General

  • Target
    2024-09-08_3086d32639c94d44656e31e7e2c71004_bkransomware_floxif
  • Size 1.9MB
  • Sample240908-pl66qayard
  • SHA256 029148837b26356edd884c5a794bec7e79a2103ff08112104ea721b0efa11a36
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-09-08_3086d32639c94d44656e31e7e2c71004_bkransomware_floxif
    .exe 1.9MB

2024-09-08_3086d32639c94d44656e31e7e2c71004_bkransomware_floxif

  • IMPHASH 8fe0970bfbc60519f3a5404a1d990aac
  • SHA256 029148837b26356edd884c5a794bec7e79a2103ff08112104ea721b0efa11a36
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
2b:14:cc:54:e9:c6:1e:40:9d:9c:7c:03:f9:e6:7d:ed:cd:d2:7c:69:29:dc:3b:e7:87:cf:9f:71:ea:62:4d:d0
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=HP Inc.,OU=HP Cybersecurity,O=HP Inc.,L=Palo Alto,ST=California,C=US
Minor OS version
1
Major OS version
5
Entry point
1213201
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
f:\jnks\workspace\K21_Prodution_Build\build2420\SxS\src\Release\Setup.pdb