Static task
static1
Behavioral task
behavioral1
Sample
2024-01-08_ff3d6f70ac310e10eb5a006d8e1c7cbf_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-08_ff3d6f70ac310e10eb5a006d8e1c7cbf_mafia.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-08_ff3d6f70ac310e10eb5a006d8e1c7cbf_mafia
-
Size
302KB
-
MD5
ff3d6f70ac310e10eb5a006d8e1c7cbf
-
SHA1
26d2153a8bd7b97148905ec543b953773043556c
-
SHA256
c80fce8e978a2f9243b9f8a8931a85ad17d1d243d4298957b4165999f14dd6d5
-
SHA512
078f2132a6f3ac5f7f9fd472a2c98e5f3d6e53bc8fafa442b33e3bcbca165313c469b11f8eeb28de63b7b1c3bc3ac27c941d7f2f30478d0748cc1f12f5855013
-
SSDEEP
6144:EO0aHyrNuvUPHf5m0hGXkyICrVPCng6KHIkaB:EwyrNuvUPHf5WXBIC5PCgXa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-08_ff3d6f70ac310e10eb5a006d8e1c7cbf_mafia
Files
-
2024-01-08_ff3d6f70ac310e10eb5a006d8e1c7cbf_mafia.exe windows:5 windows x86 arch:x86
d8071f25366946c226a24a91a950ee3b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
QueryPerformanceCounter
CompareStringW
BuildCommDCBA
GetCommTimeouts
ReadFile
SetCommTimeouts
SetCommState
GetCommState
CreateFileA
GetModuleHandleA
FlushFileBuffers
CloseHandle
CreateFileW
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetStartupInfoW
GetFileType
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetProcAddress
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
RaiseException
GetCPInfo
RtlUnwind
HeapAlloc
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
IsProcessorFeaturePresent
HeapCreate
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetLocaleInfoW
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetEnvironmentVariableA
opengl32
glVertex2f
glClear
glClearColor
glOrtho
glEnd
glGetBooleanv
glGetIntegerv
glPushClientAttrib
glBitmap
glPopClientAttrib
glPixelStorei
wglDeleteContext
wglGetProcAddress
glReadBuffer
glDrawBuffer
wglMakeCurrent
wglGetCurrentDC
wglGetCurrentContext
wglCreateContext
glLoadIdentity
glBegin
glMatrixMode
glViewport
glFrustum
glFlush
glColor3f
glRasterPos2f
winmm
timeBeginPeriod
timeGetTime
joyGetPosEx
timeEndPeriod
user32
DefWindowProcA
ReleaseDC
CreateWindowExA
GetWindowLongA
UnregisterClassA
SetWindowPos
ShowCursor
GetDC
GetWindowRect
DestroyWindow
LoadCursorA
GetDesktopWindow
LoadIconA
ReleaseCapture
DispatchMessageA
GetCursorPos
RedrawWindow
PeekMessageA
GetAsyncKeyState
GetKeyboardState
TranslateMessage
BeginPaint
SetFocus
GetKeyState
MsgWaitForMultipleObjects
ToAscii
SetCapture
PostQuitMessage
ScreenToClient
GetMessageA
EndPaint
ChangeDisplaySettingsExA
SetClassLongA
SetCursor
ShowWindow
GetClassInfoA
GetSystemMetrics
UpdateWindow
RegisterClassA
MoveWindow
SetWindowLongA
gdi32
GetDeviceCaps
CreateDCA
ChoosePixelFormat
SetPixelFormat
GetPixelFormat
DeleteDC
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ