20240906a8687c821783f8c56dfed8e55883f067bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

20240906a8687c821783f8c56dfed8e55883f067bkransomware
Size

6.6MB
MD5

a8687c821783f8c56dfed8e55883f067
SHA1

e3f2ba9fd704ddf7a1c7cc24528a52bf69dea595
SHA256

50f8eb966ba7d85077daa024804b4682275d76a69b2f4b4f9d23f17acb9cf4b1
SHA512

044dfde30f57a4896e5ed0752675da27e42f6c4de6ad08b4e792ca94ec8fc1a44b1f91e06851183c76abdf53ac8a9835afb807c30e19cba5ce41c2423ac39f34
SSDEEP

196608:MAnwYVOf6XlfQBr3v43OLUGqgRdB9lUWpePkD:r58MlfyDv+O7BDxvp04

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20240906a8687c821783f8c56dfed8e55883f067bkransomware

Files

20240906a8687c821783f8c56dfed8e55883f067bkransomware
.exe windows:6 windows x86 arch:x86

1645dc6bcb6007a4429753a9e51ade6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
FreeLibraryAndExitThread
FreeLibrary
OutputDebugStringW
FreeEnvironmentStringsW
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
IsValidCodePage
SetStdHandle
GetProcessHeap
HeapAlloc
HeapSize
MultiByteToWideChar
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
SetEvent
CreateTimerQueue
ExitThread
CreateThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsSetValue
TlsGetValue
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleW
EnumSystemLocalesW
TlsFree
GetSystemTime
GetThreadTimes
GetCurrentProcessId
FindNextFileA
GetCommandLineW
CreatePipe
CreateFileMappingA
EnterCriticalSection
CreateNamedPipeA
FlushFileBuffers
GetACP
TerminateProcess
CreateProcessA
IsProcessorFeaturePresent
Sleep
InitializeCriticalSectionAndSpinCount
IsValidLocale
OpenProcess
GetCurrentThread
WaitForSingleObjectEx
GetModuleHandleExW
HeapFree
GetEnvironmentStringsW
LoadLibraryExW
SetEndOfFile
GetLocaleInfoA
CloseHandle
TlsAlloc
DeleteCriticalSection
GetModuleHandleA
CreateEventW
CompareStringW
GetSystemTimeAdjustment
WideCharToMultiByte
SetCommTimeouts
GetWindowsDirectoryA
WaitForSingleObject
QueryPerformanceCounter
SetEnvironmentVariableW
InitializeSListHead
GetCurrentProcess
SetDllDirectoryW
VirtualQuery
MapViewOfFile
GlobalMemoryStatus
GetEnvironmentVariableW
IsDebuggerPresent
RtlUnwind
RaiseException
DuplicateHandle
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
CreateFileW

user32

ToAsciiEx
ClientToScreen
SetWindowRgn
GetSystemMenu
HideCaret
GetWindowRect
CreateDialogParamA
GetMessageW
PostQuitMessage
IsZoomed
CreateIconIndirect
DrawFocusRect
GetKeyboardState
CreateDialogIndirectParamA
MessageBoxA
UnionRect
GetWindowLongA
SetClassLongA
ScrollWindow
DefWindowProcA
CheckDlgButton
ShowWindow
CreatePopupMenu
IsDlgButtonChecked
RemoveMenu
CreateWindowExW
ValidateRgn
SendMessageW
UpdateWindow
DestroyMenu
GetDlgItemTextA
CheckMenuItem
GetMessageTime
EndPaint
SetCursor
KillTimer
MsgWaitForMultipleObjects
DeleteMenu
SetParent
CreateMenu
SetFocus
GetWindowTextLengthA
DrawEdge
ShowCaret
WaitMessage
GetDC
GetQueueStatus
GetCapture
SetPropA
GetKeyboardLayout
SetRect
CheckMenuRadioItem
SetWindowLongA
InvalidateRect
UnregisterClassA
SetScrollPos
EndDialog
DestroyCaret
GetDesktopWindow
GetSysColor
PostMessageA
CheckRadioButton
SystemParametersInfoA
ReleaseCapture
ScrollWindowEx
BeginDeferWindowPos
InsertMenuA
EnableWindow
LoadCursorA
ValidateRect
IsRectEmpty
GetMessageA

gdi32

CreatePolygonRgn
SetWindowOrgEx
PolyPolygon
EndPage
Arc
SetTextColor
Polygon
GetRgnBox
CreatePalette
SelectClipRgn
Ellipse
StretchDIBits
GetCurrentPositionEx
GetNearestPaletteIndex
CreatePatternBrush
Polyline
SetTextAlign
CreateDIBitmap
CloseEnhMetaFile
CreateEnhMetaFileW
ExtCreatePen
GetTextExtentPoint32A
SetWindowExtEx
SetDIBColorTable
CopyEnhMetaFileA
CreateHalftonePalette
GetEnhMetaFileHeader
GetRegionData
GetBkColor
GetDIBColorTable
SetStretchBltMode
GetTextExtentPointA
GetCharABCWidthsFloatA
CreatePen
GetClipBox
SetROP2
GetStockObject
SetWinMetaFileBits
GetTextExtentExPointA

advapi32

RegDeleteValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CopySid
OpenProcessToken
RegCloseKey
GetUserNameA
SetSecurityDescriptorOwner
AllocateAndInitializeSid
LookupPrivilegeValueW

shell32

ShellExecuteExW

Sections

.text
Size: 657KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eob
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1645dc6bcb6007a4429753a9e51ade6b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 657KB - Virtual size: 657KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 6KB - Virtual size: 6KB

.eob Size: 2KB - Virtual size: 2KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 657KB - Virtual size: 657KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 6KB - Virtual size: 6KB

.eob
Size: 2KB - Virtual size: 2KB

.reloc
Size: 13KB - Virtual size: 13KB