2024-05-22_ede6627a3b1b922d29cda994743c1156_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-22_ede6627a3b1b922d29cda994743c1156_bkransomware
Size

377KB
MD5

ede6627a3b1b922d29cda994743c1156
SHA1

fe86f7244fc96f78d1c52e33a45a7b17c03ddb0d
SHA256

cfa78fd4ae1723e4b3b98bf31c413b8d2ca5793ceff401aed130ffdaccc7fc8c
SHA512

0868a100c3723b626851cc014bcf544a3b4a52016947002bd7c39834aef67fb14cd9cd02d2b6e7b3815110d0c013b6b218d92fd1d9ca888f4eca2a7721953cdb
SSDEEP

6144:QZVLbvfFs6sfF8XukTpNDJw/XO4QUrXt2F0KyWJCnvipHx5gLwLAqO:QZtFlEk6Oym0Ky8qwhO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-22_ede6627a3b1b922d29cda994743c1156_bkransomware

Files

2024-05-22_ede6627a3b1b922d29cda994743c1156_bkransomware
.exe windows:5 windows x86 arch:x86

ac5aab8adb243a271b4893bf3314d72f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\A_code\vpn\1_code\src\Release\DPtechUpdate.pdb

Imports

kernel32

FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwind
GetModuleHandleExW
CreateThread
ExitThread
HeapQueryInformation
GetStdHandle
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
GetStringTypeW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
IsValidCodePage
GetOEMCP
GetCPInfo
GetTimeZoneInformation
OutputDebugStringW
SetStdHandle
WriteConsoleW
LCMapStringW
SetEnvironmentVariableA
GetCurrentProcess
SetEndOfFile
ReadFile
GetVolumeInformationW
GetFullPathNameW
FindFirstFileW
FindClose
FileTimeToSystemTime
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFindAtomW
GetSystemDirectoryW
EncodePointer
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
SetEvent
LoadLibraryA
FreeResource
GetCurrentProcessId
MulDiv
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetCurrentThreadId
GetCurrentThread
GetModuleHandleA
SetLastError
OutputDebugStringA
FindResourceExW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
LocalFree
GetFileSize
FlushFileBuffers
WriteFile
GetLocalTime
CloseHandle
SetFilePointer
CreateFileW
DeleteCriticalSection
DecodePointer
EnterCriticalSection
HeapSize
RaiseException
LeaveCriticalSection
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
FormatMessageW
GetACP
MultiByteToWideChar
WideCharToMultiByte
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceW
LoadResource
LockResource
SizeofResource
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
DeleteFileW
ExitProcess
CopyFileW
GetModuleHandleW
GetModuleFileNameW
GetLastError
GetTempPathW
SetThreadLocale
SetThreadUILanguage
FreeEnvironmentStringsW
GetCommandLineW

user32

UnhookWindowsHookEx
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextW
RemovePropW
GetPropW
SetPropW
RedrawWindow
SetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
SetWindowPos
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
SetCursor
CallNextHookEx
SetWindowsHookExW
GetCursorPos
GetKeyState
IsWindowVisible
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetFocus
GetWindowRect
CopyRect
ReleaseDC
GetDC
SetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetLastActivePopup
GetWindowThreadProcessId
GetWindowLongW
MessageBoxW
IsWindowEnabled
KillTimer
SetTimer
PeekMessageW
DispatchMessageW
EnableWindow
LoadIconW
SendMessageW
GetSystemMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
PostQuitMessage
GetParent
SendDlgItemMessageA
GetActiveWindow
GetForegroundWindow
GetDesktopWindow
UnregisterClassW
ValidateRect
EnableMenuItem
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
PostMessageW
CharUpperW
GetSysColorBrush
InvalidateRect
RealChildWindowFromPoint
LoadCursorW
ClientToScreen
EndPaint
BeginPaint
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
DestroyMenu
IsDialogMessageW
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
TranslateMessage
SetWindowTextW

gdi32

GetStockObject
PtVisible
RectVisible
RestoreDC
SaveDC
SelectObject
SetMapMode
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
Escape
DeleteObject
ExtTextOutW
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
GetDeviceCaps

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegQueryValueW
RegEnumKeyW

shell32

ShellExecuteW
CommandLineToArgvW
ShellExecuteExW
SHGetSpecialFolderPathW

comctl32

InitCommonControlsEx

shlwapi

StrToIntW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFileExistsW

ole32

CoUninitialize
CoCreateGuid
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VariantChangeType
VariantClear
VariantInit
SysAllocString
SysFreeString

ws2_32

WSAStartup
WSACleanup
WSASetLastError

crypt32

CertCloseStore
CertFreeCertificateContext

wininet

InternetErrorDlg
HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpQueryInfoW
InternetConnectW
InternetOpenW
InternetReadFile
InternetCrackUrlW
InternetCloseHandle
HttpOpenRequestW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac5aab8adb243a271b4893bf3314d72f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

crypt32

wininet

version

oleacc

Sections

.text Size: 236KB - Virtual size: 236KB

.rdata Size: 82KB - Virtual size: 82KB

.data Size: 11KB - Virtual size: 28KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 236KB - Virtual size: 236KB

.rdata
Size: 82KB - Virtual size: 82KB

.data
Size: 11KB - Virtual size: 28KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 16KB - Virtual size: 16KB