2024-04-25_6c203ff1c6a191407da5673dc8f42dde_floxif_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-04-25_6c203ff1c6a191407da5673dc8f42dde_floxif_mafia
Size

1.8MB
MD5

6c203ff1c6a191407da5673dc8f42dde
SHA1

5db0cede9232ee161d295284cdfedb25523c7565
SHA256

205f83b3c17c7e4044647e483d42e354032da681e01ec6a946a3f7457f55ec6d
SHA512

d4a25599e138012604b1705f75eaba189c4a1fe3d5181ab48e8133d1446ee496ff5b5308382afcf35e84c945818f106f2108d406aec455a57b137adde89f040f
SSDEEP

49152:OLviuZPMTdjzCjp4c3W+GyPx/myfcUdNcewMz0mv+qT7OnH9PFlqe:OLjZPMTdfCS2gyPx/mykUdNcewMz0+Ox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-25_6c203ff1c6a191407da5673dc8f42dde_floxif_mafia

Files

2024-04-25_6c203ff1c6a191407da5673dc8f42dde_floxif_mafia
.exe windows:5 windows x86 arch:x86

1048bf5dbe1fab5178101c00ea721a77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

stdfu

STDFU_GetDeviceDescriptor
STDFU_GetDFUDescriptor
STDFU_Upload
STDFU_Open
STDFU_SelectCurrentConfiguration
STDFU_Getstatus
STDFU_Clrstatus
STDFU_Dnload
STDFU_Close

stdfufiles

STDFUFILES_DestroyImage
STDFUFILES_GetImageName
STDFUFILES_GetImageAlternate
STDFUFILES_ReadImageFromDFUFile
STDFUFILES_OpenExistingDFUFile
STDFUFILES_FilterImageForOperation
STDFUFILES_SetImageName
STDFUFILES_CreateImageFromMapping
STDFUFILES_GetImageSize
STDFUFILES_DuplicateImage
STDFUFILES_GetImageElement
STDFUFILES_GetImageNbElement
STDFUFILES_AppendImageToDFUFile
STDFUFILES_CreateNewDFUFile
STDFUFILES_CloseDFUFile

stdfuprt

STDFUPRT_DestroyMapping
STDFUPRT_CreateMappingFromDevice
STDFUPRT_LaunchOperation
STDFUPRT_GetOperationStatus
STDFUPRT_StopOperation

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

hid

HidD_GetProductString
HidD_GetHidGuid
HidP_MaxUsageListLength
HidP_GetSpecificValueCaps
HidP_GetSpecificButtonCaps
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetPreparsedData
HidD_SetFeature

kernel32

HeapSetInformation
GetStartupInfoW
HeapAlloc
RaiseException
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
ExitThread
CreateThread
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapCreate
IsValidCodePage
LCMapStringW
IsProcessorFeaturePresent
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetStringTypeW
CompareStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
SearchPathA
GetProfileIntA
GetTickCount
GetFileAttributesA
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
GetCommandLineA
GetTempFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
DeleteFileA
GetOEMCP
GetCPInfo
GetCurrentDirectoryA
HeapFree
GetThreadLocale
InterlockedIncrement
GetACP
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
HeapReAlloc
GetTempPathA
GetFileTime
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetModuleHandleA
FreeLibrary
GetProcAddress
CompareStringA
LoadLibraryW
LoadLibraryA
lstrcmpW
GetCurrentThreadId
GetCurrentProcessId
ActivateActCtx
DeactivateActCtx
SetLastError
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
FreeResource
CloseHandle
CreateFileA
GetLastError
Sleep
LocalAlloc
GetModuleFileNameA
lstrcpyA
lstrcatA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
DecodePointer
EncodePointer
RtlUnwind
FindResourceExW
FileTimeToSystemTime
VirtualProtect
GetSystemTimeAsFileTime

user32

CharUpperBuffA
CopyIcon
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
FrameRect
RegisterClipboardFormatA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
LoadImageA
CopyImage
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongA
DestroyAcceleratorTable
SetParent
UnregisterClassA
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableA
CharNextA
DestroyIcon
WaitMessage
GetMenuDefaultItem
SetMenuDefaultItem
GetMenuItemInfoA
CreatePopupMenu
IsMenu
DestroyMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsRectEmpty
CharUpperA
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
ReleaseCapture
WindowFromPoint
SetCapture
SetWindowRgn
GetSystemMenu
LoadMenuW
DeleteMenu
OffsetRect
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorA
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
SetRectEmpty
IntersectRect
InflateRect
SetWindowContextHelpId
MapDialogRect
MapVirtualKeyA
GetKeyNameTextA
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
PostThreadMessageA
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindow
SetWindowsHookExA
UnhookWindowsHookEx
GetCursorPos
CallNextHookEx
GetFocus
PtInRect
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
GetClassNameA
LoadBitmapW
UpdateWindow
FillRect
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IsWindow
RedrawWindow
InvalidateRect
RegisterDeviceNotificationA
wsprintfA
GetSysColor
GetSystemMetrics
LoadIconW
KillTimer
SetTimer
GetClientRect
GetWindowRect
IsIconic
SendMessageA
DrawIcon
EnableWindow
DefFrameProcA
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
GetCapture
DefMDIChildProcA
ShowWindow

gdi32

SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
CreateRoundRectRgn
CreateDIBSection
GetBkColor
GetTextColor
EnumFontFamiliesA
GetRgnBox
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
Rectangle
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
GetTextMetricsA
CreateDIBitmap
DPtoLP
SetPixel
GetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
GetStockObject
GetObjectA
CreateSolidBrush
DeleteObject
Escape
CombineRgn
SetRectRgn
CreateFontIndirectA
PatBlt
CreateRectRgnIndirect
CreateHatchBrush
CreatePen
GetObjectType
SelectPalette
CreateBitmap
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateRectRgn
CreateCompatibleBitmap
GetWindowOrgEx
GetTextExtentPoint32A
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
GetTextCharsetInfo

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA

shell32

SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
SHBrowseForFolderA
DragQueryFileA
DragFinish
SHAppBarMessage

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA
PathFindExtensionA

ole32

OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleGetClipboard
CoInitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoRegisterMessageFilter
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
CoGetClassObject
RegisterDragDrop

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
VariantCopy
SysAllocStringByteLen
SafeArrayDestroy
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString

oledlg

ord8

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1048bf5dbe1fab5178101c00ea721a77

Headers

DLL Characteristics

File Characteristics

Imports

stdfu

stdfufiles

stdfuprt

setupapi

hid

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 279KB - Virtual size: 279KB

.data Size: 24KB - Virtual size: 53KB

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 166KB - Virtual size: 165KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 279KB - Virtual size: 279KB

.data
Size: 24KB - Virtual size: 53KB

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 166KB - Virtual size: 165KB