Static task
static1
Behavioral task
behavioral1
Sample
2024-10-02_58e5a813a3f7d204a627281bce4d24b7_bkransomware.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-02_58e5a813a3f7d204a627281bce4d24b7_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-02_58e5a813a3f7d204a627281bce4d24b7_bkransomware
-
Size
505KB
-
MD5
58e5a813a3f7d204a627281bce4d24b7
-
SHA1
d8dacc5f23ded487b3f4e34fa28dad855a5a8b1c
-
SHA256
9efbdfb2b4fa620528e1a593f43d4c76f095f747297adb5fd96447db6adfb097
-
SHA512
604afb79a7cb600192805b38f5d6f365e69c1cd0c879a947c5c52a26b4677a55ca386c11231210e45dd98688af4f5d5953eae497d8a1dd6a8c1dd11590dad96f
-
SSDEEP
12288:x2yzPKWwnoKBaLACRD0tHKnNTHikx0dom8QRLVR6iO+:xVPKWadtHKnNTHikx0dopQLn6iB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-02_58e5a813a3f7d204a627281bce4d24b7_bkransomware
Files
-
2024-10-02_58e5a813a3f7d204a627281bce4d24b7_bkransomware.exe windows:5 windows x86 arch:x86
57b6d2f856c8501206b5baa2b7a3748b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetMetaRgn
SetTextCharacterExtra
GetPixelFormat
GetDeviceCaps
GetDCBrushColor
SetTextJustification
GetTextCharacterExtra
GetGraphicsMode
GetClipRgn
GetDCPenColor
GetStretchBltMode
GetFontLanguageInfo
GetRandomRgn
GetSystemPaletteUse
GetFontUnicodeRanges
SetTextColor
GetTextAlign
GetTextColor
GetCurrentObject
GetMapMode
SetSystemPaletteUse
SetPixel
SetTextAlign
GetNearestColor
GetNearestPaletteIndex
GetObjectType
user32
IsWindowEnabled
LoadIconA
GetForegroundWindow
GetMenuContextHelpId
GetMenuItemID
RemovePropA
ShowWindow
GetWindowLongA
EnableWindow
PostMessageA
WindowFromDC
GetPropA
GetInputState
DrawTextA
SendMessageA
MoveWindow
BeginPaint
CheckDlgButton
GetKeyboardType
SetWindowTextA
GetMenuCheckMarkDimensions
GetMenuItemCount
GetCursor
IsWindowUnicode
GetDlgItem
GetScrollPos
GetDlgItemInt
GetMenuState
EndDialog
GetWindowContextHelpId
GetQueueStatus
SetDlgItemTextA
GetMenu
EndPaint
GetWindowDC
kernel32
GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
CloseHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
GetCPInfo
GetOEMCP
GetProcAddress
GetModuleHandleA
GlobalSize
GetCurrentProcessId
FlushFileBuffers
QueryPerformanceCounter
SizeofResource
GlobalAlloc
IsProcessorFeaturePresent
GlobalFlags
GlobalHandle
GetFileTime
LockResource
WriteFile
MoveFileA
IsDebuggerPresent
GetStdHandle
LocalFlags
GetCurrentProcess
DeleteFileA
FindResourceA
SetFilePointer
GetLastError
FindClose
GetVersion
GetFileType
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCommandLineA
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
FatalAppExitA
SetLastError
GetCurrentThread
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
SetEnvironmentVariableA
Sections
.text Size: 455KB - Virtual size: 455KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE