Static task
static1
Behavioral task
behavioral1
Sample
2024-10-11_ec105a10fbc6340a69581f36454d722f_bkransomware.exe
Resource
win7-20241010-en
General
-
Target
2024-10-11_ec105a10fbc6340a69581f36454d722f_bkransomware
-
Size
6.6MB
-
MD5
ec105a10fbc6340a69581f36454d722f
-
SHA1
744eaf350ae3aa2865bc5bce43b72f5c0e6ab5c7
-
SHA256
12405a7f8f62a12fbfb93668c5d1314c88440eb9e11e37933a31d98fa73a11f6
-
SHA512
d6c5833510e50390a90a35329a30bf80af3909f871a00731dc7bfdfaea803e28929440853d106ed157431cabf3e5d5feed5635f360e02e32113c9ec87d000d59
-
SSDEEP
196608:66ABZOhEyu0HDsqhU8gccZ6Limi6rHTZTBq+djV:cOhEyFoq0R6Limb1B5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-11_ec105a10fbc6340a69581f36454d722f_bkransomware
Files
-
2024-10-11_ec105a10fbc6340a69581f36454d722f_bkransomware.exe windows:6 windows x86 arch:x86
a4deacfc4af0991cf4a54e81d438133d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
WriteFile
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetConsoleCP
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
CreateTimerQueue
HeapFree
ExitThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetTickCount
TlsSetValue
InitializeCriticalSectionAndSpinCount
GetConsoleMode
SetFilePointerEx
LoadLibraryW
SetStdHandle
DeleteFileA
GetSystemTime
CloseHandle
TlsAlloc
DeleteCriticalSection
ExitProcess
CreateEventW
GlobalFree
SetLastError
IsDBCSLeadByteEx
FlushFileBuffers
CompareStringW
GetOverlappedResult
CreateFileW
GetSystemDirectoryA
GetModuleFileNameW
TerminateProcess
MulDiv
Beep
IsProcessorFeaturePresent
LeaveCriticalSection
GetLocaleInfoW
GetProcessTimes
GetCommandLineA
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
WaitForSingleObject
SetHandleInformation
QueryPerformanceCounter
GetCommState
SetDllDirectoryW
LoadLibraryExW
SetEndOfFile
MapViewOfFile
GetLocaleInfoA
CreateFileA
GetDateFormatW
GetCommandLineW
FindFirstFileA
CreateThread
TlsFree
LocalFree
GetCurrentProcessId
FindNextFileW
GetModuleFileNameA
CreatePipe
CreateFileMappingA
ResetEvent
FindClose
EnterCriticalSection
GlobalUnlock
GetStartupInfoW
MultiByteToWideChar
GetTimeZoneInformation
CreateProcessA
GetSystemTimeAdjustment
CreateEventA
Sleep
IsValidLocale
OpenProcess
SetCommTimeouts
SetCommState
SetCommBreak
GlobalLock
GetModuleHandleExW
GetEnvironmentStringsW
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DuplicateHandle
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
RaiseException
RtlUnwind
WriteConsoleW
user32
GetMessageTime
GetMessageA
DestroyAcceleratorTable
SetWindowRgn
SetTimer
GetWindowRect
CreateDialogParamA
GetMessageW
SetKeyboardState
SetCapture
DrawIconEx
LoadIconA
RemovePropA
SetParent
CreateMenu
ShowCaret
EnumWindows
WaitMessage
GetKeyboardState
InflateRect
GetWindowPlacement
MessageBoxA
PeekMessageA
ReleaseDC
EnableMenuItem
GetDlgItem
DefWindowProcA
CheckDlgButton
ShowWindow
IsDlgButtonChecked
EnableScrollBar
IsWindow
FlashWindow
CreateWindowExW
ScrollWindowEx
BeginDeferWindowPos
RegisterClassW
SetCaretPos
SendMessageW
UpdateWindow
EnableWindow
DestroyMenu
LoadCursorA
SetScrollInfo
CheckMenuItem
CopyRect
RegisterClassA
EndPaint
SendDlgItemMessageA
TrackPopupMenu
KillTimer
MsgWaitForMultipleObjects
SetScrollRange
GetDC
GetQueueStatus
GetCapture
OffsetRect
GetKeyboardLayout
CheckMenuRadioItem
SystemParametersInfoW
DrawStateW
DestroyCaret
GetDesktopWindow
CreatePopupMenu
DrawMenuBar
AppendMenuA
CreateCaret
RemoveMenu
SetDlgItemTextA
gdi32
CreatePolygonRgn
MoveToEx
PolyPolygon
EndPage
BitBlt
Arc
SetViewportOrgEx
ExtFloodFill
SetWindowExtEx
DeleteDC
CreateFontIndirectA
CopyEnhMetaFileA
ExcludeClipRect
GetEnhMetaFileHeader
DeleteObject
PtInRegion
CreatePenIndirect
CreateCompatibleDC
PlayEnhMetaFile
RectInRegion
CreateCompatibleBitmap
Ellipse
ExtCreateRegion
RealizePalette
GetObjectType
GetTextExtentPointW
GetBkColor
CreateBitmapIndirect
GetCurrentPositionEx
GetDIBColorTable
GetObjectW
GetTextExtentExPointA
GetCharABCWidthsW
CreateRectRgn
GetTextExtentPointA
GetCharABCWidthsFloatA
CreatePatternBrush
Polyline
RectVisible
GetPixel
ExtTextOutA
UpdateColors
GetWindowOrgEx
LineTo
SetTextColor
MaskBlt
CreateHatchBrush
Polygon
CreateFontA
GetDeviceCaps
GetRegionData
SelectObject
GetPaletteEntries
CombineRgn
Rectangle
OffsetRgn
StretchDIBits
GetSystemPaletteEntries
GetStockObject
RestoreDC
CreateSolidBrush
GetRgnBox
advapi32
AllocateAndInitializeSid
SetSecurityDescriptorDacl
EqualSid
OpenProcessToken
RegCloseKey
GetLengthSid
GetUserNameA
RegOpenKeyExA
LookupPrivilegeValueW
InitializeSecurityDescriptor
ole32
CoTaskMemFree
Sections
.text Size: 589KB - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LDh Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ