2024-01-01_bac6e9182e08e02ff6d1323904184e7d_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-01_bac6e9182e08e02ff6d1323904184e7d_mafia
Size

1.1MB
MD5

bac6e9182e08e02ff6d1323904184e7d
SHA1

070844f8f2296166bf4679fc6ef6dfd4fe8d7264
SHA256

ae0b8d25a217efd05768253e28529cedf458183f0d25acf563ff927258247652
SHA512

aad3dfc75d61c9c214b75b81b86012aeeeb8fee2e78e63734ac859d25d9e71dbae28e903016741cf289d16e1bbd376add40826f066bd093339ac6a43e4049b33
SSDEEP

24576:EN5Zs6MKOp0WO4/LFnkIyB8EkXKRaXitcoT+0d4q4e:K5Zs6MPOsLFLKRaXio0d4q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-01_bac6e9182e08e02ff6d1323904184e7d_mafia

Files

2024-01-01_bac6e9182e08e02ff6d1323904184e7d_mafia
.exe windows:5 windows x86 arch:x86

74c9602cc864fbd21aa83356a4c9c94e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateDirectoryW
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetCurrentDirectoryW
FindClose
GetModuleFileNameA
FindNextFileA
GetModuleHandleA
GetCurrentDirectoryA
CloseHandle
GetModuleHandleW
FindFirstFileW
SetCurrentDirectoryW
FindNextFileW
SetFilePointer
OutputDebugStringA
ReadFile
GetProcessHeap
SetEndOfFile
WriteConsoleW
SetStdHandle
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
WaitForSingleObject
GetExitCodeProcess
CreatePipe
GetFileAttributesA
LCMapStringW
LoadLibraryW
CompareStringW
MultiByteToWideChar
GetTimeZoneInformation
SetEnvironmentVariableA
WriteFile
GetFileSize
OpenMutexA
CreateMutexA
ReleaseMutex
Sleep
GetCurrentProcessId
CreateFileW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateEventA
FreeLibrary
FormatMessageA
GetLastError
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
ExitProcess
CreateProcessA
DuplicateHandle
GetCurrentProcess
MoveFileA
DeleteFileA
GetTimeFormatA
GetDateFormatA
InterlockedDecrement
InterlockedIncrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapCreate
GetStdHandle
GetModuleFileNameW
RaiseException
HeapSize
GetLocaleInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
IsProcessorFeaturePresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount

user32

GetDesktopWindow
MessageBoxW
GetClassInfoExW
GetForegroundWindow
GetActiveWindow
MessageBoxA
LoadCursorA
TranslateMessage
ShowCursor
PeekMessageA
DispatchMessageA
SetFocus
LoadIconW
SetClassLongW
SetWindowTextW
PostQuitMessage
PostMessageA
ReleaseCapture
GetCursorPos
SetCursorPos
SetCapture
ScreenToClient
ClientToScreen
GetKeyState
MsgWaitForMultipleObjects
DestroyCursor
SetCursor
GetSystemMetrics
SystemParametersInfoA
MoveWindow
SendMessageW
CreateWindowExW
ShowWindow
SetWindowLongW
GetClientRect
GetWindowRect
DestroyWindow
DefWindowProcW
DefWindowProcA
GetWindowLongA
RegisterClassExW

shell32

SHGetFolderPathW
SHGetFolderPathA

ole32

CoInitialize
CoUninitialize

winmm

timeBeginPeriod
timeGetTime
timeEndPeriod

dsound

ord1

Sections

.text
Size: 782KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74c9602cc864fbd21aa83356a4c9c94e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

winmm

dsound

Sections

.text Size: 782KB - Virtual size: 782KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 75KB - Virtual size: 342KB

.rsrc Size: 87KB - Virtual size: 86KB

.reloc Size: 38KB - Virtual size: 38KB

.text
Size: 782KB - Virtual size: 782KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 75KB - Virtual size: 342KB

.rsrc
Size: 87KB - Virtual size: 86KB

.reloc
Size: 38KB - Virtual size: 38KB