2024-06-01_cc501166bfd995c0cdb85c6394e93b68_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_cc501166bfd995c0cdb85c6394e93b68_bkransomware
Size

4.0MB
MD5

cc501166bfd995c0cdb85c6394e93b68
SHA1

55abac97d87149a78c2bd7f9cf674cbfeee9d37a
SHA256

841247229e6a32087e4dec66d379bdd4fc4a21d6921d00cc980f9f7928352841
SHA512

6b9e047807661cc39e02e33a0943f5fcbecb1d56ebcae4431c2c5667033ffdc9333fb9613492cf779a76e6f6fbf30c25eeae3245b51941ac963ccf2a6913eaf7
SSDEEP

98304:MB0cYi13ec3lIPULmnFfXu0lQJ3FoGfff2:C0ipyTQJ3FoGfff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_cc501166bfd995c0cdb85c6394e93b68_bkransomware

Files

2024-06-01_cc501166bfd995c0cdb85c6394e93b68_bkransomware
.exe windows:5 windows x86 arch:x86

c0ce69374c1c70a2bef0031b682619cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\CurrentProjects\SharedComponents\Development\VCP4GE-VME\VCP\Release (XP)\VCP.pdb

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
SetupDiClassGuidsFromNameW
SetupDiEnumDriverInfoW
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

timeprov

GetDATE

winmm

timeBeginPeriod
PlaySoundW
timeGetDevCaps
timeEndPeriod

kernel32

GetModuleHandleExW
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
CreateThread
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
RtlUnwind
ExitThread
IsProcessorFeaturePresent
SetStdHandle
GetUserDefaultLCID
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualQuery
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LCMapStringW
IsValidLocale
EnumSystemLocalesW
CreateTimerQueue
VirtualFree
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetStringTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
QueryDepthSList
UnregisterWaitEx
SetEnvironmentVariableA
SearchPathW
GetProfileIntW
GetTickCount
GetTempPathW
GetTempFileNameW
GetWindowsDirectoryW
SetErrorMode
GetCurrentDirectoryW
FindResourceExW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
ExitProcess
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetVersionExW
VirtualProtect
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
GetSystemDirectoryW
EncodePointer
SuspendThread
GetCurrentThreadId
CopyFileW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
LoadLibraryExA
FreeLibrary
LoadLibraryA
ExpandEnvironmentStringsA
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
InterlockedFlushSList
DecodePointer
HeapSize
RaiseException
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
FreeResource
GetProcAddress
SetLastError
SetDllDirectoryW
LoadLibraryW
lstrcpyW
WriteFile
WriteConsoleW
GetTimeFormatW
GetDateFormatW
GetLocalTime
GetModuleHandleW
GetStdHandle
CreateDirectoryW
GetModuleFileNameW
SetCriticalSectionSpinCount
GetCurrentProcess
OutputDebugStringA
InitializeSListHead
InterlockedPushEntrySList
InterlockedPopEntrySList
IsDebuggerPresent
VerSetConditionMask
VerifyVersionInfoW
LocalAlloc
lstrlenW
FormatMessageW
LocalFree
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
Sleep
DeviceIoControl
GetOverlappedResult
CancelIo
CreateEventW
ReleaseMutex
ResumeThread
WaitForSingleObject
CreateMutexW
CreateSemaphoreW
GetThreadPriority
QueryPerformanceCounter
ResetEvent
GetCurrentThread
SetThreadPriority
ReleaseSemaphore
WaitForMultipleObjects
QueryPerformanceFrequency
SetEvent
WideCharToMultiByte
MultiByteToWideChar
FileTimeToDosDateTime
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
CreateFileW
GetCommandLineW
WritePrivateProfileStringW
GetFileType

user32

SetCursorPos
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
SetParent
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
BringWindowToTop
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
IsRectEmpty
OffsetRect
SetRectEmpty
GetNextDlgGroupItem
GetMenuDefaultItem
CreatePopupMenu
DestroyIcon
IsIconic
DeleteMenu
ReleaseCapture
SetCapture
WaitMessage
CopyImage
CharUpperW
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
SetCursor
ShowOwnedPopups
PostQuitMessage
WindowFromPoint
SendDlgItemMessageA
MapVirtualKeyW
GetKeyNameTextW
MapDialogRect
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IntersectRect
GetWindowThreadProcessId
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetLastActivePopup
GetClassNameW
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
MapWindowPoints
MessageBoxW
SetRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
InsertMenuW
GetMenuItemCount
GetMenuItemID
LockWindowUpdate
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetMenuStringW
RemoveMenu
IsClipboardFormatAvailable
GetUpdateRect
DrawIcon
GetWindowRgn
DestroyCursor
CreateMenu
KillTimer
IsWindowVisible
CheckMenuItem
GetMenuState
SetTimer
GetSubMenu
AppendMenuW
GetSystemMenu
LoadMenuW
LoadImageW
LoadIconW
TranslateAcceleratorW
LoadAcceleratorsW
wsprintfW
UnregisterClassW
PostMessageW
PostThreadMessageW
GetDesktopWindow
IsWindow
MessageBeep
SetForegroundWindow
GetParent
GetAsyncKeyState
GetDlgCtrlID
GetWindowRect
GetWindow
GetTopWindow
GetFocus
InflateRect
GetSysColor
GetSystemMetrics
SendMessageW
DrawFrameControl
DrawFocusRect
CopyRect
GetClientRect
FillRect
InvalidateRect
EnableWindow
AdjustWindowRectEx
SubtractRect
CheckDlgButton

gdi32

DPtoLP
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
Polygon
Polyline
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetRectRgn
ExtFloodFill
SetPaletteEntries
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
SetTextAlign
SetTextColor
PatBlt
CreateRectRgnIndirect
CreateFontIndirectW
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
GetObjectW
CopyMetaFileW
GetTextMetricsW
GetBkColor
GetTextColor
DeleteObject
CreatePen
FillRgn
CreatePolygonRgn
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetTextExtentPoint32W
SelectObject
Rectangle
SetPixelV
CreateSolidBrush
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateBitmap
GetDeviceCaps
CreateDCW

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

OpenServiceW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
ControlService
QueryServiceStatusEx
StartServiceW
QueryServiceStatus
QueryServiceConfigW
CloseServiceHandle
InitializeSecurityDescriptor
OpenSCManagerW
ReportEventW
DeregisterEventSource
RegisterEventSourceW
CopySid
GetLengthSid
GetTokenInformation
RegNotifyChangeKeyValue
RegCreateKeyExW
InitiateSystemShutdownExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl

shell32

SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteW
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetFolderPathW
SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

SHRegSetPathW
PathAddExtensionW
PathUnquoteSpacesW
PathFindFileNameW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW

uxtheme

DrawThemeBackground
GetWindowTheme
GetThemeSysColor
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
CloseThemeData
DrawThemeText
OpenThemeData
GetThemePartSize

ole32

CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
DoDragDrop
CoTaskMemFree
CoTaskMemAlloc
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning

oleaut32

LoadTypeLi
VariantCopy
SysFreeString
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
VarDateFromStr
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePalette
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 516KB - Virtual size: 515KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0ce69374c1c70a2bef0031b682619cd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

setupapi

timeprov

winmm

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

version

oleacc

gdiplus

imm32

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 516KB - Virtual size: 515KB

.data Size: 56KB - Virtual size: 89KB

.tls Size: 512B - Virtual size: 25B

.rsrc Size: 100KB - Virtual size: 99KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 516KB - Virtual size: 515KB

.data
Size: 56KB - Virtual size: 89KB

.tls
Size: 512B - Virtual size: 25B

.rsrc
Size: 100KB - Virtual size: 99KB