Static task
static1
Behavioral task
behavioral1
Sample
2024-09-01_99ce6fdf1ad6c0f9b72a57ecf680c8c6_bkransomware.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-09-01_99ce6fdf1ad6c0f9b72a57ecf680c8c6_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-01_99ce6fdf1ad6c0f9b72a57ecf680c8c6_bkransomware
-
Size
577KB
-
MD5
99ce6fdf1ad6c0f9b72a57ecf680c8c6
-
SHA1
125a578f5bf961372152e9ca722e90d774054e42
-
SHA256
9199ea37357a144d669793f39a1cbc6149cdf980c183f8d12a86de3722c18308
-
SHA512
077e11d3624f8dea9a675a86b0e78d033b973074c350acd594daec2075f82210cacda8f3e5daab0895b62cb599f3d884cda29647e2bbb48845ba96942e8746ca
-
SSDEEP
6144:ctFrgDcPjtuzE5W2T6xp1PEQT2fugHiwr1TXWXj1buDrXMh+MXsEhmu1/9zCak/3:cI8tuYpWxTsQCG81LYYOPhD1/9+KRTX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-01_99ce6fdf1ad6c0f9b72a57ecf680c8c6_bkransomware
Files
-
2024-09-01_99ce6fdf1ad6c0f9b72a57ecf680c8c6_bkransomware.exe windows:5 windows x86 arch:x86
fccd7f6845bf160274f78a4555b3e662
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextAlign
GetTextColor
GetTextCharset
GetPolyFillMode
GetNearestPaletteIndex
SetTextAlign
SetPixel
GetTextCharsetInfo
SetSystemPaletteUse
GetFontUnicodeRanges
GetDeviceCaps
SetTextCharacterExtra
GetDCBrushColor
SetTextColor
GetRandomRgn
SetTextJustification
GetDCPenColor
GetBkColor
GetCurrentObject
GetObjectType
user32
SetFocus
IsWindowEnabled
GetWindowLongA
PostMessageA
ShowWindow
SetWindowTextA
GetKeyboardType
DrawTextA
CallWindowProcA
WindowFromDC
BeginPaint
MoveWindow
SetDlgItemTextA
CheckDlgButton
EndPaint
GetPropA
LoadIconA
RemovePropA
GetMenuItemCount
GetDialogBaseUnits
GetMenuCheckMarkDimensions
GetQueueStatus
GetInputState
GetForegroundWindow
GetScrollPos
EndDialog
GetWindowDC
SendMessageA
GetMenuContextHelpId
GetMenuItemID
GetMenu
IsWindowUnicode
GetMenuState
GetWindowContextHelpId
EnableWindow
GetDlgItem
GetCursor
kernel32
SetEndOfFile
GetTimeZoneInformation
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
FlushFileBuffers
WriteConsoleW
OutputDebugStringW
GetModuleFileNameA
SetStdHandle
SetFilePointerEx
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
RaiseException
ReadConsoleW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
GetProcAddress
GetModuleHandleA
LockResource
GlobalFlags
GetCurrentThreadId
GetLastError
GetStdHandle
GetVersion
GlobalHandle
LocalFlags
IsProcessorFeaturePresent
GetProcessHeap
GetTickCount
GetCurrentProcess
FindResourceA
MoveFileA
IsDebuggerPresent
GetFileType
GlobalSize
GetCurrentProcessId
SetFilePointer
GetFileTime
QueryPerformanceCounter
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameA
ReadFile
GetCommandLineA
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
SetLastError
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindClose
FindFirstFileExW
DeleteFileW
Sections
.text Size: 515KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE