General

  • Target
    2024-09-06_7def069a30d79a8e86e24d3e423e6137_bkransomware_floxif_hijackloader
  • Size 3.7MB
  • Sample240906-e1pvwawdkm
  • SHA256 0b66b6105a3e3e4ea78d1e15d63a4558aa43dabdcb6b1ec17cbfebc5f98ddd18
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-09-06_7def069a30d79a8e86e24d3e423e6137_bkransomware_floxif_hijackloader
    .exe 3.7MB

2024-09-06_7def069a30d79a8e86e24d3e423e6137_bkransomware_floxif_hijackloader

  • IMPHASH 98d9e4cdba70e3b56d25d15e161bc7cd
  • SHA256 0b66b6105a3e3e4ea78d1e15d63a4558aa43dabdcb6b1ec17cbfebc5f98ddd18
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
3d:d9:8d:5b:34:7e:1f:8a:07:ff:e9:bd:cf:b8:7b:96:8c:72:34:68:56:81:60:5a:2a:c3:b6:69:d0:88:a8:cd
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Corel Corporation,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA

PE Signature issue

Digest
92:29:fd:e9:df:2b:4e:26:63:1e:c4:74:a9:77:71:c1:0a:a8:75:f2
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Corel Corporation,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Minor OS version
1
Major OS version
5
Entry point
2315282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
Z:\BLD\IPM-COM-JOB1\SRC\SDK\Product\bin\RELEASEU12\CUHEXE.PDB