C:\trunk\Cameyo\Release\Packager.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_5bbf73926f9581751860bc71be0de711_bkransomware_floxif_vidar.exe
Resource
win7-20240215-en
General
-
Target
2024-05-22_5bbf73926f9581751860bc71be0de711_bkransomware_floxif_vidar
-
Size
3.1MB
-
MD5
5bbf73926f9581751860bc71be0de711
-
SHA1
7a390e29daa7890c34caf8c3580f14052f9c352c
-
SHA256
95954184b7411cd33efb1c62a28d6a58293ed96d525d4676c2b91ac0d2493592
-
SHA512
2c85c776647380a9dac0a88551e984a6df17b6350552a850da576a2ff02e67c3af5bfa9a49e2dcbfbe1c6fba1dd53d36ea289ba81803c8c14e9ab97adcb26ce4
-
SSDEEP
98304:d8IzgHI3VzfePVhL7fVbWFXTnc0T0FaLY6:JzqIf452T0FaD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-22_5bbf73926f9581751860bc71be0de711_bkransomware_floxif_vidar
Files
-
2024-05-22_5bbf73926f9581751860bc71be0de711_bkransomware_floxif_vidar.exe windows:5 windows x86 arch:x86
08461abe9c58bdc43d394d5401fe184d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
wininet
InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetSetOptionW
HttpQueryInfoW
InternetCloseHandle
kernel32
GetProfileIntW
SearchPathW
GetUserDefaultLCID
ExitThread
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleExW
SetErrorMode
VirtualQuery
RtlUnwind
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetTimeZoneInformation
LCMapStringW
IsValidLocale
EnumSystemLocalesW
WriteConsoleW
SetEnvironmentVariableA
GetFileTime
FileTimeToLocalFileTime
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsAlloc
lstrcmpiW
DuplicateHandle
GetVolumeInformationW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
GetModuleHandleA
EncodePointer
SuspendThread
GlobalGetAtomNameW
GlobalSize
TerminateThread
CompareFileTime
DeleteFileA
AreFileApisANSI
GetTempPathA
GetVersionExA
OutputDebugStringA
GetFileAttributesExW
GetDiskFreeSpaceA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
HeapValidate
HeapCreate
GetFileAttributesA
GetSystemTimeAsFileTime
UnlockFileEx
LockFile
UnlockFile
InterlockedCompareExchange
QueryPerformanceCounter
SetFilePointerEx
CreateFileA
GetFullPathNameA
GetFullPathNameW
QueryDosDeviceW
GetLogicalDrives
VirtualProtect
LocalFileTimeToFileTime
GetCurrentDirectoryW
FindResourceExW
GetFileSizeEx
FlushViewOfFile
TlsGetValue
ExpandEnvironmentStringsW
GetTempFileNameW
SetNamedPipeHandleState
GetSystemInfo
LocalAlloc
GetLocalTime
GetLongPathNameW
GetTempPathW
GetModuleFileNameW
GetExitCodeProcess
GetVersionExW
FormatMessageW
GetSystemDirectoryW
InitializeCriticalSection
WaitNamedPipeW
FormatMessageA
GetComputerNameW
SystemTimeToFileTime
GetEnvironmentVariableW
FlushFileBuffers
UnmapViewOfFile
MapViewOfFile
FreeEnvironmentStringsW
SetFileTime
GetEnvironmentStringsW
SetEnvironmentVariableW
BeginUpdateResourceW
OpenMutexW
ReadFile
TerminateProcess
OpenProcess
WaitForSingleObjectEx
EndUpdateResourceW
LoadLibraryExW
FindFirstFileW
EnumResourceNamesW
FreeResource
ResumeThread
GlobalUnlock
MulDiv
GlobalAlloc
GlobalLock
CreateThread
LocalFree
OpenEventW
FindNextFileW
OpenFileMappingW
SetCurrentDirectoryW
GlobalFree
CreateProcessW
GetDriveTypeW
GetCommandLineW
RemoveDirectoryW
MoveFileW
Sleep
WriteFile
ExitProcess
GetCurrentProcessId
FileTimeToSystemTime
GetTickCount
CreateDirectoryW
GetWindowsDirectoryW
ReleaseMutex
WaitForMultipleObjects
CreateMutexW
MultiByteToWideChar
SetFileAttributesW
GetSystemTime
DeleteFileW
GetCurrentThreadId
CreateFileMappingW
FindClose
CopyFileW
WideCharToMultiByte
OutputDebugStringW
FindFirstFileExW
SetEndOfFile
SetFilePointer
GetFileSize
CreateIoCompletionPort
GetThreadPriority
PostQueuedCompletionStatus
EnterCriticalSection
SetLastError
SetThreadPriority
CreateFileW
GetFileAttributesW
LeaveCriticalSection
GetCurrentThread
ReadDirectoryChangesW
GetCurrentProcess
GetQueuedCompletionStatus
CloseHandle
DeleteCriticalSection
DecodePointer
CreateEventW
LockResource
ResetEvent
HeapSize
GetProcAddress
GetLastError
RaiseException
HeapDestroy
SizeofResource
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetProcessHeap
GetModuleHandleW
SetEvent
WaitForSingleObject
HeapFree
InterlockedDecrement
InterlockedIncrement
HeapAlloc
LoadResource
FreeLibrary
FindResourceW
HeapReAlloc
VerifyVersionInfoW
VerSetConditionMask
UpdateResourceW
lstrcpyW
VirtualAlloc
user32
SetCursorPos
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
SetParent
MapVirtualKeyExW
IsCharLowerW
GetSystemMenu
IsZoomed
GetComboBoxInfo
TrackMouseEvent
GetKeyNameTextW
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
MapVirtualKeyW
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
GetIconInfo
DrawIconEx
LoadImageW
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
GetNextDlgGroupItem
WindowFromPoint
ReleaseCapture
SetCapture
KillTimer
SetTimer
DeleteMenu
CopyImage
GetMenuItemInfoW
DestroyMenu
IntersectRect
InflateRect
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
CharUpperW
SetCursor
ShowOwnedPopups
PostQuitMessage
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
SendDlgItemMessageA
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
LockWindowUpdate
UnhookWindowsHookEx
GetLastActivePopup
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
MapWindowPoints
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
GetClassInfoExW
GetClassInfoW
CallWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadMenuW
ScreenToClient
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
SendInput
wvsprintfW
SetForegroundWindow
IsWindowVisible
PrintWindow
DestroyIcon
EndPaint
ClientToScreen
BeginPaint
AdjustWindowRectEx
GetDlgCtrlID
MoveWindow
GetDesktopWindow
GetTopWindow
EnumWindows
GetWindow
wsprintfW
FillRect
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
GetDC
SetRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
SetScrollInfo
ReleaseDC
GetSysColor
CopyRect
FindWindowW
UnhookWinEvent
ExitWindowsEx
WaitMessage
SetWinEventHook
GetWindowTextW
GetClassNameW
ShowWindow
GetWindowThreadProcessId
MessageBoxW
IsIconic
DrawIcon
GetClientRect
LoadIconW
SystemParametersInfoW
SetWindowPos
GetSystemMetrics
SendMessageW
GetWindowRect
GetParent
InvalidateRect
UpdateWindow
EnableWindow
DestroyWindow
GetMessageW
UnregisterClassW
PostMessageW
MsgWaitForMultipleObjects
MessageBeep
TranslateMessage
PeekMessageW
IsWindow
CreateWindowExW
PostThreadMessageW
RegisterClassW
DefWindowProcW
DispatchMessageW
GetKeyboardLayout
gdi32
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
Rectangle
GetViewportOrgEx
OffsetRgn
GetTextFaceW
SetROP2
SetPolyFillMode
GetLayout
GetRgnBox
EnumFontFamiliesExW
SetLayout
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetTextMetricsW
GetTextExtentPoint32W
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CreateFontIndirectW
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
GetDeviceCaps
GetStockObject
CreateSolidBrush
SetTextAlign
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
LPtoDP
DeleteObject
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
CreateDCW
CopyMetaFileW
GetDIBits
GetObjectW
CreateFontW
GetTextExtentPointA
GetTextMetricsA
BitBlt
DeleteDC
SetTextColor
msimg32
AlphaBlend
TransparentBlt
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegQueryValueW
IsTextUnicode
GetSecurityDescriptorSacl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSaveKeyExW
ConvertSidToStringSidW
GetSecurityInfo
RegSetValueExA
GetSidIdentifierAuthority
OpenProcessToken
RegEnumKeyExW
GetLengthSid
RegSetKeySecurity
FreeSid
SetEntriesInAclW
SetSecurityDescriptorOwner
AllocateAndInitializeSid
SetNamedSecurityInfoW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryInfoKeyW
RegEnumKeyW
GetTokenInformation
GetUserNameW
GetSidSubAuthority
RegSetValueExW
RegCreateKeyW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
shell32
DragFinish
ShellExecuteExW
CommandLineToArgvW
ExtractAssociatedIconW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHAppBarMessage
SHBrowseForFolderW
SHChangeNotify
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
comctl32
InitCommonControlsEx
shlwapi
SHDeleteKeyW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
uxtheme
GetWindowTheme
GetThemeSysColor
GetThemePartSize
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
ole32
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoUninitialize
DoDragDrop
OleDuplicateData
GetHGlobalFromStream
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
StringFromCLSID
CreateStreamOnHGlobal
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium
oleaut32
OleCreatePictureIndirect
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysStringLen
SystemTimeToVariantTime
LoadTypeLi
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SysAllocString
OleLoadPicture
SysFreeString
crypt32
CryptProtectData
CryptUnprotectData
gdiplus
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateFromHDC
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusStartup
GdipCloneImage
GdipSaveImageToFile
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncodersSize
GdipAlloc
GdipCreateBitmapFromScan0
GdipFree
GdiplusShutdown
GdipSetInterpolationMode
GdipDrawImageRectI
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
msi
ord173
ord217
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 534KB - Virtual size: 533KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ