Static task
static1
Behavioral task
behavioral1
Sample
2024-09-08_f12747f30989ad1e08c2ece2e1e36218_bkransomware.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-08_f12747f30989ad1e08c2ece2e1e36218_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-08_f12747f30989ad1e08c2ece2e1e36218_bkransomware
-
Size
586KB
-
MD5
f12747f30989ad1e08c2ece2e1e36218
-
SHA1
254e82a16ce7307957866c7183a9116de289c84a
-
SHA256
d23ad74499684458272f36320e5d208c230a8d946cd7f91f37548f35b8d7fd65
-
SHA512
693bbaa8a753013b0610bee4898ac10620316066bac1d09213bca515dd2cd4c17813675f612f2264b4c1fcb8e348e4aa11eaa06e42c3e85b4bbd167b195851db
-
SSDEEP
12288:PGS64m6SK3BRBwKn+a96MvMlGwWmelqHbBg/9n0uz:uP4m6rBRBp0l7/d7QF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-08_f12747f30989ad1e08c2ece2e1e36218_bkransomware
Files
-
2024-09-08_f12747f30989ad1e08c2ece2e1e36218_bkransomware.exe windows:5 windows x86 arch:x86
b28bd9326d2929517594720fe030113d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextColor
GetPolyFillMode
GetFontLanguageInfo
GetStretchBltMode
GetTextCharacterExtra
GetMapMode
SetPixel
GetGraphicsMode
SetTextJustification
GetDCBrushColor
GetNearestColor
GetNearestPaletteIndex
GetFontUnicodeRanges
GetSystemPaletteUse
SetSystemPaletteUse
GetDCPenColor
GetTextAlign
GetObjectType
GetRandomRgn
GetPixelFormat
SetTextAlign
GetClipRgn
GetMetaRgn
GetTextColor
UpdateColors
user32
GetMenuItemCount
GetQueueStatus
GetScrollPos
WindowFromDC
GetMenu
GetDC
IsWindowEnabled
GetWindowDC
DrawTextA
ShowWindow
CheckDlgButton
GetWindowLongA
SetDlgItemTextA
SetWindowTextA
IsWindowUnicode
EnableWindow
SendMessageA
EndDialog
EndPaint
GetMenuCheckMarkDimensions
SetFocus
LoadIconA
PostMessageA
RemovePropA
GetWindowContextHelpId
GetPropA
GetDlgItem
GetMenuItemID
GetCursor
GetDlgItemInt
GetMenuState
MoveWindow
BeginPaint
kernel32
RaiseException
WriteConsoleW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
SetFilePointerEx
ReadConsoleW
GetExitCodeProcess
WaitForSingleObject
CreatePipe
SetEnvironmentVariableW
SetEnvironmentVariableA
ReadFile
GetTimeZoneInformation
GetFileAttributesExW
MoveFileExW
SetStdHandle
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
IsDebuggerPresent
GetLastError
GetFileTime
GetProcessHeap
GetCurrentProcess
IsProcessorFeaturePresent
LockResource
GetCurrentThreadId
QueryPerformanceCounter
DeleteFileA
GetTickCount
LocalFlags
FindResourceA
GlobalSize
GlobalFlags
FindClose
GetStdHandle
FlushFileBuffers
WriteFile
GetVersion
GetFileType
SetFilePointer
GlobalAlloc
MoveFileA
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameA
GetTempPathA
GetLocalTime
CloseHandle
DuplicateHandle
CreateProcessW
CreateProcessA
Beep
Sleep
GetCommandLineA
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
RtlUnwind
GetConsoleCP
GetConsoleMode
GetStringTypeW
DeleteFileW
SetEndOfFile
Sections
.text Size: 525KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE