Static task
static1
Behavioral task
behavioral1
Sample
2024-09-09_ffa51f1c92f1afbae240ef8449226e4b_bkransomware.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-09_ffa51f1c92f1afbae240ef8449226e4b_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-09_ffa51f1c92f1afbae240ef8449226e4b_bkransomware
-
Size
487KB
-
MD5
ffa51f1c92f1afbae240ef8449226e4b
-
SHA1
9c115f8c179a9b591c3a7f44655a96e701b84802
-
SHA256
c31ec69d9c0e7d25e8b3d8e2d67525453cf9b669b60be54301ae5d56b669de6d
-
SHA512
945df1fbba223d1568b242e1f1fab24678eb2eac740a44d1b01eac4be8cc3e3b5fb9e628e3455665693cd0c07674b42c30c13b951a899e8d284fa8142aea45e5
-
SSDEEP
12288:0QmTADFrFAQdDtxOKdslSaZXW44pfIQV:0tTADFXxOWs+Bf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-09_ffa51f1c92f1afbae240ef8449226e4b_bkransomware
Files
-
2024-09-09_ffa51f1c92f1afbae240ef8449226e4b_bkransomware.exe windows:5 windows x86 arch:x86
fa992db405202d393f9f68690801c952
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextAlign
GetTextCharacterExtra
GetSystemPaletteUse
GetPolyFillMode
GetTextAlign
UpdateColors
GetMapMode
GetGraphicsMode
GetNearestPaletteIndex
GetNearestColor
GetTextColor
GetPixelFormat
GetFontLanguageInfo
user32
RemovePropA
IsWindowEnabled
MoveWindow
GetMenuItemID
GetWindowContextHelpId
GetDlgItem
CheckDlgButton
GetMenuCheckMarkDimensions
GetScrollPos
GetInputState
PostMessageA
LoadIconA
GetKeyboardType
IsWindowUnicode
SetFocus
EnableWindow
DrawTextA
GetCursor
GetMenuContextHelpId
ShowWindow
GetQueueStatus
GetForegroundWindow
GetMenuItemCount
SetDlgItemTextA
SendMessageA
GetWindowDC
GetPropA
kernel32
GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetProcAddress
GetModuleHandleA
GlobalFlags
CloseHandle
FindClose
LoadResource
IsDebuggerPresent
GetCurrentThreadId
GetTickCount
GlobalHandle
GetCurrentProcessId
MoveFileA
GetCurrentProcess
GetVersion
LocalFlags
GetLastError
GlobalSize
GetDriveTypeA
GetProcessHeap
DeleteFileA
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
IsProcessorFeaturePresent
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
SetEnvironmentVariableA
Sections
.text Size: 427KB - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE