Static task
static1
Behavioral task
behavioral1
Sample
2024-09-19_2a409c27e4cb8ef696fa2da637491e23_bkransomware.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-19_2a409c27e4cb8ef696fa2da637491e23_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-19_2a409c27e4cb8ef696fa2da637491e23_bkransomware
-
Size
571KB
-
MD5
2a409c27e4cb8ef696fa2da637491e23
-
SHA1
677555c016c001ecf3f0f28fa9c1be137afc646b
-
SHA256
0ac071cbd65d3f9418b09e048d4a00f00a0d42e887a36d5ac68cc53fc079670c
-
SHA512
86a35589c318cfda946cad2b8d045a77904ab9c7652f5c56f9c51220eb3866499edb3c1fcba8b970b9a6e4d6b4810ac0630c4a8b022362ef1be3dee7ff373ead
-
SSDEEP
12288:OCdjWzHGbNCCo9eiTAg0BN3fIbVs+G9vAq3Tx7Y0:Omj0HGR/oIikgex0VsfBL3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-19_2a409c27e4cb8ef696fa2da637491e23_bkransomware
Files
-
2024-09-19_2a409c27e4cb8ef696fa2da637491e23_bkransomware.exe windows:5 windows x86 arch:x86
dc3deefb03287c965b26194414d9f4c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextAlign
GetNearestPaletteIndex
SetTextJustification
UpdateColors
SetTextCharacterExtra
GetDCPenColor
GetTextCharset
GetObjectType
GetPixelFormat
SetPixel
GetGraphicsMode
GetMetaRgn
GetMapMode
GetPolyFillMode
GetDeviceCaps
GetRandomRgn
GetStretchBltMode
GetBkColor
GetDCBrushColor
GetTextCharsetInfo
GetClipRgn
GetTextAlign
GetFontLanguageInfo
user32
GetForegroundWindow
RemovePropA
GetMenuContextHelpId
PostMessageA
GetKeyboardType
GetMenuState
GetWindowContextHelpId
GetMenuItemCount
GetDlgItem
DrawTextA
GetInputState
SetFocus
GetMenuItemID
BeginPaint
GetScrollPos
GetWindowLongA
SendMessageA
WindowFromDC
GetQueueStatus
ShowWindow
GetWindowDC
EndDialog
GetMenu
SetWindowTextA
GetCursor
IsWindowUnicode
SetDlgItemTextA
GetMenuCheckMarkDimensions
EnableWindow
EndPaint
CheckDlgButton
IsWindowEnabled
GetDlgItemInt
GetPropA
LoadIconA
kernel32
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FlushFileBuffers
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
OutputDebugStringW
GetModuleFileNameA
SetEnvironmentVariableW
SetEnvironmentVariableA
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFullPathNameA
GetStringTypeW
RaiseException
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
GetProcAddress
GetModuleHandleA
GetFileTime
MoveFileA
SizeofResource
GetLastError
CloseHandle
LockResource
QueryPerformanceCounter
SetFilePointer
GetCurrentProcessId
GlobalFlags
DeleteFileA
LoadResource
GetTickCount
IsDebuggerPresent
FindClose
GlobalSize
GlobalHandle
FindResourceA
GetFileType
GetCurrentThreadId
GlobalAlloc
GetVersion
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
ReadFile
DeleteFileW
GetTempPathA
Beep
Sleep
GetCommandLineA
IsProcessorFeaturePresent
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
GetConsoleCP
GetConsoleMode
SetEndOfFile
Sections
.text Size: 516KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE