2025-02-02_898fb546254518a3ac6616ae95180dd3_floxif_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2025-02-02_898fb546254518a3ac6616ae95180dd3_floxif_mafia
Size

14.0MB
MD5

898fb546254518a3ac6616ae95180dd3
SHA1

7ae6b515986ec92fffda0fa5743b3f848db3cced
SHA256

af17edfb3281febbc8532d5dbb22a752a03a4c1f5e6f90d8c560fb3d88f6f8cc
SHA512

39c6802afa7ad8441b778b275a619f6be93e2ea966d2c59dfb72f3113e8b0a84116d409a5224cefba2dfc04caf015d9a061afe752ae4542f85c1a3846103821f
SSDEEP

393216:fbUiiOlfxzYA+VR5Y4yiOlfxEc/J3VvpJ2f623KbQ:fbUmwVRODEcXvpeKbQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-02_898fb546254518a3ac6616ae95180dd3_floxif_mafia

Files

2025-02-02_898fb546254518a3ac6616ae95180dd3_floxif_mafia
.exe windows:5 windows x86 arch:x86

7b32f7ca2c57eaa74f70e542c48cc9b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\bs\5220\Sources\out_Win32\Release\kkavremvr.pdb

Imports

rpcrt4

NdrServerCall2
NdrClientCall2
RpcBindingFree
RpcStringFreeW
RpcBindingSetAuthInfoW
RpcBindingFromStringBindingW
RpcStringBindingComposeW

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumValueW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
CreateServiceW
StartServiceW
ControlService
DeleteService
QueryServiceStatus
OpenThreadToken
SetThreadToken
SetFileSecurityW
RevertToSelf
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
InitializeAcl
AddAccessAllowedAce
GetLengthSid
SetSecurityDescriptorSacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW

kernel32

VirtualProtect
FindResourceExW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
EncodePointer
DecodePointer
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
ExitThread
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
HeapCreate
HeapDestroy
UnhandledExceptionFilter
GetUserDefaultLCID
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
GetFileSizeEx
InterlockedCompareExchange
GetProcessHeap
FileTimeToLocalFileTime
SetErrorMode
GetTempPathW
GetNumberFormatW
GetWindowsDirectoryW
GetFullPathNameW
SearchPathW
GetProfileIntW
IsDebuggerPresent
GetFileTime
GetVolumeInformationW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiW
GetCurrentDirectoryW
lstrcpyW
GetSystemDirectoryW
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
FileTimeToSystemTime
lstrlenA
GlobalGetAtomNameW
ReleaseActCtx
CreateActCtxW
ResumeThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
ConvertDefaultLocale
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
InitializeCriticalSectionAndSpinCount
ActivateActCtx
DeactivateActCtx
lstrcmpW
FreeResource
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrlenW
MulDiv
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetFileAttributesExW
ReadFile
InterlockedDecrement
CreateFileA
SetFilePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ExpandEnvironmentStringsW
GetLocalTime
GetTempFileNameW
GetExitCodeThread
WaitForSingleObject
SetUnhandledExceptionFilter
CreateThread
CreateProcessA
QueryPerformanceCounter
FormatMessageA
SetThreadLocale
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
LocalFree
LockResource
LoadResource
SizeofResource
FindResourceW
GetModuleHandleW
GetCurrentProcessId
DeleteFileW
CloseHandle
GetDiskFreeSpaceExW
DuplicateHandle
GetCurrentThreadId
FindNextFileW
WaitForMultipleObjects
CreateEventW
CreateFileMappingW
FindClose
GetProcAddress
CreateFileW
GetModuleFileNameW
TerminateProcess
GetFileAttributesW
LoadLibraryW
WriteFile
GetCurrentThread
OutputDebugStringW
CompareFileTime
GetCurrentProcess
CreateProcessW
FreeLibrary
UnmapViewOfFile
MapViewOfFile
FindFirstFileW
GetFileSize
Sleep
SetLastError
MultiByteToWideChar
WideCharToMultiByte
GetLastError

user32

UpdateLayeredWindow
UnionRect
MapVirtualKeyExW
IsCharLowerW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
DrawFrameControl
DrawEdge
DrawStateW
GetSystemMenu
SetClassLongW
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
DrawIconEx
GetNextDlgGroupItem
GetIconInfo
OffsetRect
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
UnregisterClassW
CharUpperW
DestroyIcon
SetRect
MessageBeep
KillTimer
DeleteMenu
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
IntersectRect
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
LoadMenuW
GetWindowThreadProcessId
MonitorFromPoint
SetCursor
GetMessageW
GetCursorPos
MapVirtualKeyW
GetKeyNameTextW
ReleaseDC
GetDC
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
MessageBoxW
EnableWindow
SetWindowTextW
SetDlgItemTextW
SendMessageW
GetWindowRgn
DestroyCursor
MapDialogRect
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
RegisterClipboardFormatW
GetUpdateRect
FrameRect
IsWindowVisible
ValidateRect
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetWindowRect
ScreenToClient
SetMenuDefaultItem
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
PostThreadMessageW
ShowOwnedPopups
IsMenu
LoadIconW
GetClientRect
PostMessageW
GetSystemMetrics
LoadImageW
IsIconic
DrawIcon
InvalidateRect
SetTimer
GetDlgItem
TranslateMessage
PostQuitMessage
DestroyWindow
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
EndDialog
GetNextDlgTabItem
GetParent
IsWindowEnabled
GetWindowLongW
IsWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
GetDesktopWindow
GetWindow
PtInRect
CopyRect
SetWindowPos
SetWindowLongW
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
IsClipboardFormatAvailable

gdi32

GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
CreateSolidBrush
CreateHatchBrush
GetTextExtentPoint32W
GetTextMetricsW
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
CombineRgn
DPtoLP
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
SetBkColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
PlayMetaFileRecord
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
GetStockObject
SelectPalette
CreateCompatibleDC
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
GetObjectW
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
PatBlt
SetTextColor
CreateDCW
CopyMetaFileW
GetDeviceCaps
DeleteMetaFile
GetTextColor
SetMetaFileBitsEx
CreateRectRgnIndirect
CreateBitmap

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

shell32

SHBrowseForFolderW
SHGetFileInfoW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
DragFinish
SHAppBarMessage
CommandLineToArgvW
DragQueryFileW

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

StrCmpNIW
StrCmpIW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW

ole32

DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoCreateGuid
OleDuplicateData
RevokeDragDrop
CoTaskMemAlloc
ReleaseStgMedium
CoLockObjectExternal
RegisterDragDrop
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance
OleGetClipboard
CoInitialize

oleaut32

SysAllocStringLen
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
VariantInit
SysAllocString
SysFreeString

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Exports

Exports

InitializeDumpWriter
WriteFullDump
WriteMiniDump
WriteTinyDump

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12.0MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b32f7ca2c57eaa74f70e542c48cc9b1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

advapi32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

shell32

comctl32

shlwapi

ole32

oleaut32

oleacc

gdiplus

imm32

winmm

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 299KB - Virtual size: 298KB

.data Size: 27KB - Virtual size: 61KB

.rsrc Size: 12.0MB - Virtual size: 12.0MB

.reloc Size: 203KB - Virtual size: 203KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 299KB - Virtual size: 298KB

.data
Size: 27KB - Virtual size: 61KB

.rsrc
Size: 12.0MB - Virtual size: 12.0MB

.reloc
Size: 203KB - Virtual size: 203KB