2024-06-16_3a7b681e63e9f8ef9eeee0fc61bed889_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-16_3a7b681e63e9f8ef9eeee0fc61bed889_bkransomware
Size

3.4MB
MD5

3a7b681e63e9f8ef9eeee0fc61bed889
SHA1

40f24b1e57aabce1508dde0512517fe143157cb5
SHA256

0d28fbca918e926f9eee8c9f31dd75f05ab0a21b2d1af11f68da0e1fd2c70b75
SHA512

461eff1d06df185ad1c178353799a236dff91ab8759f1ff0a3c8b91c89220e68a9411d5bffa8920c39fcaebf2ba1e19022fd4727992188a0918521483e00cd8c
SSDEEP

98304:ftfmQeGSp0jb84kdr7FsnIdvZVRFLOAkGkzdnEVomFHKnPh:fYejbKvdvZVRFLOyomFHKnPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-16_3a7b681e63e9f8ef9eeee0fc61bed889_bkransomware

Files

2024-06-16_3a7b681e63e9f8ef9eeee0fc61bed889_bkransomware
.exe windows:6 windows x86 arch:x86

8b11fc090b097db2246c8fe879d68c16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\NexSoundPCTestApp_VoiceChangerTools\Release\VoiceChangerTools.pdb

Imports

bass

BASS_ChannelGetData
BASS_StreamCreate
BASS_ChannelGetInfo
BASS_ChannelPlay
BASS_ChannelSetPosition
BASS_ChannelPause
BASS_ChannelSeconds2Bytes
BASS_ChannelGetLength
BASS_ChannelBytes2Seconds
BASS_ChannelGetPosition
BASS_Init
BASS_StreamFree
BASS_ChannelRemoveDSP
BASS_ChannelStop
BASS_ChannelIsActive
BASS_StreamCreateFile

libnexsound_win32_x86_release

CreateNexSound

kernel32

GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetStringTypeW
ReadConsoleW
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
GetConsoleMode
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
GetCurrentDirectoryW
SizeofResource
LockResource
LoadResource
FindResourceW
CreateFileW
WriteFile
CloseHandle
OutputDebugStringA
Sleep
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
LeaveCriticalSection
InitializeCriticalSectionEx
RaiseException
GetConsoleCP
HeapSize
EnterCriticalSection
DecodePointer
DeleteCriticalSection
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateDirectoryW
GlobalSize
LocalFree
MulDiv
FormatMessageW
CopyFileW
SetLastError
GetVersionExW
GetModuleHandleA
GetModuleHandleW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetProcAddress
LoadLibraryA
LoadLibraryW
GetLastError
SetFilePointerEx
GetSystemInfo
HeapQueryInformation
ExitThread
DeleteFileW
FindClose
FindFirstFileW
CreateThread
AreFileApisANSI
GetModuleHandleExW
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineW
GetUserDefaultLCID
FindResourceExW
GetWindowsDirectoryW
SearchPathW
GetProfileIntW
VirtualProtect
GetTempPathW
GetTempFileNameW
GetTickCount
VerifyVersionInfoW
VerSetConditionMask
GlobalFlags
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcpyW
lstrcmpA
GetCurrentThread
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
FreeResource
FlushFileBuffers
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
EncodePointer
GetCurrentProcessId
GetThreadLocale
lstrcmpiW
LoadLibraryExW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize

user32

GetWindowRgn
RegisterClipboardFormatW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
UpdateLayeredWindow
GetUpdateRect
SetClassLongW
DestroyAcceleratorTable
ModifyMenuW
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
CopyIcon
GetIconInfo
GetDoubleClickTime
EnableScrollBar
LockWindowUpdate
CreatePopupMenu
BringWindowToTop
UnionRect
SetCursorPos
NotifyWinEvent
GetAsyncKeyState
IsZoomed
TrackMouseEvent
LoadImageW
DestroyIcon
MonitorFromPoint
SetParent
EnumDisplayMonitors
SetRectEmpty
SetLayeredWindowAttributes
MessageBeep
GetNextDlgGroupItem
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
KillTimer
DeleteMenu
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
IntersectRect
RealChildWindowFromPoint
CopyImage
LoadCursorW
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
SendDlgItemMessageA
InvalidateRect
SetCursor
ShowOwnedPopups
GetCursorPos
TranslateMessage
GetMessageW
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DrawIconEx
IsRectEmpty
OffsetRect
InflateRect
GetSysColorBrush
DrawStateW
DrawFrameControl
DrawEdge
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
MapVirtualKeyW
GetKeyNameTextW
ClientToScreen
DestroyCursor
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetWindowRect
LoadMenuW
IsDialogMessageW
GetWindow
SetWindowLongW
GetWindowTextLengthW
SetWindowTextW
GetDlgCtrlID
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
CreateMenu
InvertRect
HideCaret
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
PostThreadMessageW
IsClipboardFormatAvailable
GetDlgItemInt
SetDlgItemInt
FrameRect
CharUpperBuffW
SubtractRect
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
EndPaint
ToUnicodeEx
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
GetLastActivePopup
GetWindowThreadProcessId
GetWindowLongW
MessageBoxW
CharUpperW
GetParent
IsWindowEnabled
GetFocus
SetFocus
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
IsWindow
DrawIcon
GetClientRect
IsIconic
SetTimer
AppendMenuW
GetSystemMenu
LoadIconW
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
UnregisterClassW
RedrawWindow
SendMessageW
CopyRect
DrawFocusRect
GetSysColor
FillRect
EnableWindow
GetSystemMetrics
wsprintfW
GetWindowTextW
SetWindowRgn

gdi32

GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
Escape
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CombineRgn
CreateEllipticRgn
Ellipse
GetTextColor
GetTextExtentPoint32W
CreatePolygonRgn
Polygon
Polyline
GetTextMetricsW
CreateFontIndirectW
GetMapMode
SetRectRgn
DPtoLP
GetRgnBox
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
Rectangle
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
GetClipBox
GetBkColor
ExcludeClipRect
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
GetObjectW
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
OffsetWindowOrgEx
DeleteDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetOpenFileNameW
GetSaveFileNameW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW
RegQueryValueExW
RegCloseKey

shell32

DragQueryFileW
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
DragFinish
ShellExecuteW
SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeParentBackground
OpenThemeData
DrawThemeText
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData

ole32

OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
OleUninitialize
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoRegisterMessageFilter
CoRevokeClassObject
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoCreateInstance

oleaut32

SysFreeString
OleCreateFontIndirect
VarBstrFromDate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapUnlockBits
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdiplusShutdown
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdiplusStartup
GdipBitmapLockBits
GdipGetImagePixelFormat

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b11fc090b097db2246c8fe879d68c16

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

bass

libnexsound_win32_x86_release

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 351KB - Virtual size: 350KB

.data Size: 28KB - Virtual size: 138KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 127KB - Virtual size: 126KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 351KB - Virtual size: 350KB

.data
Size: 28KB - Virtual size: 138KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 127KB - Virtual size: 126KB