Static task
static1
Behavioral task
behavioral1
Sample
2024-09-13_5754b1521e24f6a7a95683135874d699_bkransomware.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-13_5754b1521e24f6a7a95683135874d699_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-13_5754b1521e24f6a7a95683135874d699_bkransomware
-
Size
597KB
-
MD5
5754b1521e24f6a7a95683135874d699
-
SHA1
c84f68566bc0087d8722d4429077396bbed69d7b
-
SHA256
a7283b84701ac85868c42128871855751ba743884bffeeb28701a501b5f7d7ae
-
SHA512
d610a44d472dafa150cc8f5b8e8763a3f20baff0aa663ee86501154ac9f42f06d05d1b3c221445bc7418dd602c9a9890500c6acc9ccf561e2ad1b9670f8bef7e
-
SSDEEP
12288:jJyS4qJs+T0Y9TwRl0B3x7mT6Rzek8j0vTZx8:jwS4qH0Y9ThB3xw6RzS4vTk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-13_5754b1521e24f6a7a95683135874d699_bkransomware
Files
-
2024-09-13_5754b1521e24f6a7a95683135874d699_bkransomware.exe windows:5 windows x86 arch:x86
2452bc20f78ec92d04b9310b28fe9178
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextColor
GetTextCharacterExtra
GetPolyFillMode
GetSystemPaletteUse
GetDCPenColor
GetTextCharset
GetMapMode
GetBkColor
GetPixelFormat
SetTextAlign
GetNearestColor
GetTextAlign
GetClipRgn
GetTextCharsetInfo
GetFontLanguageInfo
GetRandomRgn
GetFontUnicodeRanges
GetCurrentObject
GetDeviceCaps
GetStretchBltMode
SetSystemPaletteUse
SetTextCharacterExtra
SetTextColor
GetDCBrushColor
SetTextJustification
user32
GetForegroundWindow
EndPaint
GetQueueStatus
GetCursor
DrawTextA
GetMenuCheckMarkDimensions
CheckDlgButton
GetMenuItemCount
SetDlgItemTextA
GetWindowDC
ShowWindow
GetPropA
CallWindowProcA
IsWindowUnicode
GetMenuItemID
WindowFromDC
GetWindowContextHelpId
GetInputState
GetScrollPos
BeginPaint
GetDlgItem
GetMenuContextHelpId
IsWindowEnabled
GetWindowLongA
SetWindowTextA
MoveWindow
SendMessageA
EndDialog
RemovePropA
SetFocus
PostMessageA
GetMenu
GetDC
EnableWindow
LoadIconA
GetDialogBaseUnits
GetMenuState
kernel32
SetEndOfFile
ReadConsoleW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
FlushFileBuffers
WriteConsoleW
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetTimeZoneInformation
GetFullPathNameW
RaiseException
GetStringTypeW
GetFileAttributesExW
ReadFile
SetStdHandle
CreatePipe
GetExitCodeProcess
WaitForSingleObject
SetEnvironmentVariableW
SetEnvironmentVariableA
FileTimeToSystemTime
GetProcAddress
GetModuleHandleA
GlobalAlloc
GetCurrentProcess
DeleteFileA
SetFilePointer
GetDriveTypeA
LocalFlags
WriteFile
GetCurrentThreadId
IsDebuggerPresent
GetProcessHeap
GetCurrentProcessId
MoveFileA
GlobalSize
SizeofResource
GetTickCount
GetVersion
GetLastError
GlobalFlags
GlobalHandle
GetFileType
LockResource
CloseHandle
IsProcessorFeaturePresent
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetTempPathA
DuplicateHandle
CreateProcessA
Beep
Sleep
CreateProcessW
DeleteFileW
DeleteCriticalSection
GetCommandLineA
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
SetLastError
GetCurrentThread
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
GetFullPathNameA
Sections
.text Size: 529KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE