Static task
static1
Behavioral task
behavioral1
Sample
2024-09-13_0b75fb196f55b8b71db8fcdd554eddeb_bkransomware.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-09-13_0b75fb196f55b8b71db8fcdd554eddeb_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-13_0b75fb196f55b8b71db8fcdd554eddeb_bkransomware
-
Size
611KB
-
MD5
0b75fb196f55b8b71db8fcdd554eddeb
-
SHA1
d1ab3720ec45251bb7cb666b947eeba58b2d7bb9
-
SHA256
21d4eca5dfdbcf433fe6ad313c5bfe579f87d1f8ac46f2f4ecfd6f10067a3348
-
SHA512
b05e248c4fe61e6a13757ab30e96db3d656e1ebbb8ec108e908e92bc94ebcf6e3629e21c0cd07ae66947abf2b8a4469f452fe800df5c520f7ec5fb4475e2f6ba
-
SSDEEP
12288:UljKCyGo6t2918BJBamIa2HmLWIPYtVAJ4jzw92g565Szn:UPU6t291iJBamH2HmLWIPYtOJ4/fg5Zr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-13_0b75fb196f55b8b71db8fcdd554eddeb_bkransomware
Files
-
2024-09-13_0b75fb196f55b8b71db8fcdd554eddeb_bkransomware.exe windows:5 windows x86 arch:x86
8100d63e5e7bf867fe2180806ee3b54e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceCaps
GetDCPenColor
GetTextCharsetInfo
GetNearestPaletteIndex
SetTextJustification
GetMapMode
GetObjectType
GetCurrentObject
GetDCBrushColor
GetTextCharset
GetBkColor
GetFontLanguageInfo
GetFontUnicodeRanges
GetPixelFormat
GetRandomRgn
SetTextAlign
SetSystemPaletteUse
GetPolyFillMode
UpdateColors
SetTextCharacterExtra
SetPixel
GetClipRgn
GetStretchBltMode
user32
SetDlgItemTextA
GetMenuCheckMarkDimensions
DrawTextA
BeginPaint
PostMessageA
CallWindowProcA
GetMenuContextHelpId
IsWindowEnabled
GetScrollPos
EndPaint
SendMessageA
MoveWindow
GetWindowDC
GetMenuItemCount
GetInputState
GetQueueStatus
GetMenu
GetWindowContextHelpId
WindowFromDC
LoadIconA
SetWindowTextA
SetFocus
RemovePropA
GetPropA
GetMenuState
GetDlgItem
ShowWindow
IsWindowUnicode
GetForegroundWindow
GetDlgItemInt
GetCursor
GetMenuItemID
CheckDlgButton
EnableWindow
GetDialogBaseUnits
GetDC
GetWindowLongA
kernel32
SetEndOfFile
SetEnvironmentVariableA
GetExitCodeProcess
WaitForSingleObject
WriteConsoleW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
SetFilePointerEx
ReadConsoleW
DeleteFileW
SetStdHandle
CreateProcessA
GetFileAttributesExW
CreatePipe
GetStringTypeW
GetConsoleMode
GetConsoleCP
RaiseException
GetCurrentThread
GetCurrentProcessId
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
LockResource
GlobalSize
SetFilePointer
GetFileTime
GlobalFlags
GetStdHandle
GetCurrentProcess
DeleteFileA
GetFileType
GetTickCount
GlobalHandle
GetLastError
GetVersion
FlushFileBuffers
LocalFlags
GetProcessHeap
IsDebuggerPresent
SizeofResource
FindClose
MoveFileA
CloseHandle
LoadResource
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetTempPathA
GetFullPathNameA
GetLocalTime
GetTimeZoneInformation
DuplicateHandle
CreateProcessW
GetTempPathW
GetFullPathNameW
ReadFile
GetCommandLineA
IsProcessorFeaturePresent
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
RtlUnwind
SetEnvironmentVariableW
Sections
.text Size: 536KB - Virtual size: 536KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE