2024-06-08_ba5e72f7ea87d7749c3f920c07072c72_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target
2024-06-08_ba5e72f7ea87d7749c3f920c07072c72_bkransomware
Size 1.4MB
Sample240608-hymjhsba65
SHA256 0d0183dd2cc1d26514188cf02a4e999d3810cc6d136b3615e7d9590d07304d98
MD5 ba5e72f7ea87d7749c3f920c07072c72
SHA1 33c5b6f3bef295198b08b9f7dd78ed8e6b55e3a0
SHA512 f4f704831b95efd28906f8ae580534b55da13e02d21c4f0dcc1a396141bac42ca3df1e507f7daf7ef95a8b524a0100f46f0b8e17340e40f97e45e6f74987b644
SSDEEP 24576:HxZw6sCsY7zJMVCnQOR7HEqzDOJxbSPiZ9TMseHz:RZ6qzJKCnEzHSa3Tcz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2024-06-08_ba5e72f7ea87d7749c3f920c07072c72_bkransomware

.exe 1.4MB

2024-06-08_ba5e72f7ea87d7749c3f920c07072c72_bkransomware

IMPHASH 6f9815077a15849f18fbcdd4b412fbaf
SHA256 0d0183dd2cc1d26514188cf02a4e999d3810cc6d136b3615e7d9590d07304d98
MD5 ba5e72f7ea87d7749c3f920c07072c72
SHA1 33c5b6f3bef295198b08b9f7dd78ed8e6b55e3a0
SHA512 f4f704831b95efd28906f8ae580534b55da13e02d21c4f0dcc1a396141bac42ca3df1e507f7daf7ef95a8b524a0100f46f0b8e17340e40f97e45e6f74987b644
SSDEEP 24576:HxZw6sCsY7zJMVCnQOR7HEqzDOJxbSPiZ9TMseHz:RZ6qzJKCnEzHSa3Tcz
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

821139

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

X:\Utils\FFProc\Release\FFProc.pdb

vcomp120

_vcomp_enter_critsect _vcomp_fork _vcomp_for_static_simple_init _vcomp_for_static_end omp_set_num_threads _vcomp_leave_critsect

kernel32

GetOEMCP GetCPInfo GetTimeZoneInformation FlushFileBuffers GetConsoleCP GetConsoleMode ReadConsoleW SetFilePointerEx HeapQueryInformation VirtualQuery LoadLibraryExW GetStringTypeW GetLocaleInfoW CompareStringW LCMapStringW SetStdHandle WriteConsoleW SetEnvironmentVariableA OutputDebugStringA GetModuleHandleA GlobalAlloc GlobalFree lstrcmpA SuspendThread ResumeThread GetVersionExW GlobalDeleteAtom lstrcmpW CompareStringA GetPrivateProfileIntW GetACP WritePrivateProfileStringW GlobalAddAtomW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFileAttributesExW GetFileSizeEx GetFileTime GetFullPathNameW GetVolumeInformationW LockFile UnlockFile DuplicateHandle LoadLibraryA GetSystemDirectoryW GlobalFindAtomW InitializeCriticalSection GlobalReAlloc GlobalHandle LocalAlloc LocalReAlloc GlobalFlags GetCurrentDirectoryW GetSystemDefaultUILanguage GetUserDefaultUILanguage SetErrorMode IsValidCodePage IsProcessorFeaturePresent IsDebuggerPresent TlsFree TlsSetValue TlsGetValue TlsAlloc UnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameW GetStartupInfoW GetFileType GetStdHandle GetCurrentThread SetLastError AreFileApisANSI GetModuleHandleExW ExitProcess GetSystemTimeAsFileTime RtlUnwind EncodePointer GetCommandLineW QueryPerformanceFrequency QueryPerformanceCounter InterlockedExchangeAdd MoveFileW FlushViewOfFile FileTimeToSystemTime FileTimeToLocalFileTime SetEndOfFile InterlockedDecrement InterlockedIncrement RaiseException HeapSize lstrlenA CreateThread ExitThread HeapReAlloc DecodePointer SetFilePointer SetEvent MapViewOfFileEx OutputDebugStringW CreateFileMappingW CreateMutexW UnmapViewOfFile CreateDirectoryW GetDriveTypeW FormatMessageW DeviceIoControl GetProcessHeap GetTempPathA HeapFree HeapAlloc LocalFree GlobalUnlock GlobalLock GlobalSize FreeLibrary WideCharToMultiByte DeleteFileW SetFileAttributesW GetModuleHandleW GetFileSize MultiByteToWideChar CreateNamedPipeW CreateFileW FindResourceW LoadLibraryW CreateEventW ConnectNamedPipe GetTickCount GetSystemInfo CloseHandle ReadFile WriteFile SizeofResource LoadResource Sleep WaitForSingleObject DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetLastError SetThreadPriority GetCurrentThreadId SetUnhandledExceptionFilter TerminateProcess GetCurrentProcessId GetCurrentProcess SetProcessWorkingSetSize GetProcAddress LockResource GetPrivateProfileStringW

user32

DrawTextW InvalidateRect KillTimer SetTimer RealChildWindowFromPoint ClientToScreen LoadCursorW GetSysColorBrush GetDC SetWindowTextW ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW LoadIconW GetTopWindow GetClassNameW GetClassLongW SetWindowLongW PtInRect GetSysColor MapWindowPoints ScreenToClient AdjustWindowRectEx GetClientRect RemovePropW GetPropW SetPropW DrawTextExW RedrawWindow SetForegroundWindow GetForegroundWindow UpdateWindow SetMenu GetMenu GetCapture GetDlgCtrlID GetDlgItem SetWindowPos IsWindow GetClassInfoExW GetClassInfoW CallWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW GetWindow GetWindowTextW GetSystemMetrics CharUpperW GetLastActivePopup GetWindowThreadProcessId GetWindowLongW IsWindowEnabled EnableWindow SetCursor PostQuitMessage PostMessageW CallNextHookEx SetWindowsHookExW ValidateRect GetKeyState GrayStringW TabbedTextOutW DestroyMenu GetActiveWindow IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetFocus SendMessageW UnhookWindowsHookEx GetMenuItemCount GetMenuItemID GetSubMenu GetParent UnregisterClassW FindWindowW EqualRect IsRectEmpty OffsetRect CopyRect GetCursorPos MessageBoxW GetWindowRect ReleaseDC GetWindowDC DestroyWindow CreateWindowExW RegisterClassW DefWindowProcW

gdi32

TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx SetMapMode SelectObject DeleteObject DeleteDC CreateCompatibleDC SetWindowExtEx BitBlt SaveDC RestoreDC RectVisible PtVisible GetStockObject GetClipBox Escape SetTextColor SetBkColor CreateBitmap GetDeviceCaps CreateDIBSection

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

RegEnumValueW RegQueryValueW RegEnumKeyW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW

shlwapi

PathIsURLW PathIsUNCW ord12 PathFileExistsW PathFindExtensionW PathAppendW PathFindFileNameW PathStripToRootW PathIsDirectoryW

ole32

StgOpenStorageEx CoUninitialize CoCreateInstance StgCreateStorageEx StgIsStorageFile StgOpenStorageOnILockBytes CoTaskMemFree CoCreateGuid StringFromGUID2 CLSIDFromString CoInitialize

oleaut32

SystemTimeToVariantTime VariantTimeToSystemTime SysFreeString SysAllocString VariantInit VariantClear VariantChangeType

gdiplus

GdipDrawImageI GdipGraphicsClear GdipBitmapUnlockBits GdipBitmapLockBits GdipGetImageThumbnail GdipBitmapSetResolution GdipSetPropertyItem GdipGetAllPropertyItems GdipGetPropertySize GdipGetPropertyItem GdipGetPropertyItemSize GdipGetPropertyIdList GdipGetPropertyCount GdipImageRotateFlip GdiplusStartup GdiplusShutdown GdipCreatePen1 GdipDeletePen GdipSetPenColor GdipCloneImage GdipDisposeImage GdipSaveImageToFile GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipCreateBitmapFromScan0 GdipCreateBitmapFromGdiDib GdipCreateImageAttributes GdipDisposeImageAttributes GdipSetImageAttributesWrapMode GdipDeleteGraphics GdipSetCompositingMode GdipSetCompositingQuality GdipSetPixelOffsetMode GdipSetInterpolationMode GdipDrawRectangleI GdipDrawImageRectRectI GdipGetImageEncodersSize GdipGetImageEncoders GdipLoadImageFromStream GdipLoadImageFromFile GdipGetImageType

oleacc

CreateStdAccessibleObject LresultFromObject

generic

count=2, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=74, id=225, version=20806,

count=566, id=1, productName=Unmarked objects,

count=3, id=221, version=20806,

count=1, id=223, version=20806,

count=6, id=199, version=41118,

count=68, id=225, productName=VS2013 build 21005, version=21005,

count=61, id=223, productName=VS2013 build 21005, version=21005,

count=220, id=224, productName=VS2013 build 21005, version=21005,

count=225, id=229, version=40629,

count=8, productName=Unmarked objects (old),

count=1, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=8, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,