Z:\Ventoy\Ventoy2Disk\Release\Ventoy2Disk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-09_09a730345b332445ddaa50ab52a9cdfe_bkransomware_floxif.exe
Resource
win7-20240903-en
General
-
Target
2024-10-09_09a730345b332445ddaa50ab52a9cdfe_bkransomware_floxif
-
Size
397KB
-
MD5
09a730345b332445ddaa50ab52a9cdfe
-
SHA1
9030e6212bebdd29b29370bdd4581d143a78fbc5
-
SHA256
e54ba5ee33a42354a65c8396e1b7524a3331804c86c2a377b7a102bf540aa388
-
SHA512
914206085b8cb0abbd0a117aca7d11f34c3cd040b0536887e8f80df73a3cc31a1ece24b06b7b8ba80bbc5645c1cdf97d5e64cee422bfdc88c68b97e7a13d959d
-
SSDEEP
6144:NNPFhb7uu5T7jTYr/+Us/DbVao4qqPIBXtHSWENLVxOR8E7tBV+UdvrEFp7hKA:NHVHT/TBnVWqqPIBONhxs8utBjvrEH7r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-09_09a730345b332445ddaa50ab52a9cdfe_bkransomware_floxif
Files
-
2024-10-09_09a730345b332445ddaa50ab52a9cdfe_bkransomware_floxif.exe windows:6 windows x86 arch:x86
d1a25cdc501690aab01277104ee8865e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
DeleteFileA
Sleep
GetLastError
SetLastError
SetFilePointerEx
WriteFile
ReadFile
CreateFileA
FindVolumeClose
SetFilePointer
DeleteVolumeMountPointA
QueryDosDeviceA
GetLogicalDrives
SetVolumeMountPointA
GetLogicalDriveStringsA
DeviceIoControl
FindFirstVolumeA
CloseHandle
FindNextVolumeA
GetTickCount64
GetNativeSystemInfo
K32GetProcessImageFileNameW
GetCurrentProcess
QueryFullProcessImageNameW
K32GetModuleFileNameExW
WideCharToMultiByte
ReadProcessMemory
GetProcAddress
LoadLibraryA
IsWow64Process
GetFileType
GetModuleHandleA
VerSetConditionMask
GetFileAttributesA
VerifyVersionInfoA
GetLocalTime
GetProductInfo
GetVersionExA
GetCurrentProcessId
GetPrivateProfileSectionNamesW
GetSystemDefaultUILanguage
GetPrivateProfileStringW
lstrcmpW
MultiByteToWideChar
lstrlenW
GetPrivateProfileIntW
lstrcpyW
CreateThread
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleFileNameA
LoadLibraryExW
DeleteCriticalSection
ReadConsoleW
RtlUnwind
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentDirectoryA
GetStartupInfoA
CreateProcessA
HeapReAlloc
WaitForSingleObject
CreateFileW
SetEndOfFile
GetPrivateProfileIntA
RaiseException
TerminateProcess
HeapSize
OutputDebugStringW
FlushFileBuffers
WriteConsoleW
SetStdHandle
LCMapStringW
HeapFree
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetCommandLineA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
GetProcessHeap
GetStdHandle
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
user32
GetSubMenu
DeleteMenu
DialogBoxParamW
SetFocus
SendMessageA
wsprintfW
GetMenu
LoadIconW
InvalidateRect
LoadMenuW
AppendMenuW
GetMenuState
SendDlgItemMessageW
ShowWindow
SetMenu
SetWindowTextA
UpdateWindow
CheckMenuItem
GetSystemMetrics
GetWindowTextA
GetDlgItem
EndDialog
MessageBoxW
SendMessageW
EnableWindow
SetWindowTextW
ModifyMenuW
gdi32
SetBkMode
CreateFontW
GetStockObject
SetTextColor
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteW
ole32
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoInitializeSecurity
CoCreateGuid
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ