Static task
static1
Behavioral task
behavioral1
Sample
2024-09-08_2458e1d6ff80206e3d6ea9c3a6b55753_bkransomware.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-08_2458e1d6ff80206e3d6ea9c3a6b55753_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-08_2458e1d6ff80206e3d6ea9c3a6b55753_bkransomware
-
Size
572KB
-
MD5
2458e1d6ff80206e3d6ea9c3a6b55753
-
SHA1
4c926021e75d047046f31b0686902fcaaa624776
-
SHA256
530b82b48c4ab1526c9170dd60318c8e81e0b7fcdc0a4d3424b1646429c46d2a
-
SHA512
55a216f5a5afda90b8b89892a928dfb389c263d400d9833b6b3dfc0f065286fe1245233f9943f018cf9a744805cfb689865d52419d0ad66edd78df07c076c86f
-
SSDEEP
12288:/loxIFEhdsE17hjUaYdmZkllJ80LhxJW:toxIFENjU8kTJthx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-08_2458e1d6ff80206e3d6ea9c3a6b55753_bkransomware
Files
-
2024-09-08_2458e1d6ff80206e3d6ea9c3a6b55753_bkransomware.exe windows:5 windows x86 arch:x86
47f7f1c62885793e1bcc50dd46815bfd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDCBrushColor
GetDCPenColor
GetTextCharacterExtra
GetClipRgn
GetCurrentObject
GetPixelFormat
GetObjectType
GetFontUnicodeRanges
GetSystemPaletteUse
GetDeviceCaps
GetMetaRgn
GetGraphicsMode
GetMapMode
GetTextAlign
SetTextJustification
GetNearestColor
SetSystemPaletteUse
GetStretchBltMode
user32
GetDC
GetWindowDC
GetMenuCheckMarkDimensions
GetWindowLongA
GetMenuContextHelpId
GetDialogBaseUnits
WindowFromDC
GetKeyboardType
SetFocus
BeginPaint
GetQueueStatus
LoadIconA
DrawTextA
PostMessageA
IsWindowUnicode
CallWindowProcA
GetCursor
GetWindowContextHelpId
IsWindowEnabled
GetInputState
SetWindowTextA
GetMenuItemCount
GetDlgItemInt
GetForegroundWindow
GetScrollPos
SendMessageA
ShowWindow
GetMenuState
EndPaint
SetDlgItemTextA
GetDlgItem
RemovePropA
GetPropA
EnableWindow
GetMenu
CheckDlgButton
GetMenuItemID
kernel32
GetCurrentDirectoryW
SetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
CreateFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
GetFullPathNameA
CreatePipe
GetExitCodeProcess
WaitForSingleObject
GetTimeZoneInformation
ReadConsoleW
ReadFile
GetStringTypeW
RaiseException
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
GetTickCount
GetFileTime
GetCurrentProcessId
LockResource
MoveFileA
GetModuleHandleA
IsProcessorFeaturePresent
CloseHandle
DeleteFileA
GetLastError
GetCurrentProcess
QueryPerformanceCounter
GlobalFlags
IsDebuggerPresent
GetCurrentThreadId
LoadResource
FindClose
GlobalAlloc
SizeofResource
LocalFlags
GetVersion
SetFilePointer
WriteFile
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
GetTempPathA
Beep
Sleep
DuplicateHandle
CreateProcessA
DeleteFileW
GetCommandLineA
GetProcessHeap
GetStdHandle
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEndOfFile
Sections
.text Size: 517KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE