General

  • Target
    2024-11-11_d4d8d97c253668da0a3156954fcaa380_bkransomware_floxif_hijackloader
  • Size 14.4MB
  • Sample241111-ppx28ayhmr
  • SHA256 704f980fd23351d44ff8751a6fa161caf409639f6a46fac0e261e6b606967cfb
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-11-11_d4d8d97c253668da0a3156954fcaa380_bkransomware_floxif_hijackloader
    .exe 14.4MB

2024-11-11_d4d8d97c253668da0a3156954fcaa380_bkransomware_floxif_hijackloader

  • IMPHASH 56cc4a124ebec5c74e5a6e699f1fbcb3
  • SHA256 704f980fd23351d44ff8751a6fa161caf409639f6a46fac0e261e6b606967cfb
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
44:0c:82:63:14:d6:5e:2a:1b:42:fb:58:e4:97:50:b5:95:33:34:6b:1c:d7:50:9d:93:e4:e6:8e:57:30:5c:5c
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=GRETECH CORPORATION,O=GRETECH CORPORATION,L=Shinjuku,ST=Tokyo,C=JP
Minor OS version
1
Major OS version
5
Entry point
6541352
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Work\PLAY\GOMPlayer\2402\Player\project\GOMPlayer\map_pdb\GOM32R_vc120_ReleaseU.pdb