cybersoldier-RANSOMWARE3[.]0+BSOD[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

cybersoldier-RANSOMWARE3.0+BSOD.rar
Size

300KB
MD5

e1450a4f7fd39af9401f67ea4a3dd699
SHA1

d0aed2bf466c17802a37e7942c17f32d956c83a4
SHA256

6fd657d7b6007a7f8ed6afde4b1c6aa4b8411cac7069f0f92f31495d59d7c920
SHA512

840307e238352c4872b7622c92f9fd69fb5afe93c192b76df2f79c64b5ba769a0de07c57c9d46b64b27b62baae567191bbbdc69700937304621c9f07fc7a9d02
SSDEEP

6144:XIcYGc4paUXZpkFvIABQLKRuUd2q9CVkG6rV/NFxw53r9xwLos:YcY4jpklRIyuMd9C2rV/NFxa3rPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BSOD/BSOD/bin/Debug/BSOD.exe
unpack001/BSOD/BSOD/obj/Debug/BSOD.exe
unpack001/RANSOMWARE3.0/RANSOMWARE3.0/Resources/BSOD.exe
unpack001/RANSOMWARE3.0/RANSOMWARE3.0/bin/Debug/RANSOMWARE3.0.exe
unpack001/RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/RANSOMWARE3.0.exe
unpack001/RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll

Files

cybersoldier-RANSOMWARE3.0+BSOD.rar
.rar

Password: cybersoldier
BSOD/.vs/BSOD/v16/.suo
BSOD/BSOD.sln
BSOD/BSOD/BSOD.csproj
BSOD/BSOD/BSOD_main.cs
BSOD/BSOD/app.manifest
BSOD/BSOD/bin/Debug/BSOD.exe
.exe windows:4 windows x86 arch:x86

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Worm\source\repos\BSOD\BSOD\obj\Debug\BSOD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BSOD/BSOD/bin/Debug/BSOD.pdb
BSOD/BSOD/obj/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs
BSOD/BSOD/obj/Debug/BSOD.csproj.CoreCompileInputs.cache
BSOD/BSOD/obj/Debug/BSOD.csproj.FileListAbsolute.txt
BSOD/BSOD/obj/Debug/BSOD.csprojAssemblyReference.cache
BSOD/BSOD/obj/Debug/BSOD.exe
.exe windows:4 windows x86 arch:x86

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Worm\source\repos\BSOD\BSOD\obj\Debug\BSOD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BSOD/BSOD/obj/Debug/BSOD.pdb
BSOD/BSOD/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
RANSOMWARE3.0/.vs/RANSOMWARE3.0/v16/.suo
RANSOMWARE3.0/RANSOMWARE3.0.sln
RANSOMWARE3.0/RANSOMWARE3.0/App.config
RANSOMWARE3.0/RANSOMWARE3.0/Encryp_main.cs
.js
RANSOMWARE3.0/RANSOMWARE3.0/Properties/Resources.Designer.cs
.vbs
RANSOMWARE3.0/RANSOMWARE3.0/Properties/Resources.resx
.vbs
RANSOMWARE3.0/RANSOMWARE3.0/RANSOMWARE3.0.csproj
RANSOMWARE3.0/RANSOMWARE3.0/Resources/BSOD.exe
.exe windows:4 windows x86 arch:x86

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Worm\source\repos\BSOD\BSOD\obj\Debug\BSOD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RANSOMWARE3.0/RANSOMWARE3.0/Window.Designer.cs
RANSOMWARE3.0/RANSOMWARE3.0/Window.cs
RANSOMWARE3.0/RANSOMWARE3.0/Window.resx
.vbs
RANSOMWARE3.0/RANSOMWARE3.0/app.manifest
RANSOMWARE3.0/RANSOMWARE3.0/bin/Debug/RANSOMWARE3.0.exe
.exe windows:4 windows x86 arch:x86

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Worm\source\repos\RANSOMWARE3.0\RANSOMWARE3.0\obj\Debug\RANSOMWARE3.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RANSOMWARE3.0/RANSOMWARE3.0/bin/Debug/RANSOMWARE3.0.exe.config
RANSOMWARE3.0/RANSOMWARE3.0/bin/Debug/RANSOMWARE3.0.pdb
RANSOMWARE3.0/RANSOMWARE3.0/lock_ico_app.ico
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/.NETFramework,Version=v4.5.AssemblyAttributes.cs
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/DesignTimeResolveAssemblyReferences.cache
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/RANSOMWARE3.0.csproj.CoreCompileInputs.cache
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/RANSOMWARE3.0.csproj.FileListAbsolute.txt
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/RANSOMWARE3.0.csproj.GenerateResource.cache
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/RANSOMWARE3.0.csprojAssemblyReference.cache
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/RANSOMWARE3.0.exe
.exe windows:4 windows x86 arch:x86

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Worm\source\repos\RANSOMWARE3.0\RANSOMWARE3.0\obj\Debug\RANSOMWARE3.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/RANSOMWARE3.0.pdb
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/RANSOMWARE3._0.Properties.Resources.resources
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/RANSOMWARE3._0.Window.resources
RANSOMWARE3.0/RANSOMWARE3.0/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
.dll windows:4 windows x86 arch:x86

Password: cybersoldier

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: cybersoldier

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 168KB - Virtual size: 167KB

.rsrc Size: 37KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 12B

Password: cybersoldier

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 168KB - Virtual size: 167KB

.rsrc Size: 37KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 12B

Password: cybersoldier

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 168KB - Virtual size: 167KB

.rsrc
Size: 37KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 168KB - Virtual size: 167KB

.rsrc
Size: 37KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B