2024-07-05_36a4db77c1202956719f35242be471a8_floxif_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-05_36a4db77c1202956719f35242be471a8_floxif_mafia
Size

2.4MB
MD5

36a4db77c1202956719f35242be471a8
SHA1

b36a9812d2d6a32a31fe165eca970a9f39b265e0
SHA256

21dd743421f7f6bc8b093dc6ba2c8e079e6be2d022ad0487f3aee99be56a71e7
SHA512

3a2444855948680f9c7a9c02c71ddb7be079bc7a19b76966ae01e06d966400bd75aebcea8002e8204f698cfd18b2363576ab22e106811df298d777b210789576
SSDEEP

49152:7KrktROe9nQPSX1MkzQx/y3aGj3w3i4Lwaeki4dKRMXws74eZbku0QeCouCu:ltROe9QSl30x/yKGTw3i4LjdWMXws7g0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-05_36a4db77c1202956719f35242be471a8_floxif_mafia

Files

2024-07-05_36a4db77c1202956719f35242be471a8_floxif_mafia
.exe windows:5 windows x86 arch:x86

76a5b5b269339fa910de8021fac8463c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImagePalette
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromStream
GdiplusShutdown
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipDrawImageI
GdiplusStartup
GdipGetImagePaletteSize

uxtheme

IsAppThemed
DrawThemeParentBackground

wininet

InternetCrackUrlA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA

kernel32

GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetStringTypeW
GetTimeZoneInformation
CreateFileA
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
HeapReAlloc
RtlUnwind
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateThread
ExitThread
CreateDirectoryW
EncodePointer
DecodePointer
ExitProcess
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetStartupInfoW
HeapSetInformation
GetCommandLineW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
SearchPathW
GetProfileIntW
GetFileAttributesW
GetNumberFormatW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
DeleteFileW
FindResourceExW
GetCurrentDirectoryW
GetThreadLocale
GlobalGetAtomNameW
TlsFree
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
GlobalFlags
lstrcpyW
GetSystemDirectoryW
WritePrivateProfileStringW
ResumeThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GetLocaleInfoW
LoadLibraryExW
VirtualProtect
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
GetCurrentThreadId
WideCharToMultiByte
CopyFileW
GlobalSize
FormatMessageW
lstrlenW
MulDiv
GetCurrentProcessId
ActivateActCtx
DeactivateActCtx
FreeResource
RaiseException
InterlockedExchange
LocalFree
LocalAlloc
FreeLibrary
CreateFileW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCurrentProcess
CloseHandle
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
SetThreadPriority
GetModuleHandleW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersion
LoadLibraryExA
GetUserPreferredUILanguages
GetModuleFileNameA
GetModuleHandleA
WaitForSingleObject
CreateEventW
Sleep
GetProductInfo
GetProcAddress
GetModuleFileNameW
LoadLibraryA
SetEvent
OutputDebugStringW
MultiByteToWideChar
FileTimeToSystemTime
GetTickCount
GetLastError
lstrcatA
lstrlenA
lstrcmpA
SetLastError
GetComputerNameA
OutputDebugStringA
FindResourceW
LoadResource
LockResource
SizeofResource
GetConsoleMode
GetConsoleCP
LocalReAlloc
IsProcessorFeaturePresent
GetFileType
CreateDirectoryA

user32

InsertMenuItemW
TranslateAcceleratorW
FrameRect
RegisterClipboardFormatW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
LoadImageW
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFocusRect
DrawFrameControl
DrawEdge
SetClassLongW
DestroyAcceleratorTable
SetParent
DestroyIcon
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
CharNextW
WaitMessage
UnregisterClassW
GetMenuDefaultItem
SetMenuDefaultItem
GetMenuItemInfoW
IsMenu
EnableScrollBar
UnionRect
IsRectEmpty
CharUpperW
IsZoomed
NotifyWinEvent
MessageBeep
ReleaseCapture
WindowFromPoint
SetWindowRgn
GetSystemMenu
DeleteMenu
IntersectRect
InflateRect
RealChildWindowFromPoint
GetSysColorBrush
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
SetRectEmpty
ShowOwnedPopups
SetWindowContextHelpId
PostQuitMessage
MapVirtualKeyW
GetKeyNameTextW
MapDialogRect
GetAsyncKeyState
LoadMenuW
MoveWindow
IsDialogMessageW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
ValidateRect
CreateWindowExW
GetClassInfoExW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
GetMenu
CopyRect
GetWindowTextLengthW
GetScrollPos
SetScrollPos
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetSysColor
GrayStringW
DrawTextExW
TabbedTextOutW
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
GetLastActivePopup
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetClassNameW
LoadBitmapW
DrawStateW
SetTimer
KillTimer
DrawIcon
MonitorFromPoint
DrawTextA
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
GetWindow
CreateWindowExA
DestroyWindow
SetWindowPos
RedrawWindow
RegisterClassW
DefWindowProcW
SetForegroundWindow
IsIconic
FindWindowA
MessageBoxW
IsWindow
RegisterWindowMessageW
PostMessageW
RegisterWindowMessageA
GetKeyState
OffsetRect
GetDC
UpdateWindow
GetMonitorInfoW
MonitorFromWindow
SetWindowTextW
LoadStringW
ShowWindow
IsWindowVisible
UpdateLayeredWindow
GetDesktopWindow
GetWindowTextA
MapWindowPoints
LoadIconW
SetWindowTextA
ReleaseDC
GetWindowRect
GetWindowDC
DestroyMenu
TrackPopupMenu
ClientToScreen
AppendMenuW
CreatePopupMenu
SetCursor
LoadCursorW
ScreenToClient
EndPaint
IsWindowEnabled
GetCursorPos
BeginPaint
SendMessageA
MessageBoxA
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
wsprintfA
GetSystemMetrics
CopyImage
DrawIconEx
GetFocus
GetWindowTextW
GetParent
GetWindowLongW
SetCapture
PtInRect
DefFrameProcW
PostThreadMessageW
CharUpperBuffW
CopyIcon
UnpackDDElParam
ReuseDDElParam
GetClassInfoW
GetPropW
SetFocus
InvalidateRect
RemovePropA
CallWindowProcW
GetPropA
DrawTextW
EnableWindow
FillRect
GetClientRect
SetWindowLongW
SetPropA
SendMessageW
GetDlgItem
SetPropW

gdi32

SelectPalette
GetObjectType
CreateRectRgnIndirect
PatBlt
CreateDIBitmap
CreateFontIndirectW
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextExtentPoint32W
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateRoundRectRgn
EnumFontFamiliesExW
GetBkColor
GetRgnBox
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
OffsetWindowOrgEx
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
SetPixel
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
CreateBitmap
GetTextFaceW
SetPixelV
SetTextAlign
CreatePatternBrush
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateFontW
SetBkColor
GetTextColor
GetTextMetricsW
GetDeviceCaps
CreatePen
StretchBlt
ExtSelectClipRgn
GetClipRgn
SelectClipRgn
CreateRectRgn
Rectangle
CreateHatchBrush
SetDCBrushColor
SetDCPenColor
CreateFontA
GetCurrentObject
SetStretchBltMode
GetObjectW
DeleteDC
BitBlt
DeleteObject
CreateSolidBrush
ScaleWindowExtEx
SetWindowExtEx
SetTextColor
SelectObject
CreateCompatibleDC
SetBkMode
SetLayout
GetNearestPaletteIndex
GetStockObject
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
GetLayout
CreateDCW
CopyMetaFileW
SetDIBitsToDevice
GetDIBits
CreateDIBSection
LineTo
MoveToEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

OpenProcessToken
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyW
RegQueryValueExW
RegCreateKeyW
RegEnumValueW
LookupAccountNameA
RegEnumKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCreateKeyExA
GetTokenInformation
RegOpenKeyA
RegDeleteValueW
RegSetValueExW
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
CryptReleaseContext
CryptDestroyHash
CryptVerifySignatureW
CryptHashData
CryptCreateHash
CryptImportKey
CryptAcquireContextA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid

shell32

ShellExecuteW
SHGetFolderPathA
ShellExecuteA
SHGetKnownFolderPath
SHGetMalloc
SHBrowseForFolderW
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoW
SHGetPathFromIDListW

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFileExistsW
PathIsUNCW

ole32

ReleaseStgMedium
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData

oleaut32

SysStringLen
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysFreeString

oledlg

OleUIBusyW

crypt32

CryptStringToBinaryA
CryptStringToBinaryW
CryptVerifyMessageSignature
CertGetNameStringA
CertFreeCertificateContext
CryptBinaryToStringW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

timeSetEvent
PlaySoundW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76a5b5b269339fa910de8021fac8463c

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

uxtheme

wininet

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

crypt32

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 307KB - Virtual size: 307KB

.data Size: 26KB - Virtual size: 121KB

.rsrc Size: 605KB - Virtual size: 605KB

.reloc Size: 180KB - Virtual size: 180KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 307KB - Virtual size: 307KB

.data
Size: 26KB - Virtual size: 121KB

.rsrc
Size: 605KB - Virtual size: 605KB

.reloc
Size: 180KB - Virtual size: 180KB