2024-12-23_e759920cbb1d656e0adb35a35d6b3fd2_floxif_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-12-23_e759920cbb1d656e0adb35a35d6b3fd2_floxif_mafia
Size

893KB
MD5

e759920cbb1d656e0adb35a35d6b3fd2
SHA1

6d24012787f293f3d637b8b94ffc0f83127de87e
SHA256

28ff22af0bca5f1a212354c4d5bf4196cc5f29586036d26970a8734d3dedc303
SHA512

b7990e227f2f17922ba1a826ddce4b53afe0277199db3f1063558dbfb88dc8e6834685409662696ea3e73d3d151427bee2d67d9c5a39e0dbbeb4d459442c3330
SSDEEP

24576:ZRwSdnc+4XfJp3cHYsrepciOk9vzmagSpWfxlLiissTAFAavrEH7b:ZRwSdnczvJ4YaepL4ldfOisqQAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-23_e759920cbb1d656e0adb35a35d6b3fd2_floxif_mafia

Files

2024-12-23_e759920cbb1d656e0adb35a35d6b3fd2_floxif_mafia
.exe windows:5 windows x86 arch:x86

d8dc8bdec6283d201c75fbac98c025be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\mydocs\dcraw\Win32-Release\dcraw.pdb

Imports

kernel32

InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetCurrentDirectoryW
SetEnvironmentVariableW
GetFullPathNameA
GetDriveTypeW
CreateFileW
GetLastError
HeapFree
HeapAlloc
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
RtlUnwind
GetCommandLineA
HeapSetInformation
EncodePointer
DecodePointer
HeapReAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
DeleteFileA
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetCurrentProcessId
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetFileAttributesA
CloseHandle
CreateFileA
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
GetModuleFileNameW
MultiByteToWideChar
ReadFile
SetFilePointer
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
HeapSize
LoadLibraryW
LCMapStringW
SetEndOfFile
GetProcessHeap
WriteConsoleW
GetStringTypeW
FlushFileBuffers
RaiseException
CompareStringW
SetEnvironmentVariableA

ws2_32

htonl
htons
ntohs
ntohl

Sections

.text
Size: 642KB - Virtual size: 641KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 649KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8dc8bdec6283d201c75fbac98c025be

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ws2_32

Sections

.text Size: 642KB - Virtual size: 641KB

.rdata Size: 99KB - Virtual size: 99KB

.data Size: 45KB - Virtual size: 649KB

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 642KB - Virtual size: 641KB

.rdata
Size: 99KB - Virtual size: 99KB

.data
Size: 45KB - Virtual size: 649KB

.reloc
Size: 29KB - Virtual size: 28KB