Static task
static1
Behavioral task
behavioral1
Sample
2024-09-14_f4a7904e3fcb62345ed8de57de9a872c_bkransomware.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-14_f4a7904e3fcb62345ed8de57de9a872c_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-14_f4a7904e3fcb62345ed8de57de9a872c_bkransomware
-
Size
331KB
-
MD5
f4a7904e3fcb62345ed8de57de9a872c
-
SHA1
68bd155fe8d1dff49776a8145cf03e0a9260a1b0
-
SHA256
c1c3c97c23a07dd8a40c8ea47144ec358e192a8ed9a1576a3b39723cbc1f5916
-
SHA512
d232ff5fc5618a6e7938f8c0948bc23a010f68a474cbabc6d15c2e65fdf9653ebb978e1ac2e200e1b957946bdb1af3e57f50e7003207e0015604f775de363d82
-
SSDEEP
3072:JXXsXQERuUm607blOL1ZJ7S3LicMcFXdvMfbwWND7sE4pVgvDKZSfT+YxJ1eE3Lw:FXsXmUm6Mxew+C+wa2/M4E3LB2s6R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-14_f4a7904e3fcb62345ed8de57de9a872c_bkransomware
Files
-
2024-09-14_f4a7904e3fcb62345ed8de57de9a872c_bkransomware.exe windows:5 windows x86 arch:x86
367f180397b8c39fe0cfa74157231863
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesExW
GetCommandLineW
RtlUnwind
ExitProcess
GetModuleHandleExW
HeapQueryInformation
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsValidCodePage
GetOEMCP
GetCPInfo
GetTimeZoneInformation
OutputDebugStringW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetCurrentProcess
WriteFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
DeleteFileW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
FormatMessageW
MulDiv
LocalFree
GlobalFindAtomW
GetSystemDirectoryW
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetCurrentProcessId
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
WaitForSingleObject
CloseHandle
GlobalFree
FreeResource
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
FindResourceW
LoadLibraryA
SizeofResource
LockResource
LoadResource
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
SetLastError
OutputDebugStringA
GetACP
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
DecodePointer
HeapSize
GetLastError
RaiseException
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
GlobalUnlock
GlobalLock
Sleep
GlobalAlloc
user32
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextW
RemovePropW
GetPropW
SetPropW
RedrawWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
SetWindowPos
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
SetCursor
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetWindowRect
GetSubMenu
GetDesktopWindow
GetWindowLongW
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
PostQuitMessage
PostMessageW
CopyRect
ReleaseDC
GetDC
IsWindow
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
EnableWindow
SendMessageW
LoadIconW
CheckMenuItem
GetFocus
GetParent
SendDlgItemMessageA
UnregisterClassW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DrawIcon
GetSystemMetrics
IsIconic
CharUpperW
DestroyMenu
InvalidateRect
RegisterDeviceNotificationW
GetClientRect
KillTimer
SetTimer
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
ClientToScreen
EndPaint
BeginPaint
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
IsDialogMessageW
SetWindowTextW
ShowWindow
GetTopWindow
MonitorFromWindow
WinHelpW
UnhookWindowsHookEx
DefWindowProcW
GetWindow
GetMonitorInfoW
gdi32
Escape
GetClipBox
GetStockObject
PtVisible
RectVisible
RestoreDC
SaveDC
SelectObject
SetMapMode
DeleteObject
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
DeleteDC
GetDeviceCaps
GetObjectW
CreateBitmap
SetBkColor
SetTextColor
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegSetValueExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
uxtheme
SetWindowTheme
ole32
CoInitialize
CoCreateGuid
CoUninitialize
CoTaskMemFree
CoCreateInstance
oleaut32
VariantChangeType
VariantClear
VariantInit
SysAllocString
SysFreeString
obsidium
ord38
ord35
oleacc
CreateStdAccessibleObject
LresultFromObject
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ