2024-05-24_0957151a2c222ee1fb4675a6f19dbd3e_bkransomware_qakbot

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-24_0957151a2c222ee1fb4675a6f19dbd3e_bkransomware_qakbot
Size

3.3MB
MD5

0957151a2c222ee1fb4675a6f19dbd3e
SHA1

0c811a7208ee52537d049ea4a3c43f6dcea5e031
SHA256

6e1a3356a3f78d7efbf4040dc120d34d662c2902fa2dc0404998a5eee46daf54
SHA512

0b31d78430683ebf56d77440c530d858a17e843ef978c5757341a80e9ab0aa7248be18576e6e4c30be4a224a0b2dc06d5250e04c6b7b6a4545ea1fa6a9576dcb
SSDEEP

49152:MwuJ0vlz7nrEHI1kltJXHeKteJLSqHjcUxzFeh+eI5LMpP6GZOTf21j:Xw0mMkltsKqZeTI5LMpP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-24_0957151a2c222ee1fb4675a6f19dbd3e_bkransomware_qakbot

Files

2024-05-24_0957151a2c222ee1fb4675a6f19dbd3e_bkransomware_qakbot
.exe windows:5 windows x86 arch:x86

3f036334218d11ffd4f5b717356497af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

sdl2

SDL_RenderGetViewport
SDL_SetRenderDrawColor
SDL_RenderSetScale
SDL_RenderClear
SDL_CreateRenderer
SDL_GetRenderDrawColor
SDL_RenderFillRect
SDL_RenderSetClipRect
SDL_SetTextureBlendMode
SDL_SetTextureAlphaMod
SDL_UnlockTexture
SDL_CreateTexture
SDL_GetRGBA
SDL_LockTexture
SDL_SetTextureColorMod
SDL_RenderCopyExFloat
SDL_WaitThread
SDL_CreateThread
SDL_DestroyMutex
SDL_CreateMutex
SDL_LockMutex
SDL_UnlockMutex
SDL_MapRGBA
SDL_FreeFormat
SDL_AllocFormat
SDL_RenderPresent
SDL_RenderSetViewport
SDL_DestroyRenderer
SDL_Log
SDL_GetNumDisplayModes
SDL_GetTicks
SDL_PushEvent
SDL_Delay
SDL_GetWindowFlags
SDL_SetCursor
SDL_SetWindowDisplayMode
SDL_ShowCursor
SDL_CreateColorCursor
SDL_SetWindowFullscreen
SDL_GetDisplayMode
SDL_DestroyTexture
SDL_strncasecmp
SDL_isspace
SDL_isdigit
SDL_calloc
SDL_snprintf
SDL_memcmp
SDL_ReadLE32
SDL_ReadLE16
SDL_Error
SDL_ClearError
SDL_strrchr
SDL_toupper
SDL_UnloadObject
SDL_LoadFunction
SDL_LoadObject
SDL_SetColorKey
SDL_MapRGB
SDL_LoadFile_RW
SDL_SetError
SDL_tanf
SDL_sqrtf
SDL_sqrt
SDL_sinf
SDL_pow
SDL_fmodf
SDL_floorf
SDL_fabsf
SDL_fabs
SDL_cosf
SDL_ceilf
SDL_atan2f
SDL_acosf
SDL_sscanf
SDL_strncmp
SDL_strcmp
SDL_strtoll
SDL_strtol
SDL_strstr
SDL_strchr
SDL_strlcpy
SDL_strlen
SDL_memcpy
SDL_memset
SDL_qsort
SDL_free
SDL_realloc
SDL_malloc
SDL_StartTextInput
SDL_StopTextInput
SDL_Quit
SDL_SetWindowPosition
SDL_GetError
SDL_RestoreWindow
SDL_GetRendererInfo
SDL_SetWindowSize
SDL_MaximizeWindow
SDL_SetHint
SDL_PollEvent
SDL_CreateWindow
SDL_DestroyWindow
SDL_Init
SDL_FreeSurface
SDL_GetPixelFormatName
SDL_CreateRGBSurface
SDL_QueryTexture
SDL_UnlockSurface
SDL_LockSurface
SDL_SetRenderTarget
SDL_CreateTextureFromSurface
SDL_RWFromFile
SDL_ConvertSurfaceFormat
SDL_GetWindowSize

kernel32

SetEndOfFile
VirtualProtect
VirtualFree
VirtualAlloc
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
DeleteFileW
FlushFileBuffers
CreateDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
FreeLibrary
GetOEMCP
GetACP
IsValidCodePage
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
WriteFile
GetProcessHeap
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
CreateTimerQueue
GetCPInfo
CreateSemaphoreW
GetTickCount
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleW
GetFileType
GetStdHandle
LoadLibraryExW
SetThreadExecutionState
GetVersionExW
GetModuleHandleW
LoadLibraryW
GetProcAddress
GetCurrentThreadId
WideCharToMultiByte
GetModuleFileNameW
SetCurrentDirectoryA
GetModuleFileNameA
MultiByteToWideChar
CreateFileW
SetEnvironmentVariableA
SetStdHandle
GetTimeZoneInformation
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
ExitThread
CreateThread
HeapReAlloc
RaiseException
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineA
AreFileApisANSI
GetModuleHandleExW
ExitProcess
ReadFile
HeapAlloc
HeapFree
GetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetStringTypeW
GetCurrentThread
GetCurrentProcess
DuplicateHandle
CloseHandle

user32

GetSystemMetrics

shell32

SHGetFolderPathA
ShellExecuteW

openal32

alSourceUnqueueBuffers
alDeleteBuffers
alGenSources
alcCreateContext
alcOpenDevice
alSourcef
alSourcePlay
alIsSource
alGenBuffers
alSource3f
alSourceStop
alcDestroyContext
alDeleteSources
alcGetError
alSourcePause
alcGetContextsDevice
alListener3f
alBufferData
alcMakeContextCurrent
alGetSourcei
alSourceQueueBuffers
alGetError
alcCloseDevice

Exports

Exports

IMG_Init
IMG_Linked_Version
IMG_Load
IMG_LoadBMP_RW
IMG_LoadCUR_RW
IMG_LoadGIF_RW
IMG_LoadICO_RW
IMG_LoadJPG_RW
IMG_LoadLBM_RW
IMG_LoadPCX_RW
IMG_LoadPNG_RW
IMG_LoadPNM_RW
IMG_LoadSVG_RW
IMG_LoadTGA_RW
IMG_LoadTIF_RW
IMG_LoadTexture
IMG_LoadTextureTyped_RW
IMG_LoadTexture_RW
IMG_LoadTyped_RW
IMG_LoadWEBP_RW
IMG_LoadXCF_RW
IMG_LoadXPM_RW
IMG_LoadXV_RW
IMG_Load_RW
IMG_Quit
IMG_ReadXPMFromArray
IMG_SaveJPG
IMG_SaveJPG_RW
IMG_SavePNG
IMG_SavePNG_RW
IMG_isBMP
IMG_isCUR
IMG_isGIF
IMG_isICO
IMG_isJPG
IMG_isLBM
IMG_isPCX
IMG_isPNG
IMG_isPNM
IMG_isSVG
IMG_isTIF
IMG_isWEBP
IMG_isXCF
IMG_isXPM
IMG_isXV

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f036334218d11ffd4f5b717356497af

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

kernel32

user32

shell32

openal32

Exports

Exports

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 424KB - Virtual size: 423KB

.data Size: 152KB - Virtual size: 588KB

_RDATA Size: 2KB - Virtual size: 1KB

.rsrc Size: 187KB - Virtual size: 186KB

.reloc Size: 206KB - Virtual size: 206KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 424KB - Virtual size: 423KB

.data
Size: 152KB - Virtual size: 588KB

_RDATA
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 187KB - Virtual size: 186KB

.reloc
Size: 206KB - Virtual size: 206KB