2024-01-18_537f08b523ee50c68a72f9ec0e6a8949_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-18_537f08b523ee50c68a72f9ec0e6a8949_mafia
Size

1.0MB
MD5

537f08b523ee50c68a72f9ec0e6a8949
SHA1

c62d0c138e65314074122fbc33efd0a6510fe910
SHA256

fe8e2cbd79bc2b1b0b6bbbc9b502b29525c7036d04a5c57c4f310e9bf83c703d
SHA512

41948b02210f37a1a1f559b007cb87e0a9a41adf0a74dc38604cc8b8d175baaa04d26c56ae75a5839fdd0c5d5945418fd22ba72365f15776586d9b05050ad9f9
SSDEEP

24576:RdXLR+mtGnNDGa1sZsavDdVUxhvsR8r1B:Z+m8NDT1sZHVWqR8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-18_537f08b523ee50c68a72f9ec0e6a8949_mafia

Files

2024-01-18_537f08b523ee50c68a72f9ec0e6a8949_mafia
.exe windows:5 windows x86 arch:x86

f93cf677b08ea914151344743a8a86d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

GradientFill

shlwapi

PathIsDirectoryA

kernel32

GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
IsProcessorFeaturePresent
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetHandleCount
GetStdHandle
Sleep
GetModuleFileNameW
HeapCreate
TerminateProcess
LoadLibraryW
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
CloseHandle
CreateFileA
GetCurrentDirectoryW
ReadFile
SetStdHandle
LCMapStringW
RtlUnwind
GetDriveTypeW
SetFilePointer
WriteConsoleW
HeapSize
CompareStringW
SetEnvironmentVariableA
RaiseException
SetEndOfFile
GetProcessHeap
CreateFileW
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFullPathNameA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
HeapWalk
HeapValidate
HeapReAlloc
GetDateFormatA
GetTimeFormatA
GetFileAttributesA
GetTimeZoneInformation
DeleteFileA
FindFirstFileExA
GetDriveTypeA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetSystemTimeAsFileTime
GetStartupInfoW
HeapSetInformation
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
DecodePointer
ExitProcess
GetModuleHandleW
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetProcAddress
ExpandEnvironmentStringsA
GetThreadLocale
GetLocaleInfoA
LocalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GetLastError
GlobalFree
GetPrivateProfileStringA
CreateDirectoryA
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringA
GetSystemDirectoryA

user32

CreatePopupMenu
InsertMenuA
RemoveMenu
GetMenuState
CheckMenuItem
TrackPopupMenu
DrawMenuBar
SetMenu
CreateMenu
SetCapture
ReleaseCapture
GetFocus
InvalidateRgn
CallWindowProcA
SetWindowLongA
GetDlgItem
EndDialog
IsDialogMessageA
PeekMessageA
CreateDialogParamA
SetDlgItemTextA
CreateDialogIndirectParamA
LoadImageA
GetDialogBaseUnits
DrawFocusRect
SetScrollPos
SetScrollRange
GetWindowTextLengthA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
LoadBitmapA
DestroyMenu
GetSystemMetrics
LoadIconA
RegisterClassA
GetWindowLongA
GetUpdateRect
BeginPaint
EndPaint
PostQuitMessage
CheckMenuRadioItem
DefWindowProcA
IsIconic
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
SendMessageA
GetCursorPos
GetActiveWindow
GetWindowWord
ScreenToClient
GetAsyncKeyState
ClientToScreen
SetTimer
KillTimer
UpdateWindow
WinHelpA
DestroyWindow
MessageBeep
ShowWindow
LoadCursorA
SetCursor
GetMenu
GetMenuItemCount
EnableMenuItem
EnableWindow
IsWindowVisible
GetWindowPlacement
wsprintfA
InvalidateRect
GetWindowRect
GetClientRect
SetFocus
GetSystemMenu
DeleteMenu
CreateWindowExA
SetWindowWord
VkKeyScanA
AppendMenuA
AdjustWindowRect
SetWindowPos
GetDC
GetSysColor
FillRect
ReleaseDC
MessageBoxA
IsWindowEnabled
SetMenuItemBitmaps
SetWindowTextA

gdi32

SetROP2
CreatePen
Rectangle
GetTextMetricsA
RealizePalette
SelectPalette
CreateFontA
GetDeviceCaps
GetStockObject
StretchBlt
BitBlt
GetObjectA
PatBlt
CreateCompatibleBitmap
CreateCompatibleDC
ExtCreatePen
Arc
SetPixel
TextOutA
MoveToEx
SetBkMode
DeleteDC
Polygon
Ellipse
SelectClipRgn
CreateRectRgn
GetDIBits
StretchDIBits
Escape
StartDocA
SetAbortProc
StartPage
EndPage
EndDoc
SetPaletteEntries
ResizePalette
CreatePalette
GetSystemPaletteEntries
ExtTextOutA
LineTo
SelectObject
CreateSolidBrush
DeleteObject
SetTextColor
SetBkColor
CreateFontIndirectA
GetTextExtentPointA

shell32

SHGetSpecialFolderPathA

comdlg32

PrintDlgA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 717KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f93cf677b08ea914151344743a8a86d0

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

shlwapi

kernel32

user32

gdi32

shell32

comdlg32

advapi32

Sections

.text Size: 717KB - Virtual size: 716KB

.rdata Size: 149KB - Virtual size: 148KB

.data Size: 80KB - Virtual size: 170KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 76KB - Virtual size: 76KB

.text
Size: 717KB - Virtual size: 716KB

.rdata
Size: 149KB - Virtual size: 148KB

.data
Size: 80KB - Virtual size: 170KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 76KB - Virtual size: 76KB