2025-02-06_0c742a38601997d1b0a754cd4f8ef057_bkransomware

Sharing

Copy URL

Twitter E-mail

General

Target

2025-02-06_0c742a38601997d1b0a754cd4f8ef057_bkransomware
Size

2.1MB
MD5

0c742a38601997d1b0a754cd4f8ef057
SHA1

9a090ef87bac51eccc6e808d3d5adc62e09284fd
SHA256

54426b5f566e7ff36678cd6bbd88b8a860461710ebe9b60d6ea02851654256f6
SHA512

c1cbb759e5f451d13db687d42e9e9b0453b02d43b5a50263695381f3369197c7e7631de1aaa52a287470b851fb05e6bee40e6a731d69f42000b05b5d41bbb1c2
SSDEEP

49152:5S5skDzci5R/DP7nmGarmFDM87CL9++86TIOSTXXG:Qvz55R/DzmGarmpvC5++86TIOSLG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-06_0c742a38601997d1b0a754cd4f8ef057_bkransomware

Files

2025-02-06_0c742a38601997d1b0a754cd4f8ef057_bkransomware
.exe windows:6 windows x86 arch:x86

441db4e9a4f54ecba17ce4f5ef6f3086

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

S:\sunghyun.na_view\AP_USB_SW\01_Koalra\02_Sources\Application\DNW_1_0\Sample_Application_WIN7\ReleaseWin32\Multidownloader_32bit.pdb

Imports

kernel32

GetCPInfo
GetConsoleCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
GetStringTypeW
GetOEMCP
IsValidLocale
EnumSystemLocalesW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
GetACP
IsValidCodePage
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
GetSystemTimeAsFileTime
HeapQueryInformation
ExitThread
AreFileApisANSI
GetModuleHandleExW
ExitProcess
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineW
GetUserDefaultLCID
FindResourceExW
VirtualProtect
GetTempPathW
GetTempFileNameW
GetProfileIntW
SearchPathW
GetWindowsDirectoryW
GetTickCount
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
VerifyVersionInfoW
VerSetConditionMask
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetThreadLocale
FileTimeToSystemTime
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
ResumeThread
SetThreadPriority
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcpyW
lstrcmpA
GetVersionExW
GetCurrentThread
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
SetLastError
OutputDebugStringA
DecodePointer
HeapSize
RaiseException
InitializeCriticalSectionEx
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
CreateThread
FindResourceW
LoadResource
LockResource
SizeofResource
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
DeviceIoControl
GetLastError
ReadFile
GetOverlappedResult
CancelIo
WaitForSingleObject
CreateEventW
CreateFileW
CloseHandle
WideCharToMultiByte
Sleep
WriteFile
OutputDebugStringW
GetLocalTime
CreateDirectoryW
GetCurrentDirectoryW
GetTimeZoneInformation
MultiByteToWideChar

user32

SetTimer
DeleteMenu
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
CopyImage
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
IntersectRect
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
DestroyMenu
SendDlgItemMessageA
InvalidateRect
DrawStateW
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetCursorPos
FillRect
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetWindowThreadProcessId
LoadMenuW
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
ToUnicodeEx
UpdateWindow
FrameRect
SetMenu
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
CopyRect
ReleaseDC
GetDC
MapVirtualKeyW
GetKeyNameTextW
IsDialogMessageW
GetWindow
GetParent
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
GetFocus
SetFocus
GetDlgCtrlID
CheckDlgButton
GetDlgItem
ModifyMenuW
LockWindowUpdate
CharNextW
SendMessageW
wsprintfW
wvsprintfW
CharUpperBuffW
SetParent
SetWindowPos
MoveWindow
ShowWindow
IsWindow
UnregisterClassW
UnregisterDeviceNotification
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
RegisterDeviceNotificationW
AppendMenuW
GetSystemMenu
LoadIconW
EnableWindow
GetWindowRgn
SubtractRect
CreateMenu
GetUpdateRect
GetComboBoxInfo
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
MessageBoxW
PostMessageW
DefFrameProcW
DrawMenuBar
DestroyCursor
GetDoubleClickTime
IsClipboardFormatAvailable
InvertRect
HideCaret
GetIconInfo
PostThreadMessageW
SetClassLongW
DrawFocusRect
KillTimer
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
TrackPopupMenu
GetKeyboardLayout
DrawFrameControl
DrawEdge
DrawIconEx
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
RegisterClipboardFormatW
ReuseDDElParam
UnpackDDElParam
LoadImageW
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
EnumDisplayMonitors
SetLayeredWindowAttributes
DestroyIcon
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
SetRectEmpty
SetWindowRgn
GetAsyncKeyState
CharUpperW
IsZoomed
TrackMouseEvent
MessageBeep
GetNextDlgGroupItem
IsRectEmpty
SetRect
InvalidateRgn
CopyAcceleratorTableW
OffsetRect
SetActiveWindow
CopyIcon

gdi32

CreateSolidBrush
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CreateRectRgn
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
GetTextMetricsW
CreateRoundRectRgn
CreateCompatibleBitmap
CreateDIBSection
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
RoundRect
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
GetObjectW
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
PatBlt
CreateRectRgnIndirect
GetTextExtentPoint32W
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHAppBarMessage
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
DragQueryFileW
SHGetMalloc
ShellExecuteW
DragFinish

comctl32

InitCommonControlsEx

shlwapi

PathIsDirectoryW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

uxtheme

GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName

ole32

OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
CoInitialize
CoCreateInstance
CLSIDFromProgID
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleFlushClipboard
CoTaskMemFree
CoTaskMemAlloc
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleIsCurrentClipboard
DoDragDrop
CreateStreamOnHGlobal
CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
OleDuplicateData
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CLSIDFromString
CoLockObjectExternal

oleaut32

SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantChangeType
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
VariantClear
VariantInit
SysAllocStringLen
SysFreeString

oledlg

OleUIBusyW

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

winmm

PlaySoundW

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 344KB - Virtual size: 343KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 150KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lwihxbh
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

441db4e9a4f54ecba17ce4f5ef6f3086

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

setupapi

gdiplus

oleacc

winmm

imm32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 344KB - Virtual size: 343KB

.data Size: 28KB - Virtual size: 58KB

.rsrc Size: 82KB - Virtual size: 82KB

.reloc Size: 150KB - Virtual size: 151KB

lwihxbh Size: 80KB - Virtual size: 80KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 344KB - Virtual size: 343KB

.data
Size: 28KB - Virtual size: 58KB

.rsrc
Size: 82KB - Virtual size: 82KB

.reloc
Size: 150KB - Virtual size: 151KB

lwihxbh
Size: 80KB - Virtual size: 80KB