3ZYlYLF:lW1k6wsTDJBoY3Z2YL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-28_3040f346c0d1a851e061ae198bd1196c_bkransomware
Files
-
2024-08-28_3040f346c0d1a851e061ae198bd1196c_bkransomware.exe windows:6 windows x86 arch:x86
3effd86d80e9005ff64afa15f2070c7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SwitchToThread
WaitForSingleObjectEx
SetEvent
CreateTimerQueue
HeapFree
LoadLibraryExW
ExitThread
CreateThread
CreateSemaphoreW
GetProcAddress
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryW
SetStdHandle
WriteConsoleW
SuspendThread
DeleteFileW
GetWindowsDirectoryW
WinExec
EnumResourceTypesW
QueryDosDeviceW
LockResource
VerifyVersionInfoW
GetTempPathW
HeapCreate
SizeofResource
Sleep
GetLogicalDrives
SignalObjectAndWait
GetFullPathNameW
CompareFileTime
FindResourceW
SetErrorMode
SetFilePointer
lstrcpyW
ResumeThread
GetVersion
GetThreadPriority
GetExitCodeThread
GetDiskFreeSpaceW
GetThreadLocale
GetLastError
GetCPInfoExW
SetThreadPriority
GetExitCodeProcess
HeapDestroy
GetUserDefaultLangID
GetPrivateProfileStringW
LoadResource
GetDriveTypeW
FindFirstFileW
GetCPInfo
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
CreateEventW
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateFileW
user32
MapWindowPoints
ShowOwnedPopups
SetTimer
MapDialogRect
CreateDialogParamA
GetMessageW
RegisterWindowMessageW
SetKeyboardState
PostMessageW
DeleteMenu
LoadIconA
RemovePropA
MessageBeep
GetMenuStringW
DrawTextExW
SetFocus
GetQueueStatus
ShowCursor
SetPropA
GetKeyboardLayout
MessageBoxA
UnionRect
UnregisterClassA
SetScrollPos
ReleaseDC
MonitorFromWindow
CharUpperW
SetWindowsHookExA
CheckDlgButton
ShowWindow
SetMenu
CreatePopupMenu
GetKeyboardType
CreateWindowExW
CheckRadioButton
GetMessageTime
SendMessageW
SetCaretPos
UpdateWindow
GetCaretBlinkTime
CheckMenuItem
HideCaret
SendDlgItemMessageA
GetWindowTextLengthA
SetDlgItemInt
GetWindowTextA
EndPaint
GetMessageA
SetWindowRgn
IsZoomed
GetKeyState
DrawEdge
ModifyMenuW
BeginPaint
GetDoubleClickTime
GetDC
GetKeyboardState
GetScrollInfo
LoadMenuW
GetWindowLongA
SetClassLongA
GetDesktopWindow
GetSysColor
IsDlgButtonChecked
AppendMenuA
IsWindow
InsertMenuW
SystemParametersInfoA
GetSystemMetrics
SetWindowTextA
EnableWindow
LoadCursorA
GetDlgItemTextA
SetWindowTextW
SetScrollInfo
ValidateRect
GetMonitorInfoW
gdi32
ExtCreatePen
EndPage
DeleteDC
GetDIBits
SetDIBColorTable
Rectangle
RealizePalette
GetObjectType
GetTextExtentExPointA
GetTextExtentPointA
Polyline
CreateDIBitmap
GetStockObject
UpdateColors
GetBitmapBits
MoveToEx
BitBlt
GetWindowOrgEx
PatBlt
SetTextColor
CreateFontIndirectW
CreateFontA
CopyEnhMetaFileA
SetMapMode
CreateCompatibleBitmap
SaveDC
CreateRectRgn
GetCharABCWidthsFloatA
GetSystemPaletteEntries
CreateSolidBrush
SelectClipRgn
comdlg32
FindTextW
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegLoadKeyW
GetUserNameA
RegSetKeySecurity
CopySid
ControlService
GetLengthSid
RegConnectRegistryW
QueryServiceStatus
StartServiceW
InitializeSecurityDescriptor
CloseServiceHandle
shell32
ShellExecuteExW
ExtractIconExW
Shell_NotifyIconW
ole32
CoInitialize
oleaut32
VariantChangeType
SafeArrayCreate
Sections
.text Size: 681KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.XfDO Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ