2024-02-04_72bb0044459a4280ddb66a5531d19e37_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-04_72bb0044459a4280ddb66a5531d19e37_mafia
Size

1.2MB
MD5

72bb0044459a4280ddb66a5531d19e37
SHA1

a81f0d5c463a3b751a1a9e3d1231141288cb60a5
SHA256

c7a627e9935aeba5a9a4112d3e33f4e99f54130f4e22407323f339b740e69443
SHA512

763ad286be89a7adfab585d4865d0e408888808e2acec6ddc82feae484acc7d07fe4629d0edbb7fd09cf7a90964a405177013631bac7722f27aa59a4e5b168d4
SSDEEP

24576:znwZlxGV2p3eeC1giUvIZG3amZcY5bubbY2NIsRNVC:zn8lxGCeOi4SGXWYwb02NIsXk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-04_72bb0044459a4280ddb66a5531d19e37_mafia

Files

2024-02-04_72bb0044459a4280ddb66a5531d19e37_mafia
.exe windows:5 windows x86 arch:x86

62e9e04437074bd3f3ab3c045dffaa84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CryptGenRandom
CryptAcquireContextA

comdlg32

GetOpenFileNameA

kernel32

WideCharToMultiByte
GetFileAttributesA
GetModuleFileNameA
GetEnvironmentVariableW
MultiByteToWideChar
GetVersionExA
GetLocaleInfoA
GetSystemInfo
GetLastError
GetCurrentThreadId
CreateThread
WaitForSingleObject
Module32Next
Module32First
CreateToolhelp32Snapshot
GetTempPathA
VirtualAlloc
VirtualFree
OutputDebugStringA
CloseHandle
GetCurrentProcess
GetCurrentProcessId
CreateFileA
SwitchToFiber
VirtualProtect
GetThreadContext
GetCurrentThread
DeleteFiber
ConvertThreadToFiber
CreateFiber
GetFileAttributesExA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetDiskFreeSpaceExA
SetFileAttributesA
SetEndOfFile
SetFilePointer
SetErrorMode
DeleteFileA
CreateProcessA
SetDllDirectoryA
SetEvent
SetThreadPriority
CreateEventA
GetExitCodeThread
GetTickCount
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
ExitThread
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
QueryPerformanceCounter
QueryPerformanceFrequency
GetShortPathNameW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GlobalFree
GetCommandLineA
GetProcessHeap
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
PeekNamedPipe
GetFileInformationByHandle
GetCurrentDirectoryW
HeapSize
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapCreate
GetModuleFileNameW
WriteFile
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LCMapStringW
IsProcessorFeaturePresent
SetLastError
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
HeapReAlloc
MoveFileA
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
CreateDirectoryA
GetFullPathNameA
GetDriveTypeW
RaiseException
EncodePointer
CreateFileW
RtlUnwind
DecodePointer
ExitProcess
GetModuleHandleW
HeapFree
HeapAlloc
CopyFileA
MulDiv
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
ExpandEnvironmentStringsA
LoadLibraryA
GetProcAddress
FreeLibrary
FileTimeToSystemTime

user32

CloseClipboard
EmptyClipboard
DestroyWindow
CreateWindowExA
SetClipboardData
OpenClipboard
CountClipboardFormats
GetClipboardData
GetSystemMetrics
LoadImageA
SetWindowPos
ReleaseDC
DrawTextA
GetWindowInfo
EnumChildWindows
GetKeyboardLayout
KillTimer
SendMessageA
GetDC
GetDlgItem
SetWindowTextA
CloseWindow
AdjustWindowRect
GetWindowLongA
ShowWindow
SetFocus
FlashWindow
InvalidateRect
GetClientRect
EndDialog
EndPaint
FillRect
BeginPaint
DestroyMenu
TrackPopupMenu
AppendMenuA
CreateMenu
CreatePopupMenu
ScreenToClient
DialogBoxParamA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetMessageA
SetWindowsHookExA
PostThreadMessageA
GetForegroundWindow
DefWindowProcA
ValidateRect
GetWindowTextA
SetForegroundWindow
LoadIconA
GetSysColor
SetTimer
TrackMouseEvent
GetMessageExtraInfo
GetWindowTextW
SetWindowTextW
SetDlgItemTextW
GetParent
SetWindowLongA
MoveWindow
GetWindowRect
MapWindowPoints
ShowCursor
MapVirtualKeyA
GetWindowPlacement
SetPropA
PostMessageA
LoadCursorA
RegisterClassA
ClientToScreen

gdi32

DeleteObject
GetBitmapBits
CreateDIBSection
CreateCompatibleDC
SelectObject
GetDeviceCaps
SetBkColor
CreateFontA
DeleteDC

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

OleLoadPicture

winmm

waveInPrepareHeader
waveInStart
waveInGetErrorTextA
waveInOpen
waveInReset
waveInClose
waveInAddBuffer

ddraw

DirectDrawCreate

dsound

ord1

d3d9

Direct3DCreate9

ws2_32

bind
closesocket
connect
getsockname
getpeername
socket
htons
WSACleanup
WSAStartup
ioctlsocket
WSAAsyncSelect
recvfrom
inet_pton
getaddrinfo
freeaddrinfo
inet_ntop
inet_ntoa
gethostname
gethostbyname
gethostbyaddr
getsockopt
setsockopt
WSAGetLastError
sendto
send
recv
accept
listen
__WSAFDIsSet
select
inet_addr

libeay32

ord342
ord340
ord341

Exports

Exports

Main
s3eExtGet

Sections

.text
Size: 699KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62e9e04437074bd3f3ab3c045dffaa84

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comdlg32

kernel32

user32

gdi32

shell32

ole32

oleaut32

winmm

ddraw

dsound

d3d9

ws2_32

libeay32

Exports

Exports

Sections

.text Size: 699KB - Virtual size: 699KB

.rdata Size: 158KB - Virtual size: 157KB

.data Size: 11KB - Virtual size: 2.2MB

.rsrc Size: 273KB - Virtual size: 273KB

.reloc Size: 60KB - Virtual size: 59KB

.text
Size: 699KB - Virtual size: 699KB

.rdata
Size: 158KB - Virtual size: 157KB

.data
Size: 11KB - Virtual size: 2.2MB

.rsrc
Size: 273KB - Virtual size: 273KB

.reloc
Size: 60KB - Virtual size: 59KB