2024-08-23_0ae5ce77dfe33fd3e2832010083a82a1_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-23_0ae5ce77dfe33fd3e2832010083a82a1_bkransomware
Size

22.3MB
MD5

0ae5ce77dfe33fd3e2832010083a82a1
SHA1

76390d1ce3b4347c6ce35b06e398010c8acee369
SHA256

4f22a03199551da89cea01ba846978308e6d148069bd082f74e44e99575694ee
SHA512

e2e9675874920ec7432d7542aef553350c15cabe885e8d1f83c62b15be020aa9fef5a223bb02e622cc94518122d9b62ee7ae87260fab87e34840844b3bbc4ebd
SSDEEP

393216:DsAlFq3IdSKLk1uGWpFf6j9lkf+1CdEtdCKYppyABzfSwYK0dL5APt9HrAgNbWC:Ds3+SKLDKjddtcawYF5ZgN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-23_0ae5ce77dfe33fd3e2832010083a82a1_bkransomware

Files

2024-08-23_0ae5ce77dfe33fd3e2832010083a82a1_bkransomware
.exe windows:5 windows x86 arch:x86

30ed5d8021141bd2d6f194ee9bfe5724

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\NetAccerDXAPICall01\Release\NetAccerDXAPICall.pdb

Imports

kernel32

FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GetTickCount
IsDebuggerPresent
IsProcessorFeaturePresent
CreateThread
ExitThread
RtlUnwind
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
GetStdHandle
GetFileType
GetStartupInfoW
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsValidCodePage
GetOEMCP
GetCPInfo
CreateDirectoryW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
GetTimeZoneInformation
OutputDebugStringW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
GetThreadLocale
DeleteFileW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FormatMessageW
MulDiv
LocalFree
GlobalUnlock
ResumeThread
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
GetSystemDirectoryW
EncodePointer
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalFree
FreeResource
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
LoadLibraryW
GetModuleHandleA
SetLastError
OutputDebugStringA
GetACP
DeleteCriticalSection
DecodePointer
EnterCriticalSection
HeapSize
RaiseException
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
WaitForSingleObject
TerminateProcess
CloseHandle
GetModuleFileNameW
GetCurrentProcessId
GetEnvironmentVariableW
Sleep
GetCommandLineW
GetProcAddress
LoadLibraryExW
LockResource
LoadResource
SizeofResource
GetLastError
FindResourceW
GetModuleHandleW
GetFileAttributesA
WideCharToMultiByte
QueryPerformanceCounter
MultiByteToWideChar

user32

RegisterClipboardFormatW
PostThreadMessageW
CreateDialogIndirectParamW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
GetActiveWindow
TranslateMessage
GetMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
GetWindowLongW
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextW
RemovePropW
GetPropW
SetPropW
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
OffsetRect
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
MapDialogRect
GetWindow
SetWindowContextHelpId
SetWindowPos
PostQuitMessage
PostMessageW
GetParent
SendDlgItemMessageA
UnregisterClassW
PtInRect
EnableWindow
LoadIconW
InvalidateRect
CharNextW
SetWindowRgn
LoadBitmapW
GetWindowRect
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
GetSystemMenu
GetDC
AppendMenuW
CreatePopupMenu
GetCursorPos
SendMessageW
CharUpperW
GetSysColorBrush
MessageBeep
MessageBoxW
UpdateWindow
GetNextDlgGroupItem
IsRectEmpty
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableW
SetTimer
KillTimer
RealChildWindowFromPoint
LoadCursorW
ReleaseCapture
SetCapture
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
DestroyMenu
IsDialogMessageW
SetWindowTextW
EndDialog
MoveWindow
ShowWindow
GetDesktopWindow
SetActiveWindow
GetNextDlgTabItem

gdi32

DeleteObject
Escape
GetClipBox
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SelectObject
SetBkMode
SetMapMode
ExtTextOutW
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetDeviceCaps
CreateBitmap
SetTextColor
SetBkColor
DeleteDC
GetStockObject
CreateFontW
CombineRgn
CreateCompatibleDC
CreateRectRgn
StretchBlt
GetObjectW
GetPixel

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
Shell_NotifyIconW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CreateILockBytesOnHGlobal
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoCreateGuid
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
OleCreateFontIndirect
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocString

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21.9MB - Virtual size: 21.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30ed5d8021141bd2d6f194ee9bfe5724

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

Sections

.text Size: 294KB - Virtual size: 294KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 13KB - Virtual size: 30KB

.rsrc Size: 21.9MB - Virtual size: 21.9MB

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 294KB - Virtual size: 294KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 13KB - Virtual size: 30KB

.rsrc
Size: 21.9MB - Virtual size: 21.9MB

.reloc
Size: 22KB - Virtual size: 22KB