2024-01-11_d4c84b7d1ddecd3ee63d96cbf97f8eba_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-01-11_d4c84b7d1ddecd3ee63d96cbf97f8eba_mafia
Size

163KB
MD5

d4c84b7d1ddecd3ee63d96cbf97f8eba
SHA1

d77609f7d99c2ec24bf588ddd68f6ec938118023
SHA256

f00732b465c6e717deb99e016ad29a4fe58c24807b69a53239d0abb8112bc5da
SHA512

3e3f347855ff756a1e696d4ca0c9f6e2a9168f789df01a293350bd0d66c34124d70e816b8445e8aaf95153b1ae32301014dc4f0440709f77658381685d279327
SSDEEP

3072:5z5PAJdZYJhdJQLqOTTh3y1Q2Y6kysW66JkFTOFl:51PmrYJOxi17yyn0Sv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-11_d4c84b7d1ddecd3ee63d96cbf97f8eba_mafia

Files

2024-01-11_d4c84b7d1ddecd3ee63d96cbf97f8eba_mafia
.exe windows:5 windows x86 arch:x86

1d5df322bafbac7fd4176de5097189c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
GetLastError
SetCurrentDirectoryA
GetModuleFileNameA
GetCurrentDirectoryA
CreateThread
GetExitCodeProcess
CreateProcessA
ReadFile
CloseHandle
DeleteCriticalSection
CreateEventW
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
Sleep
InitializeCriticalSection
SetEvent
GetComputerNameExA
WaitForSingleObject
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
GetFileAttributesA
GetCurrentThreadId
GetCommandLineA
HeapSetInformation
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
IsProcessorFeaturePresent
HeapCreate
GetProcAddress
GetModuleHandleW
ExitProcess
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetLocaleInfoW
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
LoadLibraryW
SetStdHandle
WriteConsoleW
CreateFileA
CreateFileW
CompareStringW
SetEnvironmentVariableA
SetEndOfFile

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d5df322bafbac7fd4176de5097189c5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 122KB - Virtual size: 122KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 122KB - Virtual size: 122KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 9KB - Virtual size: 9KB