Static task
static1
Behavioral task
behavioral1
Sample
2024-06-06_31096fe1baf1adde365f8d46db167be7_bkransomware_floxif.exe
Resource
win7-20240220-en
General
-
Target
2024-06-06_31096fe1baf1adde365f8d46db167be7_bkransomware_floxif
-
Size
6.7MB
-
MD5
31096fe1baf1adde365f8d46db167be7
-
SHA1
ec4a6c9e2c5b365b0344840d4c9a7eeb31f68aae
-
SHA256
e33e594b41be841b2eaee7d946a060d1b33bbc5e32710da2c8a952da0eb4f47c
-
SHA512
9413daf9cde6e84a69f23beb430838f3143f7f1b789401c04764e1a1ebddc4cdf28901242919f6c958856ba315d9cb47a9773f023fa8b70345e2117cbbebb143
-
SSDEEP
196608:NH3P1+wM9513s7KJjkWSPr+2GA/wQaWU6l9rpF:Nf1w1smmWi+2GACWHl9rT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-06_31096fe1baf1adde365f8d46db167be7_bkransomware_floxif
Files
-
2024-06-06_31096fe1baf1adde365f8d46db167be7_bkransomware_floxif.exe windows:6 windows x86 arch:x86
27d714eda4ec93c62aa6787cbf65c7ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
GetProcessHeap
Sleep
ResumeThread
SuspendThread
GetUserDefaultUILanguage
GetThreadPriority
GetExitCodeThread
GetDiskFreeSpaceW
VirtualAlloc
GetLastError
GetTempPathW
GetFileAttributesW
GetExitCodeProcess
FormatMessageW
SizeofResource
GetUserDefaultLangID
GetLogicalDrives
CreateDirectoryW
SignalObjectAndWait
VerSetConditionMask
GetDriveTypeW
SwitchToThread
QueryDosDeviceW
HeapCreate
LoadLibraryW
GetTempFileNameW
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
UnregisterWait
CreateFileW
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
user32
GetMessageW
ShowWindow
CreateWindowExW
SendMessageW
UpdateWindow
SetCursor
SetWindowRgn
GetSystemMenu
CharUpperBuffW
MapDialogRect
SendDlgItemMessageA
TrackPopupMenu
SetCapture
MsgWaitForMultipleObjects
GetParent
AttachThreadInput
CharLowerBuffW
ShowCaret
GetWindowRect
WaitMessage
ShowCursor
UnregisterClassA
ScrollWindow
SetWindowLongW
DestroyCaret
GetSysColor
AppendMenuA
IsWindow
FlashWindow
ScrollWindowEx
GetDlgItemTextA
GetKeyState
MessageBeep
GetDC
GetQueueStatus
GetCapture
EnableMenuItem
DefWindowProcA
SetWindowsHookExA
GetDesktopWindow
GetKeyboardType
SystemParametersInfoA
SetWindowTextA
GetCaretBlinkTime
SetMenuItemInfoW
SetDlgItemTextA
SetScrollRange
gdi32
MaskBlt
CreateFontA
SetBkColor
SelectClipRgn
SetMapMode
GetTextExtentExPointA
Polyline
UpdateColors
MoveToEx
GetDIBits
CreateBitmap
PolyPolyline
CreateRectRgn
SetTextAlign
GetStockObject
ExtTextOutA
ExtCreatePen
advapi32
RegLoadKeyW
AllocateAndInitializeSid
ChangeServiceConfigW
RegGetKeySecurity
InitializeSecurityDescriptor
QueryServiceStatus
RegSetValueExW
shell32
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
oleaut32
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayGetLBound
VariantChangeType
Sections
.text Size: 683KB - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ