2024-06-01_4c2601194bf900d43b56ad30efcaf641_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_4c2601194bf900d43b56ad30efcaf641_bkransomware
Size

1.3MB
MD5

4c2601194bf900d43b56ad30efcaf641
SHA1

6ca874086d372dfaedc68f8aabee167b5439da25
SHA256

ac358ecbe32558586fe4cd26727ca7c6a37d5a357d1d2ec19b3061c7b149b9c4
SHA512

415c4e4e682847dcd14a6ad490cca7a6e58668d92deb0d5c63a08b41f4cbfb7407bb10e23adb1bfb5e92ec20da64c7fac796c5471ccc015582ac6e113d444d9c
SSDEEP

24576:PXLtUK8+xBuKhpSK438pckG0WY9gxdvAp2ei9tige/5VjaXkeU6O9JBaaqEPDUXH:PXLt72klkV0I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_4c2601194bf900d43b56ad30efcaf641_bkransomware

Files

2024-06-01_4c2601194bf900d43b56ad30efcaf641_bkransomware
.exe windows:5 windows x86 arch:x86

4f1a424414a411e37425d0f692e72728

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\progs\Compiling\notepad2-mod\bin\VS2013\Release_x86\Notepad2.pdb

Imports

comctl32

ord8
ImageList_Destroy
ImageList_AddMasked
ImageList_Create
InitCommonControlsEx
CreateStatusWindowW

shlwapi

StrCpyNW
SHAutoComplete
StrDupA
StrStrIA
StrChrIA
StrTrimA
PathMatchSpecW
StrChrW
PathFileExistsW
PathUnquoteSpacesW
PathQuoteSpacesW
StrCatBuffA
StrNCatW
StrCatW
StrCmpIW
StrCmpW
StrStrA
UrlEscapeW
StrCmpNA
StrDupW
StrChrA
StrCmpNIA
StrCpyW
PathIsUNCW
UrlUnescapeW
PathRelativePathToW
PathIsPrefixW
PathUnExpandEnvStringsW
PathIsDirectoryW
PathFindExtensionW
StrStrW
PathIsRelativeW
PathCanonicalizeW
PathGetDriveNumberW
PathIsRootW
PathAppendW
StrChrIW
StrCmpNIW
PathCommonPrefixW
PathCompactPathExW
PathStripToRootW
StrRChrW
StrFormatByteSizeW
PathRenameExtensionW
StrStrIW
StrTrimW
PathRemoveFileSpecW
PathFindFileNameW
StrCatBuffW
StrRetToBufW

kernel32

ResetEvent
LocalAlloc
CreateEventW
lstrcmpiW
lstrcatW
CloseHandle
LocalFree
lstrcpyW
CreateThread
lstrcmpW
GetFileSize
lstrcmpA
lstrlenA
GetCPInfo
lstrcpynA
SetEndOfFile
GlobalSize
GlobalLock
GetModuleHandleW
GetTickCount
WriteFile
WideCharToMultiByte
ReadFile
CreateFileW
lstrcatA
GetACP
MultiByteToWideChar
GlobalUnlock
GetLastError
lstrcmpiA
GetProcAddress
IsValidCodePage
GetOEMCP
LocalSize
LCMapStringW
lstrcpyA
FreeResource
GlobalFree
LoadResource
GetCurrentProcess
GetLocaleInfoW
SizeofResource
MulDiv
WritePrivateProfileSectionW
GetLongPathNameW
LockResource
GetModuleHandleA
GetWindowsDirectoryW
GetPrivateProfileSectionW
ExpandEnvironmentStringsW
GetCommandLineW
GetDateFormatW
SearchPathW
FindFirstFileW
FindFirstChangeNotificationW
SetErrorMode
FreeLibrary
CreateProcessW
CompareFileTime
FindCloseChangeNotification
GetPrivateProfileStringW
LoadLibraryW
GetTimeFormatW
GetStartupInfoW
FindClose
GetLocalTime
SetCurrentDirectoryW
FindNextChangeNotification
GetVersion
SetFileAttributesW
SetEvent
GlobalAlloc
FormatMessageW
lstrcpynW
GetFileAttributesW
GetCurrentDirectoryW
GetPrivateProfileIntW
WritePrivateProfileStringW
lstrlenW
ExitThread
FindResourceW
FlushFileBuffers
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
RtlUnwind
HeapReAlloc
GetStringTypeW
RaiseException
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetFileType
GetStdHandle
GetProcessHeap
GetModuleHandleExW
ExitProcess
CompareStringW
HeapAlloc
HeapFree
GetTimeZoneInformation
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
SetLastError
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
DeleteCriticalSection
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
InitializeCriticalSection
QueryPerformanceCounter
LoadLibraryExW
GetLocaleInfoA
GetModuleFileNameW
WaitForSingleObject

user32

SetCapture
DestroyCursor
GetCaretBlinkTime
ShowOwnedPopups
ClientToScreen
SetWindowPlacement
TranslateAcceleratorW
SetTimer
ScreenToClient
GetMessageW
PostQuitMessage
TrackPopupMenu
ShowWindowAsync
RegisterWindowMessageW
IsIconic
IsChild
UnregisterClassW
KillTimer
IsZoomed
GetSubMenu
EnumWindows
GetDoubleClickTime
LoadAcceleratorsW
GetForegroundWindow
IsDialogMessageW
GetWindowPlacement
OffsetRect
TrackPopupMenuEx
CheckMenuRadioItem
IntersectRect
LoadMenuW
GetClassNameW
EnableMenuItem
ChangeClipboardChain
IsWindow
SetMenuDefaultItem
EqualRect
MessageBoxW
RegisterClassW
IsWindowVisible
CountClipboardFormats
UpdateWindow
DestroyMenu
GetDlgCtrlID
SetClipboardViewer
DefWindowProcW
CheckMenuItem
DrawAnimatedRects
GetWindowRect
SetActiveWindow
CharUpperBuffW
DialogBoxIndirectParamW
GetMenuStringW
IsWindowEnabled
GetClientRect
GetDC
GetMenu
CreateDialogIndirectParamW
SetRect
InvalidateRect
SystemParametersInfoW
ReleaseDC
GetMenuState
SetWindowPos
FindWindowExW
AdjustWindowRectEx
DeferWindowPos
GetSystemMetrics
MapWindowPoints
SetWindowTextW
GetMonitorInfoW
MonitorFromRect
DestroyWindow
SetCursor
CloseClipboard
GetSystemMenu
CharNextW
GetKeyState
IsClipboardFormatAvailable
LoadCursorW
wsprintfA
IsCharLowerA
SetFocus
IsCharUpperW
CharLowerW
GetCapture
ChildWindowFromPoint
SetCursorPos
CharLowerA
GetClipboardData
EmptyClipboard
CharUpperW
GetSysColor
GetCursorPos
GetSysColorBrush
IsCharLowerW
GetActiveWindow
CreateWindowExW
InsertMenuW
OpenClipboard
ReleaseCapture
SetClipboardData
IsCharAlphaNumericA
GetParent
GetWindowTextLengthW
GetDlgItemInt
RemovePropW
wvsprintfW
LoadImageW
PostMessageW
GetFocus
MessageBeep
CharPrevW
wsprintfW
SetPropW
TranslateMessage
SetDlgItemInt
LoadIconW
IsCharAlphaNumericW
GetWindowLongW
PeekMessageW
GetDlgItem
SetWindowLongW
EndDialog
SendDlgItemMessageW
LoadStringW
CheckDlgButton
ShowWindow
IsDlgButtonChecked
GetMessageTime
SetScrollInfo
RegisterClipboardFormatW
SetCaretPos
CreateCaret
AppendMenuA
DestroyCaret
IsWindowUnicode
GetScrollInfo
GetKeyboardLayout
RegisterClassExW
BeginPaint
ShowCaret
MsgWaitForMultipleObjects
HideCaret
GetUpdateRgn
EndPaint
CallWindowProcW
SystemParametersInfoA
FrameRect
CreatePopupMenu
InflateRect
DrawFocusRect
GetIconInfo
CreateIconIndirect
DrawTextA
DrawTextW
FillRect
CheckRadioButton
MessageBoxIndirectW
BeginDeferWindowPos
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
EnableWindow
EndDeferWindowPos
MessageBoxExW
GetPropW
DispatchMessageW
CopyImage
SetForegroundWindow

gdi32

CreateRectRgn
CombineRgn
CreateCompatibleDC
CreateFontIndirectA
StretchBlt
CreateDIBSection
Polygon
GetTextExtentPoint32A
BitBlt
CreateBitmap
CreateSolidBrush
ExtTextOutA
IntersectClipRect
RoundRect
CreatePatternBrush
GetNearestColor
GetTextExtentExPointA
GetTextExtentExPointW
Ellipse
CreateCompatibleBitmap
MoveToEx
EndPage
GetTextMetricsW
LineTo
StartPage
DeleteDC
SetBkColor
DPtoLP
ExtTextOutW
CreateFontW
StartDocW
CreatePen
SetTextAlign
EndDoc
TranslateCharsetInfo
GetTextExtentPoint32W
EnumFontsW
GetDeviceCaps
SetMapMode
SetTextColor
SetBkMode
SelectObject
CreateFontIndirectW
DeleteObject
GetObjectW
GetStockObject
Rectangle

comdlg32

ChooseFontW
PrintDlgW
GetSaveFileNameW
PageSetupDlgW
ChooseColorW
GetOpenFileNameW

advapi32

OpenProcessToken
GetTokenInformation
IsTextUnicode

shell32

ShellExecuteExW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetDataFromIDListW
SHAppBarMessage
SHAddToRecentDocs
SHGetFolderPathW
ord180
SHGetSpecialFolderPathW
SHCreateDirectoryExW
Shell_NotifyIconW
DragFinish
DragQueryFileW
DragAcceptFiles
SHBrowseForFolderW

ole32

OleUninitialize
OleInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize
RevokeDragDrop
DoDragDrop
RegisterDragDrop

imm32

ImmSetCompositionWindow
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmSetCompositionFontA
ImmNotifyIME

Sections

.text
Size: 1018KB - Virtual size: 1017KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 154KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f1a424414a411e37425d0f692e72728

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

imm32

Sections

.text Size: 1018KB - Virtual size: 1017KB

.data Size: 154KB - Virtual size: 193KB

.idata Size: 12KB - Virtual size: 11KB

.rsrc Size: 121KB - Virtual size: 121KB

.reloc Size: 40KB - Virtual size: 39KB

.text
Size: 1018KB - Virtual size: 1017KB

.data
Size: 154KB - Virtual size: 193KB

.idata
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 121KB - Virtual size: 121KB

.reloc
Size: 40KB - Virtual size: 39KB