Static task
static1
Behavioral task
behavioral1
Sample
2024-09-28_4c2d7d89f40ce71ffb8a2bcb6b8383d9_bkransomware.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-28_4c2d7d89f40ce71ffb8a2bcb6b8383d9_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-28_4c2d7d89f40ce71ffb8a2bcb6b8383d9_bkransomware
-
Size
6.6MB
-
MD5
4c2d7d89f40ce71ffb8a2bcb6b8383d9
-
SHA1
7e54562b8b53f87be5363e697b803174a9d508ec
-
SHA256
f2b928fcba70a4787bea8210a9fc51af8eefaf01f427541e7389689588ee0935
-
SHA512
7e779b0f16aad5b56fc58a3b2b8ba2c5d384bc74a1ec3a8080a17403745bb9037ea6a2dda96bed3880b133d23dd36752e29b5ffa3fa4795f072ed667889ddace
-
SSDEEP
196608:VZarAN0F2UNUfTU7ffJ/053unrRPiLtJ9wg6LP:Cj2UybinWdunrVi5Jq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-28_4c2d7d89f40ce71ffb8a2bcb6b8383d9_bkransomware
Files
-
2024-09-28_4c2d7d89f40ce71ffb8a2bcb6b8383d9_bkransomware.exe windows:6 windows x86 arch:x86
d1b697c604427120472eba7cec259976
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
GetStdHandle
GetCPInfo
IsDebuggerPresent
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
VirtualFree
CreateTimerQueue
ExitThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwind
RaiseException
HeapReAlloc
GetLastError
DecodePointer
EncodePointer
DeleteCriticalSection
EnterCriticalSection
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
WaitForSingleObject
DuplicateHandle
VirtualProtect
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LCMapStringW
GetConsoleCP
CreateFileA
GetConsoleMode
SetFilePointerEx
LoadLibraryW
SetStdHandle
WriteConsoleW
CreateThread
ExpandEnvironmentStringsW
GetSystemTime
GetCurrentProcessId
CloseHandle
TlsAlloc
GetStringTypeW
GetOEMCP
CreateFileMappingA
GetLocalTime
ResetEvent
GlobalFree
SetLastError
GlobalUnlock
MultiByteToWideChar
GetACP
GetSystemDirectoryA
GetModuleFileNameW
CreateProcessA
MulDiv
Beep
LeaveCriticalSection
GetSystemTimeAdjustment
CreateEventA
Sleep
GetLocaleInfoW
SetCommState
GetWindowsDirectoryA
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
SetCommBreak
SetHandleInformation
GetModuleHandleExW
HeapFree
GetCommState
SetDllDirectoryW
LoadLibraryExW
FreeLibrary
SetEndOfFile
GlobalMemoryStatus
GetCommandLineW
ExitProcess
DeleteFileA
EnumSystemLocalesW
GetThreadTimes
FindNextFileA
GetModuleFileNameA
CreatePipe
GetFileType
IsValidCodePage
FlushFileBuffers
CompareStringW
GetOverlappedResult
GetCommandLineA
WaitForSingleObjectEx
ConnectNamedPipe
QueryPerformanceCounter
InitializeSListHead
GetCurrentProcess
VirtualQuery
UnmapViewOfFile
SetEvent
CreateFileW
user32
ShowOwnedPopups
ToAsciiEx
RegisterClassA
CheckMenuItem
EndPaint
ClientToScreen
DestroyWindow
SetCursor
GetSystemMenu
GetWindowRect
MapDialogRect
GetMessageW
TrackPopupMenu
IsIconic
SetKeyboardState
KillTimer
MsgWaitForMultipleObjects
DrawIconEx
LoadStringA
GetParent
RemovePropA
SetFocus
EnumWindows
DrawFocusRect
GetWindowTextA
SetPropA
GetKeyboardLayout
MessageBoxA
InvalidateRect
UnregisterClassA
SetScrollPos
PeekMessageA
EnableMenuItem
GetDlgItem
ScrollWindow
EndDialog
RedrawWindow
GetSysColor
CheckDlgButton
ShowWindow
CreatePopupMenu
DrawMenuBar
EnableScrollBar
IsWindow
RemoveMenu
FlashWindow
CreateWindowExW
ScrollWindowEx
RegisterClassW
SetCaretPos
SendMessageW
UpdateWindow
EnableWindow
SetScrollInfo
TranslateMDISysAccel
GetMessageA
HideCaret
CreateDialogParamA
SetCapture
LoadIconA
GetWindowInfo
GetClientRect
ShowCaret
BeginPaint
WaitMessage
GetDC
ShowCursor
GetWindowPlacement
SetRect
SetWindowLongA
DrawStateW
SetWindowsHookExA
DestroyCaret
GetDesktopWindow
SetMenu
IsDlgButtonChecked
AppendMenuA
PostMessageA
MessageBoxW
SystemParametersInfoA
ReleaseCapture
InsertMenuA
DestroyMenu
LoadCursorA
GetCaretBlinkTime
DrawFrameControl
gdi32
MoveToEx
BitBlt
GetWindowOrgEx
Arc
GetTextExtentPoint32A
LineTo
ExtFloodFill
GetCharacterPlacementW
CreateHatchBrush
Polygon
GetDeviceCaps
StretchBlt
CreateFontIndirectA
GetDIBits
SetBkColor
SetDIBColorTable
GdiFlush
GetRgnBox
SelectObject
GetPaletteEntries
PtInRegion
CreatePenIndirect
CreateRectRgnIndirect
CreateCompatibleBitmap
Rectangle
ExtCreateRegion
StretchDIBits
ExtCreatePen
SetPaletteEntries
GetObjectW
GetCharABCWidthsW
CreateRectRgn
GetCharWidth32A
GetCharABCWidthsFloatA
GetSystemPaletteEntries
CreatePatternBrush
CreatePen
IntersectClipRect
GetStockObject
SetWinMetaFileBits
CreateEnhMetaFileW
RestoreDC
UpdateColors
CreateSolidBrush
TextOutA
CreatePolygonRgn
EndPage
SetLayout
PatBlt
SetWindowExtEx
SetTextColor
DeleteDC
CreateFontA
CreateBitmap
PolyPolyline
CombineRgn
Ellipse
SetPolyFillMode
CreateBitmapIndirect
SelectPalette
SetStretchBltMode
SetViewportExtEx
SetTextAlign
CreateDIBitmap
EndDoc
ExtTextOutA
GetBitmapBits
GetBkColor
PlayEnhMetaFile
advapi32
RegOpenKeyExW
RegDeleteValueA
LookupPrivilegeValueW
SetSecurityDescriptorDacl
EqualSid
OpenProcessToken
GetUserNameA
SetSecurityDescriptorOwner
RegOpenKeyExA
RegDeleteKeyA
CopySid
RegCloseKey
AdjustTokenPrivileges
shell32
ShellExecuteExW
ole32
CoTaskMemFree
Sections
.text Size: 639KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.AOLF Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ