_AbortPrint@0
_ClosePrint@0
_ContinuePrint@0
_EndPrint@0
_EndRipData@0
_ExitPrinter@0
_GetIPList@8
_InitPrinter@4
_InitPrinterMul@4
_PausePrint@0
_PrintALine@8
_StartPrint@8
_WriteRipData@8
Behavioral task
behavioral1
Sample
2024-04-22_deeccee6e26a043819f4f894a19339dd_floxif_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_deeccee6e26a043819f4f894a19339dd_floxif_mafia.exe
Resource
win10v2004-20240412-en
Target
2024-04-22_deeccee6e26a043819f4f894a19339dd_floxif_mafia
Size
19.5MB
MD5
deeccee6e26a043819f4f894a19339dd
SHA1
086ec89177e8d20a25895ee943d99102a3e69b3c
SHA256
ff29f85a0a6323ad042f47fd4837ee370e4bb5d2c2c677fd0b69a46fc2967f05
SHA512
c2f2f55256c0d3c7103d51cead9b5cf832263a795538785a48ecd7a255d1e427dc18f9d7e3bc735b686e0c994930120bbe19db0cd1cadcaa3a6ce24ab727febe
SSDEEP
393216:XfTjcL3vzX1Nv718NNGj7JfVfT/piEPBACEfTjcL3HzX1Nv718NNGj7JfVfT/piX:LjcLXmNIj9W8BANjcLvmNIj9WX
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_Enigma |
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_Loader |
resource | yara_rule |
---|---|
sample | cryptone |
Checks for missing Authenticode signature.
resource |
---|
2024-04-22_deeccee6e26a043819f4f894a19339dd_floxif_mafia |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_AbortPrint@0
_ClosePrint@0
_ContinuePrint@0
_EndPrint@0
_EndRipData@0
_ExitPrinter@0
_GetIPList@8
_InitPrinter@4
_InitPrinterMul@4
_PausePrint@0
_PrintALine@8
_StartPrint@8
_WriteRipData@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE