Static task
static1
Behavioral task
behavioral1
Sample
2024-02-02_f919e5bf05f9d58222c5f04491116660_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-02_f919e5bf05f9d58222c5f04491116660_mafia.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-02_f919e5bf05f9d58222c5f04491116660_mafia
-
Size
109KB
-
MD5
f919e5bf05f9d58222c5f04491116660
-
SHA1
efcbbfc9585fc2158bc4f69f797f78d9731a20b7
-
SHA256
cdee2883ba91d9a6e81564a974cdffccb14289a269063d4615d382f8989aa0ef
-
SHA512
ea348d915846d0a7fffc8176d24558404fdea274fef1c0acc163ec9bcdf9e0fea24bf4e71d5a4707fa6701e526af3049af6f2e8a72b40968905ba37c8aec0447
-
SSDEEP
1536:yLAntToRx4l2Uk7cTYtnJMpvarmv76h7ndwjHpU2jJldCD3REVokpqdM+m+:oAtTob4lhJvayjCGFfldCDBBkpqdo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-02_f919e5bf05f9d58222c5f04491116660_mafia
Files
-
2024-02-02_f919e5bf05f9d58222c5f04491116660_mafia.exe windows:5 windows x86 arch:x86
20bc5b54172b5a3b29c2e1749c3db498
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
RaiseException
RtlUnwind
GetProcAddress
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapAlloc
HeapCreate
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetLocaleInfoW
WriteFile
GetStdHandle
GetModuleFileNameW
GetFileAttributesA
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapReAlloc
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
WriteConsoleW
SetStdHandle
CompareStringW
SetEnvironmentVariableA
CreateFileW
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ