Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-02_f0df0cd51e879bde134d81ca332ff28f_bkransomware_floxif_qakbot.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-09-02_f0df0cd51e879bde134d81ca332ff28f_bkransomware_floxif_qakbot.exe
Resource
win10v2004-20240802-en
Target
2024-09-02_f0df0cd51e879bde134d81ca332ff28f_bkransomware_floxif_qakbot
Size
2.8MB
MD5
f0df0cd51e879bde134d81ca332ff28f
SHA1
9cbc183ae0b06b215a5b13b00a6a8c97f6b027e3
SHA256
e59784f3112093b1851b43e54b501a4bbb79f0712e9f5e703eb68c1b7115300f
SHA512
3588c5b20b55529d0342b585a2196ac663070422300e13fde1f780a9f082003b1ab91dd5399b062e4c7a10b8810e9cabba3c781542ff55a0dfc64a0f3b9705fd
SSDEEP
49152:dq5T4lxvuQ05TJ6c/Gte3/scER7nuGIws+/sG/VrgBSW2TdJKXFr7f7sz0b+OQ:dq50lxvuQ05V63te3dER7MO3/VrgBSWK
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\bld\CDGS-SE2018-JOB1\src\Release\Setup.pdb
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
GdipFree
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipAlloc
?GetAttributeSingleNode@CXMLFileManagerInterface@@QAE?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W0W4XMLFILENAMES@@@Z
?SetAttributeSingleNode@CXMLFileManagerInterface@@QAE_NPB_W00W4XMLFILENAMES@@@Z
?IsXMLLoaded@CXMLFileManagerInterface@@QAE_NXZ
?ToggleCheck@CXMLFileManagerInterface@@QAEXPB_W_N@Z
?ToggleCheck@CXMLFileManagerInterface@@QAEXH_N@Z
?GetFeatureData@CXMLFileManagerInterface@@QAE_NHPAUCXML_FEATURE_DATA@@@Z
?SetFileIndex@CXMLFileManagerInterface@@QAEXW4XMLFILENAMES@@@Z
?CreateXML@CXMLFileManagerInterface@@QAEJPB_W@Z
?Saveit@CXMLFileManagerInterface@@QAEJPB_W_N@Z
?UnInitialize@CXMLFileManagerInterface@@QAEXXZ
?Init@CXMLFileManagerInterface@@SAJPB_W@Z
?SetAttribute@CXMLFileManagerInterface@@QAE_NPB_W0@Z
?CounterNext@CXMLFileManagerInterface@@QAEJXZ
?GetAttribute@CXMLFileManagerInterface@@QAE?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W@Z
?CounterLast@CXMLFileManagerInterface@@QAEJXZ
?SetAttribute@CXMLFileManagerInterface@@QAE_NPB_WI@Z
?AddNodeToEndOfList@CXMLFileManagerInterface@@QAE_NPB_W@Z
?SetAttribute@CXMLFileManagerInterface@@QAE_NPB_W_N@Z
?GetAttributeBool@CXMLFileManagerInterface@@QAE_NPB_W@Z
??1CXMLFileManagerInterface@@UAE@XZ
?AddNodeAsChild@CXMLFileManagerInterface@@QAE_NPB_W@Z
??0CXMLFileManagerInterface@@QAE@ABV0@@Z
GetOsLanguage
?GetParentAttribute@CXMLFileManagerInterface@@QAE?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W@Z
?RemoveAll@CXMLFileManagerInterface@@QAEJPB_W@Z
?Select@CXMLFileManagerInterface@@QAEJPB_W@Z
??0CXMLFileManagerInterface@@QAE@XZ
?GetFeatureData@CXMLFileManagerInterface@@QAE_NPB_WPAUCXML_FEATURE_DATA@@@Z
?SetFeatureData@CXMLFileManagerInterface@@QAE_NUCXML_FEATURE_DATA@@@Z
?OnBeforeExecuteChain@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnAfterExecuteChain@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnAfterExecutePatches@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnSetupPrerequisites@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnFeatureSelectionChanged@CScript@@SAIPAVCUtlXSetupEng@@UCXML_FEATURE_DATA@@@Z
?OnSetupInitialization@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnWizardInit@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnWizardCompleteSilent@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnWizardCompleteError@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnWizardCompleteSuccess@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnWizardCompleteReboot@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnWizardStart@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnWizardProgressStart@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnCustomCommandLine_S@CScript@@SAIPAVCUtlXSetupEng@@@Z
?OnBeforeExecutePatches@CScript@@SAIPAVCUtlXSetupEng@@@Z
?ScheduleOmni@CScript@@SAXPAVCUtlXSetupEng@@@Z
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
SetErrorMode
GetTickCount
GetWindowsDirectoryW
lstrcpyW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
GetProfileIntW
SearchPathW
VirtualProtect
GetUserDefaultLCID
FindResourceExW
GetCommandLineW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
CreateThread
ExitThread
GetSystemInfo
VirtualAlloc
VirtualQuery
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetLocaleInfoW
TerminateProcess
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetStringTypeW
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
GetDriveTypeW
WriteConsoleW
SetEnvironmentVariableA
PeekNamedPipe
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
lstrlenA
DeviceIoControl
InterlockedDecrement
GetSystemTime
GetLongPathNameW
GetUserGeoID
GetNativeSystemInfo
CompareStringW
GetCurrentDirectoryW
GlobalGetAtomNameW
SizeofResource
LockResource
LoadResource
FindResourceW
CreateEventW
CloseHandle
DeleteFileW
SetEvent
GetModuleFileNameW
RemoveDirectoryW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
CreateMutexW
GetLastError
GetCurrentProcess
FlushFileBuffers
GlobalFindAtomW
LoadLibraryA
GetSystemDirectoryW
LeaveCriticalSection
EnterCriticalSection
EncodePointer
SystemTimeToFileTime
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToSystemTime
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
SetThreadPriority
GetModuleHandleA
OutputDebugStringA
GetCurrentProcessId
FreeResource
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetVersionExW
GetCurrentThreadId
GetCurrentThread
SetLastError
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
Process32NextW
Module32NextW
Module32FirstW
Process32FirstW
CreateToolhelp32Snapshot
GetExitCodeProcess
CreateProcessW
WaitForSingleObject
WriteFile
CreateFileW
LocalFree
FormatMessageW
CopyFileW
GetTempPathW
DeleteCriticalSection
DecodePointer
HeapSize
RaiseException
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
WideCharToMultiByte
CreateDirectoryW
lstrcmpW
MultiByteToWideChar
GetModuleHandleW
GetDiskFreeSpaceExW
FreeLibrary
GetProcAddress
LoadLibraryW
CopyFileExW
GetExitCodeThread
Sleep
SuspendThread
ResumeThread
SetUnhandledExceptionFilter
InflateRect
GetMenuItemInfoW
DestroyMenu
LoadMenuW
SendDlgItemMessageA
FillRect
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
MapVirtualKeyW
GetKeyNameTextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
SetCursor
ShowOwnedPopups
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
CharUpperW
SetWindowsHookExW
ValidateRect
GetKeyState
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
GetWindowTextLengthW
GetWindowTextW
DrawEdge
GetFocus
SetFocus
GetDlgCtrlID
CheckDlgButton
MoveWindow
GetDesktopWindow
SetActiveWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetLastActivePopup
IsWindowEnabled
MapDialogRect
SetWindowContextHelpId
GetSysColorBrush
WaitMessage
SetCapture
ReleaseCapture
WindowFromPoint
PostQuitMessage
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetWindowThreadProcessId
GetWindow
EnumDesktopWindows
PostMessageW
ScreenToClient
GetCursorPos
EnableMenuItem
GetSystemMenu
MessageBoxW
GetDlgItem
CopyImage
DeleteMenu
RealChildWindowFromPoint
InvalidateRect
CharNextW
OffsetRect
CopyAcceleratorTableW
InvalidateRgn
SetRect
IntersectRect
IsRectEmpty
GetNextDlgGroupItem
MessageBeep
DestroyIcon
DefWindowProcW
UpdateLayeredWindow
SetWindowPos
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
CreatePopupMenu
InsertMenuItemW
SetRectEmpty
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatW
GetMenuDefaultItem
DrawFocusRect
DrawIconEx
GetIconInfo
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
UnionRect
SetParent
PostThreadMessageW
GetWindowRgn
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
CharUpperBuffW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongW
SetCursorPos
DestroyAcceleratorTable
wsprintfW
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
LockWindowUpdate
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
IsMenu
SetWindowRgn
CallNextHookEx
DrawFrameControl
RegisterWindowMessageW
GetSystemMetrics
GetDC
ReleaseDC
FindWindowW
ShowWindow
SetForegroundWindow
IsWindowVisible
SetTimer
KillTimer
EnableWindow
SendMessageW
GetParent
LoadBitmapW
LoadIconW
LoadImageW
GetAsyncKeyState
IsIconic
GetClientRect
DrawIcon
GetWindowRect
SetLayeredWindowAttributes
UpdateWindow
SystemParametersInfoW
LoadCursorW
RegisterClassExW
OpenClipboard
SetWindowTextW
EnumDisplayMonitors
SetWindowLongW
GetWindowLongW
CreateWindowExW
UnregisterClassW
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
GetClipBox
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
GetBkColor
GetTextColor
GetRgnBox
GetTextMetricsW
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
PatBlt
CreateRectRgnIndirect
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
CreateDCW
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
OffsetWindowOrgEx
CopyMetaFileW
GetDeviceCaps
TransparentBlt
AlphaBlend
ClosePrinter
DocumentPropertiesW
OpenPrinterW
OpenProcessToken
RegEnumKeyExW
InitiateSystemShutdownW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetFolderPathW
ShellExecuteW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
InitCommonControlsEx
ImageList_AddMasked
PathIsUNCW
PathStripToRootW
PathAppendW
PathRemoveFileSpecW
PathAddBackslashW
PathFindFileNameW
PathFindExtensionW
StrFormatKBSizeW
PathFileExistsW
PathCombineW
GetCurrentThemeName
CloseThemeData
GetThemePartSize
IsAppThemed
GetThemeSysColor
GetWindowTheme
OpenThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeText
GetThemeColor
CoInitialize
CoUninitialize
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoInitializeEx
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoDisconnectObject
StringFromGUID2
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoSetProxyBlanket
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
VariantChangeType
VariantCopy
SafeArrayAccessData
SafeArrayUnaccessData
VarBstrFromDate
OleCreateFontIndirect
SysFreeString
SysAllocStringLen
SysAllocString
VariantClear
LoadRegTypeLi
DispCallFunc
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetElemsize
VariantInit
OleUIBusyW
ord169
ord43
ord34
ord88
ord190
ord111
ord113
ord125
ord17
ord281
ord137
ord141
ord116
ord278
ord254
ord45
ord175
ord158
ord74
ord118
ord160
ord159
ord32
ord145
ord133
ord94
ord232
ord8
ord19
ord49
ord96
ord70
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
PlaySoundW
CryptUnprotectData
CryptProtectData
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInterfaceDetailW
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSendRequest
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpOpenRequest
UuidToStringW
RpcStringFreeW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ