Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-25_c1e7b0778c62c37216f637d270b52e43_avoslocker_floxif_qakbot_revil.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-25_c1e7b0778c62c37216f637d270b52e43_avoslocker_floxif_qakbot_revil.exe
Resource
win10v2004-20240508-en
Target
2024-06-25_c1e7b0778c62c37216f637d270b52e43_avoslocker_floxif_qakbot_revil
Size
2.6MB
MD5
c1e7b0778c62c37216f637d270b52e43
SHA1
acbc887bb02f464f04d87846b358cb7eb00ee2d7
SHA256
d19f450964f3ac180d6f97ed4104e01c93572d813b15cc7b7a070c5ee76b582e
SHA512
6624c56cb7fd4ffe87bd5867f6c6dae0e09c0f960f04fe615392e5f24817b96c84566ebd2d873a8632fb48a00c18722317250ad427a84dba039149bfee2e791c
SSDEEP
49152:BivB6SUSMCRmgVIqGA8mEbwDG9v6C6ZtPXF4KOa9mzpDzhV9gKsy:BivugVGvmEUG9v6J5F4K9mr
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
c:\buildslave\steam_rel_client_hotfix_win32\build\src\SteamServiceHost\Release\SteamService_exe.pdb
RemoveDirectoryW
OutputDebugStringA
SetLastError
GetCurrentProcess
GetCurrentProcessId
ProcessIdToSessionId
GetVersionExA
GetModuleFileNameW
GlobalAlloc
GlobalUnlock
GlobalLock
VerifyVersionInfoW
WTSGetActiveConsoleSessionId
MultiByteToWideChar
CreateToolhelp32Snapshot
Process32First
Process32Next
InitializeCriticalSection
CreateDirectoryW
ResetEvent
CreateEventA
WideCharToMultiByte
ExpandEnvironmentStringsA
VerSetConditionMask
LocalFree
WriteConsoleW
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
DecodePointer
SetStdHandle
GetConsoleOutputCP
SetFilePointerEx
GetTimeZoneInformation
HeapReAlloc
LCMapStringW
CompareStringW
HeapFree
HeapAlloc
ExitProcess
GetFullPathNameW
GetFileSize
SetEvent
GetTickCount
OpenProcess
TerminateProcess
GetConsoleWindow
SetConsoleTitleW
SetConsoleCtrlHandler
MoveFileExW
CopyFileW
Sleep
CreateMutexA
ReleaseMutex
OutputDebugStringW
WriteFile
SetFilePointer
SetFileAttributesW
ReadFile
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetProcAddress
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
GetCommandLineW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
CloseHandle
SetCurrentDirectoryW
ExpandEnvironmentStringsW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FindResourceA
LockResource
LoadResource
LoadLibraryExA
FreeLibrary
LoadLibraryA
DeleteCriticalSection
HeapValidate
HeapSize
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetModuleHandleExW
GetLocalTime
VirtualQuery
EncodePointer
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
SystemTimeToFileTime
GetSystemTime
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetCurrentDirectoryW
SetThreadAffinityMask
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ConvertFiberToThread
DeleteFiber
GetFileType
GetEnvironmentVariableW
GetStdHandle
SetProcessAffinityMask
GetProcessHeaps
DebugBreak
SetUnhandledExceptionFilter
QueryPerformanceFrequency
FindFirstFileExW
FlushFileBuffers
GetDiskFreeSpaceA
GetDriveTypeW
GetFileSizeEx
SetEndOfFile
SetFileTime
SleepEx
GetSystemTimeAsFileTime
GetModuleHandleW
LoadLibraryExW
LoadLibraryW
GlobalMemoryStatusEx
VirtualAlloc
VirtualProtect
GetModuleFileNameA
LocalAlloc
IsDebuggerPresent
GetCommandLineA
GetProcessHeap
HeapSetInformation
HeapLock
HeapUnlock
HeapWalk
HeapQueryInformation
GetSystemInfo
GetProcessAffinityMask
DuplicateHandle
RaiseException
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
SwitchToThread
CreateThread
GetCurrentThread
OpenThread
TerminateThread
GetExitCodeThread
QueryPerformanceCounter
SetDlgItemTextA
GetDlgItemInt
OpenClipboard
MessageBoxA
CloseClipboard
GetProcessWindowStation
GetUserObjectInformationW
SetClipboardData
GetDesktopWindow
EmptyClipboard
MessageBoxW
GetWindowTextLengthA
SetDlgItemInt
GetDlgItem
GetWindowThreadProcessId
EnumWindows
GetWindowRect
IsWindowVisible
wsprintfA
SetWindowPos
DialogBoxParamA
EndDialog
ShowWindow
SetNamedSecurityInfoW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
RegDeleteValueW
LookupPrivilegeValueA
SetTokenInformation
DuplicateTokenEx
AdjustTokenPrivileges
OpenProcessToken
CreateProcessAsUserW
ConvertStringSidToSidW
SetEntriesInAclW
StartServiceW
StartServiceCtrlDispatcherW
SetServiceStatus
SetServiceObjectSecurity
RegisterServiceCtrlHandlerW
QueryServiceStatusEx
QueryServiceStatus
QueryServiceObjectSecurity
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
DeregisterEventSource
RegisterEventSourceW
ReportEventW
SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
CoInitializeEx
CoUninitialize
CoCreateInstance
VariantClear
VariantInit
SysFreeString
SysAllocString
closesocket
WSASetLastError
send
gethostname
WSAStartup
recv
WSAGetLastError
WSACleanup
SHDeleteKeyA
WinVerifyTrust
GetModuleFileNameExW
GetProcessMemoryInfo
BCryptGenRandom
CreateInterface
g_dwDllEntryThreadId
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ