F:\StarTeam\Production\FE\SP20\odin-group\Nse\JoyTreader\JoystickImage\Release\JoystickImage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_07e604265843cdb5f0c4247a67133642_floxif_mafia.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-26_07e604265843cdb5f0c4247a67133642_floxif_mafia.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-26_07e604265843cdb5f0c4247a67133642_floxif_mafia
-
Size
3.4MB
-
MD5
07e604265843cdb5f0c4247a67133642
-
SHA1
6c3eee9ba15d6d1b6517106ef1bbc4d1e26e2a85
-
SHA256
1c882e1d34b28c4efc465adb7049b06db990c98c13d4b98dd23f80612b6f23aa
-
SHA512
d626f43faedfcea551bbd61d412684cdf978a353b3b4b7f1372f9f244cef30c895079f32c31933bd263f5242859f22bfd2345d7ee0f9653df0cd6b1d6d7711d3
-
SSDEEP
98304:vQIQ7n4g8zR1ZRER+7b6MYkjMtGs7qKnX341lfc4Hz:II9g8rTsZss7qKn4vXT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-26_07e604265843cdb5f0c4247a67133642_floxif_mafia
Files
-
2024-04-26_07e604265843cdb5f0c4247a67133642_floxif_mafia.exe windows:5 windows x86 arch:x86
42c8e5d41e74cf915c0aff0e45a45f02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_GetIconSize
ord17
InitCommonControlsEx
dinput8
DirectInput8Create
psapi
GetModuleFileNameExA
kernel32
GetConsoleMode
CompareStringW
GetTimeZoneInformation
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetConsoleCP
FreeEnvironmentStringsW
GetStringTypeW
LCMapStringW
HeapCreate
GetStdHandle
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
GetModuleHandleA
Sleep
WideCharToMultiByte
SizeofResource
LockResource
IsProcessorFeaturePresent
LoadResource
FindResourceW
OpenProcess
CloseHandle
GetModuleFileNameA
CreateMutexA
GetLastError
ReleaseMutex
FindResourceA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
InterlockedDecrement
MultiByteToWideChar
lstrlenA
GlobalFree
InterlockedExchange
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpA
SetLastError
DeactivateActCtx
LoadLibraryA
ActivateActCtx
CompareStringA
LoadLibraryExA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GlobalDeleteAtom
GetCurrentProcessId
FreeResource
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
MulDiv
lstrlenW
IsValidCodePage
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
HeapReAlloc
CreateThread
ExitThread
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
LocalFree
FormatMessageA
GlobalSize
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
ExitProcess
DecodePointer
EncodePointer
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetTickCount
GetTempPathA
GetTempFileNameA
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
GetOEMCP
GetCPInfo
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
lstrcmpiA
GetACP
GetThreadLocale
DeleteFileA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
lstrcpyA
GetSystemDirectoryW
GetCurrentDirectoryA
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
GlobalAddAtomA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CopyFileA
user32
FrameRect
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongA
DestroyAcceleratorTable
SetParent
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
UnregisterClassA
CopyImage
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
GetAsyncKeyState
NotifyWinEvent
SetWindowRgn
CharUpperA
DestroyIcon
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
IntersectRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
OffsetRect
CharNextA
KillTimer
SetTimer
RealChildWindowFromPoint
GetSysColorBrush
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
WaitMessage
ReleaseCapture
LoadCursorA
LoadCursorW
WindowFromPoint
SetCapture
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
MoveWindow
SetWindowTextA
IsDialogMessageA
CopyIcon
CheckDlgButton
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
CopyRect
UnhookWindowsHookEx
PtInRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringA
CharUpperBuffA
PostThreadMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
DrawTextExA
DrawTextA
TabbedTextOutA
UpdateWindow
FillRect
DrawStateA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetKeyNameTextA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
SetForegroundWindow
ShowWindow
EnableWindow
LoadIconW
GetSystemMenu
AppendMenuA
SendMessageA
InvalidateRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetClassNameA
GetWindowTextA
LoadMenuW
GetCursorPos
GetSubMenu
keybd_event
GetWindowRect
SetCursorPos
SendInput
AttachThreadInput
GetFocus
PostMessageA
PostQuitMessage
MessageBoxA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SetWindowPos
MapDialogRect
SetWindowContextHelpId
GetWindow
RegisterWindowMessageA
EndDialog
GetNextDlgTabItem
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
RemoveMenu
GetMenuItemCount
InsertMenuA
GetMenuItemID
GetMenuStringA
GetMenuState
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
RegisterClipboardFormatA
gdi32
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateFontIndirectA
GetTextExtentPoint32A
CreateDIBitmap
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsA
EnumFontFamiliesA
GetBkColor
GetTextColor
GetRgnBox
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateRoundRectRgn
CreateDIBSection
ExcludeClipRect
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetStockObject
CreateSolidBrush
CreateBitmap
CreateDCA
CopyMetaFileA
GetDeviceCaps
SetDCBrushColor
CreateFontA
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
GetTextCharsetInfo
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegCloseKey
RegEnumKeyExA
shell32
ShellExecuteA
Shell_NotifyIconA
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHAppBarMessage
DragQueryFileA
DragFinish
SHGetFileInfoA
SHGetSpecialFolderLocation
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA
PathFileExistsA
ole32
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoInitializeEx
OleInitialize
CoFreeUnusedLibraries
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleUninitialize
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleRun
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
CoGetClassObject
oleaut32
SysAllocStringByteLen
SysAllocStringLen
VariantChangeType
SysStringLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
VariantClear
VariantInit
SysFreeString
GetErrorInfo
VarBstrFromDate
oledlg
ord8
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipDeleteGraphics
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromStream
GdiplusStartup
GdipDrawImageI
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ