_AbortPrint@0
_ClosePrint@0
_ContinuePrint@0
_EndPrint@0
_EndRipData@0
_ExitPrinter@0
_GetIPList@8
_InitPrinter@4
_InitPrinterMul@4
_PausePrint@0
_PrintALine@8
_StartPrint@8
_WriteRipData@8
Behavioral task
behavioral1
Sample
2024-04-22_d200cd10522496900e9c33283157c1f9_floxif_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_d200cd10522496900e9c33283157c1f9_floxif_mafia.exe
Resource
win10v2004-20240226-en
Target
2024-04-22_d200cd10522496900e9c33283157c1f9_floxif_mafia
Size
19.5MB
MD5
d200cd10522496900e9c33283157c1f9
SHA1
36b6b3c56c90999eebc5555ca52282c3b8fd9415
SHA256
d53de10f91c33b124077ff27f6b48f656e2942b45915e5c32ee3f7442290794e
SHA512
d63317200f74db4f8add8b0d3d6ed7dcfc09c5f1df6918a3a321d3bc483e35031a087ec1a16c2d0b95e1ec2d0f9bf27e31867b0a4a977a94299dbe120e8b89f0
SSDEEP
393216:XfDjcL3ozX1Nv718NNGj7JfVfT/piEPBACEfTjcL3HzX1Nv718NNGj7JfVfT/piu:bjcL0mNIj9W8BANjcLvmNIj9Wu
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_Enigma |
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_Loader |
resource | yara_rule |
---|---|
sample | cryptone |
Checks for missing Authenticode signature.
resource |
---|
2024-04-22_d200cd10522496900e9c33283157c1f9_floxif_mafia |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_AbortPrint@0
_ClosePrint@0
_ContinuePrint@0
_EndPrint@0
_EndRipData@0
_ExitPrinter@0
_GetIPList@8
_InitPrinter@4
_InitPrinterMul@4
_PausePrint@0
_PrintALine@8
_StartPrint@8
_WriteRipData@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE