Static task
static1
Behavioral task
behavioral1
Sample
2024-09-04_8c52c5715e3e8bd74222c62c4e46bee9_bkransomware.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-09-04_8c52c5715e3e8bd74222c62c4e46bee9_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-04_8c52c5715e3e8bd74222c62c4e46bee9_bkransomware
-
Size
6.6MB
-
MD5
8c52c5715e3e8bd74222c62c4e46bee9
-
SHA1
3d0462dd7256b7b0e2a75d11947fadc3a2eadaab
-
SHA256
48b48faac155d7737bca84945626b0b0a73d68cb36ec553fb7dc8a87e0458631
-
SHA512
c2a9762fb13f7415cf518e60ea6c03dbfb6be42028d5fb7efcde1c67dbb99bd06fc2e238d34ff03901616135521ddcf505acf0897611467bcc3cddbd62326778
-
SSDEEP
196608:DWJBSwlRkYg0kTkqFi7Z16qCeV2Gn7LOOCO1v/OkanR2P:DWeKxyQH7Z8qCXGfOO19lanM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-04_8c52c5715e3e8bd74222c62c4e46bee9_bkransomware
Files
-
2024-09-04_8c52c5715e3e8bd74222c62c4e46bee9_bkransomware.exe windows:6 windows x86 arch:x86
6a085bc61ce3955140db87e81b8275c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
TlsFree
CreateThread
SetStdHandle
LoadLibraryW
SetFilePointerEx
GetConsoleMode
GetStringTypeW
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetCurrentProcessId
WriteFile
DeleteCriticalSection
IsDebuggerPresent
GetProcessHeap
HeapAlloc
HeapSize
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
CreateTimerQueue
HeapFree
ExitThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsSetValue
TlsAlloc
CreateEventW
SetUnhandledExceptionFilter
FindNextFileW
GetOEMCP
GetFileType
GlobalFree
IsValidCodePage
FindFirstFileA
CreateFileA
RaiseException
GlobalUnlock
GetACP
CreateFileW
GetSystemDirectoryA
TerminateProcess
Beep
Sleep
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
WideCharToMultiByte
OpenProcess
SetCommTimeouts
SetCommState
GetCurrentThread
GetTickCount
ConnectNamedPipe
SetCommBreak
WaitForSingleObject
GetEnvironmentStringsW
SetEnvironmentVariableW
InitializeSListHead
GetCurrentProcess
GetCommState
FreeLibrary
VirtualQuery
MapViewOfFile
TlsGetValue
GlobalMemoryStatus
GetDateFormatW
GetCommandLineW
ExitProcess
ExpandEnvironmentStringsW
DeleteFileA
GetSystemTime
OpenFileMappingA
GetModuleHandleA
GetModuleFileNameA
CreateFileMappingA
GetLocalTime
ResetEvent
FindClose
SetLastError
FlushFileBuffers
MultiByteToWideChar
GetTimeZoneInformation
GetModuleFileNameW
CreateProcessA
MulDiv
IsProcessorFeaturePresent
GetSystemTimeAdjustment
CreateEventA
IsValidLocale
GetConsoleCP
GetProcessTimes
GetSystemTimeAsFileTime
GetModuleHandleExW
QueryPerformanceCounter
LoadLibraryExW
SetEndOfFile
GetCPInfo
UnmapViewOfFile
GetLocaleInfoA
GetStdHandle
UnhandledExceptionFilter
RtlUnwind
HeapReAlloc
GetLastError
DuplicateHandle
GetCurrentThreadId
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
WriteConsoleW
user32
SetScrollInfo
DestroyWindow
SetTimer
HideCaret
GetMessageW
PostQuitMessage
TrackPopupMenu
IsIconic
SetCapture
KillTimer
GetWindowTextLengthA
GetCapture
ShowCursor
GetKeyboardState
GetWindowTextA
SetPropA
MessageBoxA
ReleaseDC
EnableMenuItem
GetDlgItem
DefWindowProcA
ShowWindow
SetMenu
EnableScrollBar
CreateWindowExW
CheckRadioButton
ReleaseCapture
RegisterClassW
InsertMenuA
SendMessageW
UpdateWindow
DialogBoxParamA
ToUnicode
DestroyIcon
DrawFrameControl
ShowOwnedPopups
EndPaint
ClientToScreen
SetCursor
SetWindowRgn
SendDlgItemMessageA
DrawIconEx
DeleteMenu
GetParent
SetFocus
CreateIconIndirect
WaitMessage
GetDC
ScrollWindow
EndDialog
DestroyCaret
GetDesktopWindow
GetSysColor
CreatePopupMenu
IsDlgButtonChecked
DrawMenuBar
AppendMenuA
FlashWindow
MessageBoxW
ScrollWindowEx
GetSystemMetrics
EnableWindow
GetCaretBlinkTime
gdi32
ExtCreatePen
EndPage
SetLayout
BitBlt
GetWindowOrgEx
Arc
ExtFloodFill
GetMetaFileBitsEx
SetTextColor
CreateHatchBrush
StretchBlt
SetDIBColorTable
GdiFlush
CreateHalftonePalette
SetPixel
GetRegionData
SelectObject
SelectClipRgn
CreatePenIndirect
CreateRectRgnIndirect
PlayEnhMetaFile
CreateBrushIndirect
Ellipse
RealizePalette
StretchDIBits
GetTextExtentPointW
GetCurrentPositionEx
GetCharABCWidthsW
CreateRectRgn
CreatePatternBrush
CreatePen
RectVisible
RoundRect
CreateDIBitmap
GetStockObject
UpdateColors
CreatePolygonRgn
PolyPolygon
CreateFontA
GetDeviceCaps
SetBkColor
GetEnhMetaFileHeader
CreateCompatibleDC
PolyPolyline
CombineRgn
ExtCreateRegion
SetPaletteEntries
GetDIBColorTable
GetCharWidth32A
GetSystemPaletteEntries
Polyline
SetROP2
SetTextAlign
IntersectClipRect
ExtTextOutA
CloseEnhMetaFile
CreateSolidBrush
GetClipBox
advapi32
GetLengthSid
GetUserNameA
SetSecurityDescriptorOwner
RegOpenKeyExA
LookupPrivilegeValueW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CopySid
RegOpenKeyExW
RegDeleteKeyA
EqualSid
shell32
ShellExecuteExW
ole32
CoTaskMemFree
Sections
.text Size: 641KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.YuAOS Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ