2024-05-31_a0d407e81f649f54a573c2ea294566cf_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-31_a0d407e81f649f54a573c2ea294566cf_bkransomware
Size

3.7MB
MD5

a0d407e81f649f54a573c2ea294566cf
SHA1

6c76b269aa0522d04d976e98670210c9f2582a7b
SHA256

757a5812244185b9cd18e9811e3377feeb09137ecc2543914394bd32b8b97291
SHA512

5d974d4a10f9d8cdcd627f0c01db8539c0fa20570c3905b74b46d03f4a1d43d465e59abb61a20702786a7287ea327f0f14ccd6db26023490489fe0b841e27353
SSDEEP

98304:RBknRq0g+7P7r/NTt9czF2FvNopy3hmj+reFLOAkGkzdnEVomFHKnPEr7wRGpj3:RBO1Tq2hmj+reFLOyomFHKnPUF9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-31_a0d407e81f649f54a573c2ea294566cf_bkransomware

Files

2024-05-31_a0d407e81f649f54a573c2ea294566cf_bkransomware
.exe windows:6 windows x86 arch:x86

95f36358d05ffe3cd9ccca417364e86b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\wrk1\3edd2bab1a5440f9\BUILD\Win8\Release\x64\ITBM.pdb

Imports

cfgmgr32

CM_Get_Device_Interface_ListW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

wtsapi32

WTSRegisterSessionNotification

kernel32

GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStringTypeW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
GetCPInfo
GetOEMCP
GetACP
FreeLibrary
LoadLibraryW
CreateEventW
GetLastError
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
IsValidCodePage
CloseHandle
LoadLibraryExW
GetWindowsDirectoryW
OpenProcess
QueryFullProcessImageNameW
OutputDebugStringW
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
LeaveCriticalSection
InitializeCriticalSectionEx
RaiseException
HeapSize
EnterCriticalSection
DecodePointer
DeleteCriticalSection
LoadLibraryExA
GetProcAddress
ExpandEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
EncodePointer
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
GetSystemInfo
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
RtlUnwind
SetLastError
GetCurrentThreadId
GetSystemDirectoryW
FreeResource
GetModuleHandleA
IsProcessorFeaturePresent
IsDebuggerPresent
GetModuleHandleW
GlobalDeleteAtom
lstrcmpW
GetCommandLineW
FindResourceExW
VirtualProtect
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
GetProfileIntW
GetTickCount
SearchPathW
Sleep
GetTempPathW
GetTempFileNameW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
FileTimeToSystemTime
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
GetCurrentDirectoryW
GlobalReAlloc
GetFileSize
GetFileAttributesW
CreateFileW
VerifyVersionInfoW
VerSetConditionMask
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
WaitForSingleObject
lstrcpyW
LoadLibraryA
lstrcmpA
GetVersionExW
GetCurrentThread
WideCharToMultiByte
MultiByteToWideChar
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalSize
GlobalAlloc
GetCurrentProcessId
GlobalFree
GlobalUnlock
GlobalLock
GlobalFindAtomW
GlobalAddAtomW

user32

GetWindowRgn
InsertMenuItemW
TranslateAcceleratorW
CopyIcon
GetDoubleClickTime
GetKeyNameTextW
SetClassLongW
LockWindowUpdate
BringWindowToTop
SetParent
SetRect
SetCursorPos
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
MapVirtualKeyW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
MessageBeep
DeleteMenu
GetSystemMenu
CharUpperW
IsZoomed
TrackMouseEvent
RealChildWindowFromPoint
MonitorFromPoint
EnableScrollBar
GetAsyncKeyState
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
IntersectRect
EnumDisplayMonitors
LoadCursorW
GetSysColorBrush
SetLayeredWindowAttributes
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
ShowOwnedPopups
TranslateMessage
GetMessageW
SendDlgItemMessageA
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IsDialogMessageW
IsWindowEnabled
DestroyCursor
CheckDlgButton
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassLongW
SetWindowLongW
EqualRect
GetSysColor
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetActiveWindow
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetWindowRect
GetIconInfo
DrawIconEx
CopyImage
LoadImageW
DestroyIcon
GetParent
GetWindowLongW
PtInRect
IsRectEmpty
OffsetRect
InflateRect
CopyRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ClientToScreen
SetCursor
RedrawWindow
ReleaseCapture
SetCapture
GetNextDlgGroupItem
IsWindow
LoadBitmapW
FillRect
GetComboBoxInfo
MapDialogRect
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
InvertRect
InvalidateRect
UpdateWindow
HideCaret
WaitMessage
PostThreadMessageW
FrameRect
CharUpperBuffW
RegisterClipboardFormatW
ReuseDDElParam
UnpackDDElParam
DrawStateW
EnumChildWindows
GetClassNameW
GetDesktopWindow
SetForegroundWindow
UnregisterClassW
TrackPopupMenu
GetCursorPos
GetForegroundWindow
GetWindowThreadProcessId
EnableMenuItem
ModifyMenuW
GetSubMenu
LoadMenuW
ScreenToClient
RegisterDeviceNotificationW
GetWindow
KillTimer
DrawIcon
GetSystemMetrics
IsIconic
PostMessageW
SetTimer
ChangeWindowMessageFilter
PostQuitMessage
UnregisterDeviceNotification
LoadIconW
EnumWindows
SetWindowPos
GetClientRect
ShowWindow
GetWindowPlacement
SendMessageW
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
GetFocus
EnableWindow
RemoveMenu

gdi32

GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CreateCompatibleBitmap
CreateDIBitmap
CreateRectRgnIndirect
EnumFontFamiliesW
GetTextCharsetInfo
CombineRgn
PatBlt
SetRectRgn
DPtoLP
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
CreateRoundRectRgn
GetRgnBox
OffsetRgn
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
SetPixelV
GetTextFaceW
ExcludeClipRect
GetClipBox
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
GetDeviceCaps
CreateDCW
CopyMetaFileW
CreateBitmap
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
GetObjectType
CreateCompatibleDC
GetObjectW
GetStockObject
DeleteObject
CreateSolidBrush
GetTextMetricsW
DeleteDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetOpenFileNameW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCopyTreeW
RegOpenKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegDeleteTreeW
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHAppBarMessage
SHGetFileInfoW
DragFinish
Shell_NotifyIconW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
ShellExecuteW
DragQueryFileW
SHGetDesktopFolder

comctl32

InitCommonControlsEx

shlwapi

PathStripPathW
PathFindFileNameW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsAppThemed
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
DrawThemeText

ole32

CoInitializeEx
DoDragDrop
CoDisconnectObject
CreateStreamOnHGlobal
CoInitialize
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning

oleaut32

VarBstrFromDate
VariantCopy
SystemTimeToVariantTime
LoadTypeLi
SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString
VariantChangeType
VariantClear
VariantInit
VariantTimeToSystemTime

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 684KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

95f36358d05ffe3cd9ccca417364e86b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

cfgmgr32

version

wtsapi32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 326KB - Virtual size: 326KB

.data Size: 24KB - Virtual size: 55KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 684KB - Virtual size: 688KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 326KB - Virtual size: 326KB

.data
Size: 24KB - Virtual size: 55KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 684KB - Virtual size: 688KB