2024-05-23_f502921479177ad717ed8da33c39e805_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-23_f502921479177ad717ed8da33c39e805_bkransomware
Size

2.2MB
MD5

f502921479177ad717ed8da33c39e805
SHA1

49f10343b5df63e5be99977f57425f7be814a68c
SHA256

794fa9c23273d612726dcbc6d0f11517bbc0e99e710d5bcb7223612e4736b506
SHA512

66cb2f0829c10f3ed8fe60ec5a5e894422f638844ad9add2e0eb8b0882e54ed6f28a4b598db3412355de5b55e86504d68284aa06e77bf8b41419c3b648024226
SSDEEP

49152:BmCCxFebynZRQVYyYUANelcXvvoniN1EqPOwnaXGv:DC2biZRQVYyYneGXvQiN1EqPOwA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-23_f502921479177ad717ed8da33c39e805_bkransomware

Files

2024-05-23_f502921479177ad717ed8da33c39e805_bkransomware
.exe windows:5 windows x86 arch:x86

ba48f52523c6dc36896ffddc9584b9ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\Sello\tags\1.0.6.0\윈폼버전\soUpdater\Release\soUpdater.pdb

Imports

wininet

InternetSetStatusCallbackW
InternetQueryOptionW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenUrlW
InternetSetFilePointer
InternetWriteFile
HttpQueryInfoW
FtpOpenFileW
InternetGetLastResponseInfoW
FtpFindFirstFileW
InternetCloseHandle
FtpSetCurrentDirectoryW
InternetConnectW
InternetReadFile
InternetFindNextFileW
InternetOpenW
InternetQueryDataAvailable

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

GetSystemInfo
VirtualAlloc
VirtualQuery
GetStdHandle
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleMode
ReadConsoleW
GetStringTypeW
SetFilePointerEx
GetConsoleCP
GetTimeZoneInformation
OutputDebugStringW
LCMapStringW
WriteConsoleW
GetDriveTypeW
SetEnvironmentVariableA
GetSystemTimeAsFileTime
ExitThread
CreateThread
FindResourceW
LoadResource
InitializeCriticalSectionAndSpinCount
SizeofResource
MultiByteToWideChar
LockResource
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
LeaveCriticalSection
RaiseException
GetLastError
HeapSize
EnterCriticalSection
DecodePointer
DeleteCriticalSection
WideCharToMultiByte
GetTempFileNameW
CreateProcessW
CreateDirectoryW
WaitForSingleObject
WriteFile
GetSystemDirectoryW
GetVersionExW
GetModuleFileNameW
CreateFileW
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetFileType
SetStdHandle
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineW
FindResourceExW
VirtualProtect
SetErrorMode
GetProfileIntW
GetTempPathW
GetLongPathNameW
CloseHandle
GetWindowsDirectoryW
DeleteFileW
ExpandEnvironmentStringsW
GetCurrentProcess
Sleep
GetTickCount
SearchPathW
VerifyVersionInfoW
VerSetConditionMask
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
lstrcmpiW
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
lstrcpyW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
GlobalGetAtomNameW
SetThreadPriority
CreateEventW
SetEvent
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
FindNextFileW
FindFirstFileW
FindClose
lstrcmpA
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
EncodePointer
LoadLibraryA
GetModuleHandleW
GetModuleHandleA
FreeResource
OutputDebugStringA
FileTimeToSystemTime
LocalAlloc
LoadLibraryExW
FreeLibrary
FileTimeToLocalFileTime
GetCurrentThreadId
GetCurrentProcessId
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
CopyFileW
LocalFileTimeToFileTime
GetCurrentDirectoryW
ReadFile
SetFileTime
SystemTimeToFileTime
SetFilePointer
ResumeThread
SuspendThread
WinExec
RemoveDirectoryW
GetExitCodeThread
GetProcAddress
TerminateThread
LoadLibraryW
TerminateProcess
HeapQueryInformation

user32

DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
GetComboBoxInfo
GetUpdateRect
CreateMenu
SubtractRect
GetWindowRgn
SetParent
SetClassLongW
DrawFocusRect
DrawFrameControl
DrawEdge
RegisterClipboardFormatW
DrawIconEx
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetNextDlgGroupItem
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
DestroyIcon
WaitMessage
CopyImage
RealChildWindowFromPoint
MonitorFromPoint
SystemParametersInfoW
UnionRect
EnableScrollBar
DestroyMenu
UpdateLayeredWindow
IsMenu
IsRectEmpty
SetMenuDefaultItem
GetMenuDefaultItem
GetMenuItemInfoW
CreatePopupMenu
NotifyWinEvent
OffsetRect
IntersectRect
InflateRect
SetRectEmpty
WindowFromPoint
MessageBeep
SetWindowRgn
DeleteMenu
GetSystemMenu
KillTimer
ReleaseCapture
SetCapture
GetAsyncKeyState
CharUpperW
IsZoomed
TrackMouseEvent
LoadCursorW
GetSysColorBrush
LoadMenuW
SendDlgItemMessageA
DrawStateW
GetMessageW
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
SetMenuItemInfoW
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
SetWindowTextW
DestroyCursor
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
FillRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
CopyRect
ReleaseDC
GetDC
MapVirtualKeyW
GetKeyNameTextW
SetActiveWindow
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
GetDesktopWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
PtInRect
ScreenToClient
ClientToScreen
GetCursorPos
GetFocus
IsWindow
GetLastActivePopup
GetDoubleClickTime
IsClipboardFormatAvailable
InvertRect
CharUpperBuffW
GetIconInfo
PostThreadMessageW
FrameRect
CopyIcon
SetCursorPos
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
BringWindowToTop
GetWindowThreadProcessId
IsWindowEnabled
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
ModifyMenuW
CheckDlgButton
LockWindowUpdate
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetWindowRect
GetParent
InvalidateRect
UpdateWindow
SetTimer
IsIconic
PostMessageW
DrawIcon
GetClientRect
LoadIconW
GetWindowLongW
SetWindowLongW
LoadBitmapW
GetSystemMetrics
SendMessageW
EnableWindow
MessageBoxA
WaitForInputIdle
TranslateMessage
PeekMessageW
MessageBoxW
DispatchMessageW
UnregisterClassW
GetMenuCheckMarkDimensions
HideCaret

gdi32

ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetObjectW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRoundRectRgn
CreateCompatibleBitmap
Escape
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
RoundRect
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
PatBlt
CreateRectRgnIndirect
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetStockObject
CreatePatternBrush
CreateDIBSection
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

IsTextUnicode
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteW
SHGetPathFromIDListW
SHGetFileInfoW
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

UrlUnescapeW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
GetThemePartSize

ole32

OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleUninitialize
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
CoInitializeEx
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance

oleaut32

SafeArrayDestroy
VariantCopy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

winmm

PlaySoundW

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba48f52523c6dc36896ffddc9584b9ce

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

version

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

winmm

imm32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 349KB - Virtual size: 348KB

.data Size: 26KB - Virtual size: 57KB

.rsrc Size: 312KB - Virtual size: 312KB

.reloc Size: 123KB - Virtual size: 123KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 349KB - Virtual size: 348KB

.data
Size: 26KB - Virtual size: 57KB

.rsrc
Size: 312KB - Virtual size: 312KB

.reloc
Size: 123KB - Virtual size: 123KB