Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_a113182e33ce9135b2f391496649842a_bkransomware.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-09-27_a113182e33ce9135b2f391496649842a_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-27_a113182e33ce9135b2f391496649842a_bkransomware
-
Size
562KB
-
MD5
a113182e33ce9135b2f391496649842a
-
SHA1
26a6f67b485020216b8b8a82228c1b1f4b7c126b
-
SHA256
9fa17c07ff651c4774ac3106e71c8fad425dbd0301e2e04fe92ababca6e221ed
-
SHA512
3d1fced25e43f8966599353360fbf8bfa4442baa0b69922ae3170669a9dd971171d9726a976789e4e18b62a99eb1856896f9c408658cbfd43217e43ca2314c87
-
SSDEEP
12288:le109MMND+JFFtYIAJescS9OPY+ceF+DPqg9:o1MMoD+JNAJxKPee
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-27_a113182e33ce9135b2f391496649842a_bkransomware
Files
-
2024-09-27_a113182e33ce9135b2f391496649842a_bkransomware.exe windows:5 windows x86 arch:x86
d618072a5da77eb0d17bfba30e29dbc0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetNearestPaletteIndex
SetTextColor
GetTextCharsetInfo
GetTextAlign
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetBkColor
GetPixelFormat
SetTextCharacterExtra
GetRandomRgn
SetTextAlign
SetSystemPaletteUse
SetTextJustification
GetTextCharacterExtra
UpdateColors
GetDeviceCaps
GetFontLanguageInfo
GetSystemPaletteUse
GetCurrentObject
GetObjectType
GetFontUnicodeRanges
GetTextCharset
GetGraphicsMode
user32
GetKeyboardType
GetMenuItemCount
GetMenuItemID
SetFocus
GetForegroundWindow
EnableWindow
CallWindowProcA
IsWindowEnabled
GetPropA
CheckDlgButton
ShowWindow
GetCursor
GetInputState
GetMenuCheckMarkDimensions
DrawTextA
GetDlgItem
GetDC
WindowFromDC
EndPaint
MoveWindow
GetWindowDC
SetDlgItemTextA
RemovePropA
EndDialog
LoadIconA
GetWindowLongA
IsWindowUnicode
SendMessageA
SetWindowTextA
PostMessageA
GetDlgItemInt
BeginPaint
GetMenu
kernel32
GetTimeZoneInformation
GetFullPathNameA
GetExitCodeProcess
WaitForSingleObject
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
SetStdHandle
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
SetEnvironmentVariableW
SetEnvironmentVariableA
CreateProcessA
GetFileAttributesExW
CreatePipe
ReadConsoleW
GetStringTypeW
RaiseException
SetFilePointerEx
GetProcAddress
GetModuleHandleA
GetLastError
FlushFileBuffers
LockResource
GetCurrentProcessId
DeleteFileA
GlobalFlags
GlobalHandle
IsDebuggerPresent
GlobalSize
QueryPerformanceCounter
GlobalAlloc
GetTickCount
GetCurrentThreadId
LocalFlags
GetVersion
IsProcessorFeaturePresent
GetCurrentProcess
SizeofResource
GetProcessHeap
GetDriveTypeA
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
ReadFile
CloseHandle
DuplicateHandle
CreateProcessW
GetFullPathNameW
GetCommandLineA
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileType
SetEndOfFile
Sections
.text Size: 502KB - Virtual size: 502KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE