2024-02-14_f2b063a675a4f9298f0692bc07177ad5_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-14_f2b063a675a4f9298f0692bc07177ad5_mafia
Size

871KB
MD5

f2b063a675a4f9298f0692bc07177ad5
SHA1

21a10a95707c4956d745c4f2b9e8adbeb76c539e
SHA256

1efc8349d69be51b82d39b281d1c019867e1c2bcca9bf49ffeb46159d7e86a70
SHA512

8f9e11fb87792e13ac4612004f9db12b7b0521e90c9095a38b5e7d433dc0dc5e18e054728291ce37e0f0477aaadf575b76aa77a03ad9d2bdb8591c04c21a79fa
SSDEEP

24576:sM8etoZdMXRgZli8CY0HhqLhiDsSu9h2rgv10HS:NZtoZdMXRgZo1LWhiDcMrgqHS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-14_f2b063a675a4f9298f0692bc07177ad5_mafia

Files

2024-02-14_f2b063a675a4f9298f0692bc07177ad5_mafia
.exe windows:5 windows x86 arch:x86

ab2e5b1ca936f68cf988ac4db88418ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Nelson\Desktop\Code\0.4-spero\server\Release\vcmp-svr.pdb

Imports

ws2_32

WSACleanup
WSAStartup
WSAIoctl
recvfrom
inet_ntoa
htons
socket
bind
closesocket
getsockname
inet_addr
ioctlsocket
getsockopt
setsockopt
sendto
gethostname
gethostbyname
ntohs
htonl

kernel32

FindFirstFileExA
CompareStringW
CreateFileW
GetProcessHeap
SetEndOfFile
CreateFileA
FlushFileBuffers
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
InterlockedExchange
LoadLibraryW
FatalAppExitA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
CreateDirectoryA
GetFileAttributesA
MoveFileA
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
Sleep
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
SetThreadPriority
CreateEventA
SetEvent
WaitForSingleObjectEx
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
LocalFree
FormatMessageA
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
SetConsoleCtrlHandler
GetTickCount
HeapFree
RtlUnwind
RaiseException
HeapAlloc
DecodePointer
EncodePointer
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEnvironmentVariableA
GetTimeZoneInformation
HeapReAlloc
ExitThread
GetCurrentThreadId
CreateThread
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
LCMapStringW
HeapCreate
HeapDestroy
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
ReadFile
WriteFile
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
SetFilePointer
GetLocaleInfoW
HeapSize
GetConsoleCP
GetConsoleMode

Sections

.text
Size: 715KB - Virtual size: 714KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab2e5b1ca936f68cf988ac4db88418ad

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

Sections

.text Size: 715KB - Virtual size: 714KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 42KB - Virtual size: 123KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 27KB - Virtual size: 27KB

.text
Size: 715KB - Virtual size: 714KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 42KB - Virtual size: 123KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 27KB - Virtual size: 27KB