2024-01-08_5b2598b9390dbac5925a042e094e7415_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-01-08_5b2598b9390dbac5925a042e094e7415_mafia
Size

2.2MB
MD5

5b2598b9390dbac5925a042e094e7415
SHA1

2129f69bad418e0913d1a1f63cf8f2c51a50b30b
SHA256

8ee6f3f1a498b29fa4202f98714243898f0331bd772937a1bd17065d5226e64c
SHA512

80bc4045bf7406c28e8dbfee810ffeec13e246a9ef7e5b53a99915b912fa96c1dcedd5328e61449915c0f428a41810b325b3b381be1385b09f75232d65f0c10a
SSDEEP

49152:Md9LHQeeN9kZ4JSWBtldpxLmq8CdY2noVGDdq:MjrreN9kZ4Jx1dXCq8CdYh8D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-08_5b2598b9390dbac5925a042e094e7415_mafia

Files

2024-01-08_5b2598b9390dbac5925a042e094e7415_mafia
.exe windows:5 windows x86 arch:x86

77cf663ca909267f5395cd53b7054ccb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CloseHandle
CreateFileA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
OpenMutexW
CreateMutexW
SetUnhandledExceptionFilter
SystemTimeToFileTime
FileTimeToSystemTime
SetEndOfFile
WriteConsoleW
CreateFileW
FlushFileBuffers
SetStdHandle
GetStringTypeW
IsValidLocale
LeaveCriticalSection
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoW
GetModuleFileNameW
DeleteCriticalSection
WriteFile
HeapCreate
ExitProcess
HeapSize
EnumSystemLocalesA
EnterCriticalSection
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
ReadFile
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
CompareStringW
GetCPInfo
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
HeapAlloc
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineW
CreateThread
GetProcessHeap
ExitThread
HeapReAlloc
InitializeCriticalSection
GetTickCount
GetLocalTime
GetStdHandle
Sleep
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EncodePointer
DecodePointer
FreeLibrary
GetLastError
GetProcAddress
LoadLibraryW
HeapFree

user32

OffsetRect
SetCursorPos
GetCursorPos
LoadStringW
PeekMessageW
TranslateMessage
GetAsyncKeyState
ShowCursor
DispatchMessageW
LoadIconW
LoadCursorW
RegisterClassExW
MessageBoxA
ClientToScreen
CreateWindowExW
ShowWindow
UpdateWindow
PostQuitMessage
DefWindowProcW
SetWindowTextW
SetWindowPos
wsprintfW
GetKeyState
FlashWindow
GetClientRect
GetSystemMetrics

shell32

ShellExecuteW

iphlpapi

GetAdaptersInfo

ws2_32

socket
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAResetEvent
recv
inet_ntoa
send
WSAGetLastError
WSASetEvent
shutdown
closesocket
WSAStartup
WSACreateEvent
gethostbyname
inet_addr
htons
connect

dbghelp

MiniDumpWriteDump

d3d9

Direct3DCreate9

d3dx9_42

D3DXCreateSprite
D3DXCreateLine
D3DXCreateTextureFromFileExW
D3DXMatrixAffineTransformation2D
D3DXCompileShader
D3DXCreateTextureFromFileInMemoryEx

bass

BASS_ChannelStop
BASS_ChannelPlay
BASS_ChannelSetAttribute
BASS_StreamCreateFile
BASS_Init
BASS_GetVersion
BASS_StreamFree

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 973KB - Virtual size: 972KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77cf663ca909267f5395cd53b7054ccb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

iphlpapi

ws2_32

dbghelp

d3d9

d3dx9_42

bass

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 973KB - Virtual size: 972KB

.data Size: 11KB - Virtual size: 3.0MB

.rsrc Size: 87KB - Virtual size: 86KB

.reloc Size: 143KB - Virtual size: 142KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 973KB - Virtual size: 972KB

.data
Size: 11KB - Virtual size: 3.0MB

.rsrc
Size: 87KB - Virtual size: 86KB

.reloc
Size: 143KB - Virtual size: 142KB