Static task
static1
Behavioral task
behavioral1
Sample
2024-06-07_08c685f4dfdf901cd64b35a006a62c3a_bkransomware_floxif.exe
Resource
win7-20240220-en
General
-
Target
2024-06-07_08c685f4dfdf901cd64b35a006a62c3a_bkransomware_floxif
-
Size
6.7MB
-
MD5
08c685f4dfdf901cd64b35a006a62c3a
-
SHA1
41e2a3c206cdc0aa6307c79efcd3ef12d6064df7
-
SHA256
8e9f08d7cb18c753ef43ea7f55aa5180b7748bf0f72ff45a57c518effe32dad2
-
SHA512
c0b441f914fe302324815d74ef4bb6bc808f7c8db2374f7ae931cad9940b18d4803f2a97fb40246065014b74878709aa8e266f980823fa89f0b3a55e87f5ce28
-
SSDEEP
196608:YHCP1MwM9513s7KJjkWSPr+2GA/wQaWU6l9rpB:YQ1C1smmWi+2GACWHl9rP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-07_08c685f4dfdf901cd64b35a006a62c3a_bkransomware_floxif
Files
-
2024-06-07_08c685f4dfdf901cd64b35a006a62c3a_bkransomware_floxif.exe windows:6 windows x86 arch:x86
27d714eda4ec93c62aa6787cbf65c7ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
GetProcessHeap
Sleep
ResumeThread
SuspendThread
GetUserDefaultUILanguage
GetThreadPriority
GetExitCodeThread
GetDiskFreeSpaceW
VirtualAlloc
GetLastError
GetTempPathW
GetFileAttributesW
GetExitCodeProcess
FormatMessageW
SizeofResource
GetUserDefaultLangID
GetLogicalDrives
CreateDirectoryW
SignalObjectAndWait
VerSetConditionMask
GetDriveTypeW
SwitchToThread
QueryDosDeviceW
HeapCreate
LoadLibraryW
GetTempFileNameW
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
UnregisterWait
CreateFileW
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
user32
GetMessageW
ShowWindow
CreateWindowExW
SendMessageW
UpdateWindow
SetCursor
SetWindowRgn
GetSystemMenu
CharUpperBuffW
MapDialogRect
SendDlgItemMessageA
TrackPopupMenu
SetCapture
MsgWaitForMultipleObjects
GetParent
AttachThreadInput
CharLowerBuffW
ShowCaret
GetWindowRect
WaitMessage
ShowCursor
UnregisterClassA
ScrollWindow
SetWindowLongW
DestroyCaret
GetSysColor
AppendMenuA
IsWindow
FlashWindow
ScrollWindowEx
GetDlgItemTextA
GetKeyState
MessageBeep
GetDC
GetQueueStatus
GetCapture
EnableMenuItem
DefWindowProcA
SetWindowsHookExA
GetDesktopWindow
GetKeyboardType
SystemParametersInfoA
SetWindowTextA
GetCaretBlinkTime
SetMenuItemInfoW
SetDlgItemTextA
SetScrollRange
gdi32
MaskBlt
CreateFontA
SetBkColor
SelectClipRgn
SetMapMode
GetTextExtentExPointA
Polyline
UpdateColors
MoveToEx
GetDIBits
CreateBitmap
PolyPolyline
CreateRectRgn
SetTextAlign
GetStockObject
ExtTextOutA
ExtCreatePen
advapi32
RegLoadKeyW
AllocateAndInitializeSid
ChangeServiceConfigW
RegGetKeySecurity
InitializeSecurityDescriptor
QueryServiceStatus
RegSetValueExW
shell32
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
oleaut32
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayGetLBound
VariantChangeType
Sections
.text Size: 683KB - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ