Static task
static1
Behavioral task
behavioral1
Sample
2024-09-09_07e17145acf2ede6b8663862233dfefc_bkransomware.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-09_07e17145acf2ede6b8663862233dfefc_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-09_07e17145acf2ede6b8663862233dfefc_bkransomware
-
Size
563KB
-
MD5
07e17145acf2ede6b8663862233dfefc
-
SHA1
aec3b0bc0f10342e4e99714c8b1d865a2f2198dd
-
SHA256
8b3c2a56872b1d3c98d07c76335115636dfacd5c25020bba2eaca539991a0e8a
-
SHA512
a94ae9fab4fbd4c9b8a4e240f1ed692c6647a03eeb17aa1e2bb9ed353aabba6cc87abd9decc2099dfb6debb1937999ab37b73c73547723a6d41237338718b5d0
-
SSDEEP
12288:cDBTN+2JkwdPfjeYAt6GiDi8Az8GTJUhghjpLOQ:cDB5+2JkIXQKurz8qJHh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-09_07e17145acf2ede6b8663862233dfefc_bkransomware
Files
-
2024-09-09_07e17145acf2ede6b8663862233dfefc_bkransomware.exe windows:5 windows x86 arch:x86
d361bf98ca3e8b6d8fb802ac7b24ba21
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetPixel
GetTextCharsetInfo
GetCurrentObject
GetDCBrushColor
GetSystemPaletteUse
GetTextCharset
GetDCPenColor
GetFontUnicodeRanges
SetTextCharacterExtra
GetTextCharacterExtra
GetTextAlign
GetDeviceCaps
GetRandomRgn
SetTextColor
GetStretchBltMode
GetClipRgn
GetTextColor
SetSystemPaletteUse
GetFontLanguageInfo
user32
EndPaint
GetDialogBaseUnits
GetMenuState
RemovePropA
GetQueueStatus
DrawTextA
PostMessageA
GetWindowContextHelpId
GetScrollPos
GetForegroundWindow
SetWindowTextA
GetWindowLongA
IsWindowUnicode
CallWindowProcA
GetCursor
GetMenuItemCount
CheckDlgButton
EnableWindow
GetDlgItemInt
SendMessageA
GetWindowDC
GetInputState
MoveWindow
GetDlgItem
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemID
WindowFromDC
EndDialog
IsWindowEnabled
SetDlgItemTextA
GetMenuContextHelpId
SetFocus
GetPropA
ShowWindow
kernel32
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEndOfFile
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetTimeZoneInformation
CreateFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
ReadConsoleW
GetExitCodeProcess
WaitForSingleObject
MoveFileExW
RaiseException
SetFilePointerEx
GetProcAddress
GetCurrentThreadId
GetVersion
FindResourceA
GetStdHandle
GetFileType
GetCurrentProcess
GlobalHandle
GetCurrentProcessId
DeleteFileA
CloseHandle
SetFilePointer
MoveFileA
LockResource
GetProcessHeap
FlushFileBuffers
GlobalSize
LocalFlags
GetDriveTypeA
GetTickCount
FindClose
GlobalFlags
GetModuleHandleA
LoadResource
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetTempPathA
DuplicateHandle
CreateProcessW
DeleteCriticalSection
GetLocalTime
CreateProcessA
DeleteFileW
ReadFile
GetCommandLineA
IsProcessorFeaturePresent
WriteFile
GetModuleFileNameW
IsDebuggerPresent
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
CreatePipe
GetFileAttributesExW
GetStringTypeW
GetFullPathNameA
Sections
.text Size: 510KB - Virtual size: 510KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE