2024-12-25_b4d56b49de98567003125cff5744f34f_floxif_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-12-25_b4d56b49de98567003125cff5744f34f_floxif_mafia
Size

2.4MB
MD5

b4d56b49de98567003125cff5744f34f
SHA1

8825406315726d05028f0924298af00aafb4924d
SHA256

68381ef6ef0043fe82fe0c40354f2f2ff95f4206feb2704d611bd9a366015cfa
SHA512

81aaa6445a730fbe8b5972d84eb98e72c8566162d4cb01507d5f5f824b3f2e1d0138ca75110349cab0dabd1da2f33245bd11ec9b2b0766c53bd8706ef3bf96fc
SSDEEP

49152:ybN6s9VwXTJq16ZEHqlU8P+PGlLIRVdETIwpKfm2+YSxOvy6uJkm2rD9YZGqr+EI:ybosIASEHqlUbPAsRVdETIIKfm2+fCyE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-25_b4d56b49de98567003125cff5744f34f_floxif_mafia

Files

2024-12-25_b4d56b49de98567003125cff5744f34f_floxif_mafia
.exe windows:5 windows x86 arch:x86

9a9ec904da71dbbf1c81f7ec6fcf2b6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ZB_tool_build\CP_DownToolsPlatform\Download_UI_2.0\Release\YGDP_UI.pdb

Imports

kernel32

IsValidLocale
GetConsoleCP
GetConsoleMode
EnumSystemLocalesA
WriteConsoleW
SetEnvironmentVariableA
GetStringTypeW
LCMapStringW
GetLocaleInfoA
IsProcessorFeaturePresent
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
VirtualAlloc
SizeofResource
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
ExitProcess
RaiseException
RtlUnwind
CreateThread
ExitThread
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetFileAttributesA
GetStartupInfoW
HeapSetInformation
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetNumberFormatW
GetWindowsDirectoryW
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
GetCurrentDirectoryW
GetTempFileNameW
GetFileTime
GetFileAttributesW
GetUserDefaultLCID
lstrcpyW
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
DeleteFileW
lstrcmpiW
GetThreadLocale
SuspendThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetTickCount
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
GlobalGetAtomNameW
GetCurrentProcessId
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FindClose
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
lstrcmpW
CopyFileW
GlobalSize
FormatMessageW
LocalFree
ResetEvent
SetEvent
WaitForSingleObject
FreeResource
ResumeThread
MulDiv
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GlobalUnlock
GlobalLock
GetModuleFileNameW
GlobalFree
GlobalAlloc
lstrlenA
CloseHandle
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
lstrlenW
CreateDirectoryW
GetLocalTime
GetCommandLineW
ReleaseMutex
CreateMutexW
ActivateActCtx
GetModuleHandleW
GetLastError
DeactivateActCtx
SetLastError
GetProcAddress
LoadLibraryW
FreeLibrary
MultiByteToWideChar
Sleep
FindResourceW
LoadResource
LockResource
GetDriveTypeW

user32

IsCharLowerW
LockWindowUpdate
CreateAcceleratorTableW
GetKeyboardLayout
ToUnicodeEx
DestroyAcceleratorTable
NotifyWinEvent
EnableScrollBar
HideCaret
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
IsClipboardFormatAvailable
GetNextDlgGroupItem
CopyAcceleratorTableW
CharNextW
PostThreadMessageW
SetParent
DeleteMenu
EnumDisplayMonitors
UnregisterClassW
RealChildWindowFromPoint
GetSysColorBrush
CharUpperW
ShowOwnedPopups
GetMessageW
ValidateRect
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
PostQuitMessage
GetMenuItemInfoW
IsZoomed
DrawIcon
SystemParametersInfoW
SetCursorPos
UnpackDDElParam
ReuseDDElParam
DestroyMenu
LoadAcceleratorsW
IsIconic
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IntersectRect
EndPaint
BeginPaint
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
IsWindowEnabled
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
MapVirtualKeyExW
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
GetScrollRange
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
GetMenu
SetWindowPos
GetMenuState
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
GrayStringW
DrawTextExW
TabbedTextOutW
SetFocus
ReleaseCapture
GetCapture
SetCapture
TrackMouseEvent
SetClassLongW
GetClassLongW
GetDlgCtrlID
CopyImage
DestroyCursor
CallNextHookEx
UnhookWindowsHookEx
GetWindowRect
GetDesktopWindow
GetClassNameW
GetWindow
IsWindowVisible
SetWindowsHookExW
DefWindowProcW
GetClassInfoW
MoveWindow
MapWindowPoints
DrawFrameControl
UnionRect
MessageBeep
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
EndDeferWindowPos
BeginDeferWindowPos
UpdateLayeredWindow
MonitorFromPoint
IsMenu
WaitMessage
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
GetWindowRgn
BringWindowToTop
ShowWindow
FindWindowW
SetWindowRgn
WindowFromPoint
DrawTextW
DrawIconEx
ClientToScreen
DrawFocusRect
DrawEdge
FrameRect
FillRect
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
GetUpdateRect
GetForegroundWindow
SendMessageW
GetParent
GetCaretPos
EnableWindow
PeekMessageW
TranslateMessage
DispatchMessageW
SetRectEmpty
GetSysColor
GetClientRect
GetSystemMetrics
SetScrollPos
GetDC
ReleaseDC
IsRectEmpty
SetScrollRange
OffsetRect
InflateRect
SetRect
PtInRect
InvalidateRect
GetCursorPos
ScreenToClient
SetCursor
LoadCursorW
SetTimer
KillTimer
EqualRect
GetWindowLongW
SetWindowLongW
SetLayeredWindowAttributes
RedrawWindow
LoadIconW
UpdateWindow
GetMenuItemCount
GetSystemMenu
EnableMenuItem
ModifyMenuW
GetSubMenu
GetMenuItemID
LoadBitmapW
InvalidateRgn
PostMessageW
IsWindow
GetFocus
GetIconInfo
CreateIconIndirect
DestroyIcon
LoadImageW
CopyRect
GetWindowDC
DrawStateW
GetKeyboardState

gdi32

CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
SetRectRgn
GetMapMode
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
CreateDIBSection
GetTextMetricsW
GetCharWidthW
StretchDIBits
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
Polyline
ExtSelectClipRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExW
GetWindowOrgEx
GetViewportOrgEx
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
MoveToEx
LineTo
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
CreateCompatibleDC
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
CreateDCW
CopyMetaFileW
GetDeviceCaps
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteDC
SetPixelV
Polygon
PtInRegion
RoundRect
CreatePen
FrameRgn
FillRgn
CombineRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateFontIndirectW
GetCurrentObject
GetBkColor
GetTextColor
CreateSolidBrush
DeleteObject
SetDIBits
GetDIBits
CreateFontW
GetObjectW
CreateRectRgn
GetTextExtentPoint32W
BitBlt
GetStockObject
SelectObject
CreateCompatibleBitmap
SetTextAlign

msimg32

AlphaBlend
TransparentBlt
GradientFill

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumKeyExW
RegCloseKey

shell32

SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW
DragFinish
DragQueryFileW
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
SHBrowseForFolderW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CoInitializeEx
CLSIDFromString
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CLSIDFromProgID
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
OleUninitialize

oleaut32

VariantCopy
SysFreeString
SafeArrayDestroy
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocString
OleLoadPicture
VariantTimeToSystemTime

oledlg

OleUIBusyW

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdiplusShutdown
GdiplusStartup
GdipDeleteRegion
GdipCreateRegionHrgn
GdipFillRegion
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetLinePresetBlend
GdipCreateLineBrushFromRect
GdipCloneBrush
GdipDeleteBrush
GdipAlloc
GdipFree
GdipDrawImageI

winmm

PlaySoundW

netapi32

NetApiBufferFree
NetGetJoinInformation

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a9ec904da71dbbf1c81f7ec6fcf2b6f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

winmm

netapi32

oleacc

imm32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 353KB - Virtual size: 353KB

.data Size: 29KB - Virtual size: 61KB

.rsrc Size: 270KB - Virtual size: 269KB

.reloc Size: 188KB - Virtual size: 187KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 353KB - Virtual size: 353KB

.data
Size: 29KB - Virtual size: 61KB

.rsrc
Size: 270KB - Virtual size: 269KB

.reloc
Size: 188KB - Virtual size: 187KB