2024-02-21_9dd90fc7fb1b3ef74f535574eb10e6ef_dyre_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-21_9dd90fc7fb1b3ef74f535574eb10e6ef_dyre_mafia
Size

441KB
MD5

9dd90fc7fb1b3ef74f535574eb10e6ef
SHA1

cfb46d10d6d02c999a3b57459526f3f5525ed98d
SHA256

2c81b79d4e869c5dcffbf073f636850fbcaad3c159415330621e1ee6bac8a6fd
SHA512

4167b4a94ae722678bb6807536206ac2b93ba0571921a5eaeb3eba8d4e3bdc4549b9996145266931bb51bb9d0f435284abbb14c40f194bda7343465b824ab279
SSDEEP

12288:5++NasYJG1xuIj0Q0i2iHXolyGB0ip15Zaf9:E+uO4lhKA5ZK9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-21_9dd90fc7fb1b3ef74f535574eb10e6ef_dyre_mafia

Files

2024-02-21_9dd90fc7fb1b3ef74f535574eb10e6ef_dyre_mafia
.exe windows:5 windows x86 arch:x86

83e0a4361803761d7b0077cc8fe3bb7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\workdir\visualcpp\MailProject\outlook_git_clone\outlook-v2\MailClient\Release\MailClient.pdb

Imports

winhttp

WinHttpQueryDataAvailable
WinHttpSetTimeouts
WinHttpSetOption
WinHttpSendRequest
WinHttpReadData
WinHttpOpenRequest
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpWriteData

kernel32

GetTimeZoneInformation
IsBadStringPtrW
InterlockedDecrement
IsBadStringPtrA
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
CreateFileA
SetErrorMode
WriteFile
GetVersionExW
GetStdHandle
GetModuleFileNameA
WinExec
GetTempPathA
GetLocaleInfoW
ReadFile
CreateFileW
GetModuleHandleW
GetProcAddress
LoadLibraryW
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
LocalFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
FlushFileBuffers
GetConsoleMode
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
GetUserDefaultLCID
TlsGetValue
GetFileSize
GetConsoleCP
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
Sleep
DeleteCriticalSection
HeapFree
HeapAlloc
GetCPInfo
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
CompareStringW
LCMapStringW
GetTimeFormatA
GetDateFormatA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
ExitProcess
GetModuleFileNameW
HeapSize
TlsAlloc

advapi32

GetUserNameW
RegQueryValueExA
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA

ole32

CoInitialize
IIDFromString
CoCreateInstance

oleaut32

SysFreeString

mapi32

ord185
ord13
ord11
ord140
ord75
ord23
ord17
ord21
ord139

crypt32

CryptStringToBinaryW

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83e0a4361803761d7b0077cc8fe3bb7b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winhttp

kernel32

advapi32

ole32

oleaut32

mapi32

crypt32

Sections

.text Size: 311KB - Virtual size: 310KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 11KB - Virtual size: 20KB

.rsrc Size: 48KB - Virtual size: 48KB

.reloc Size: 21KB - Virtual size: 20KB

.text
Size: 311KB - Virtual size: 310KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 11KB - Virtual size: 20KB

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 21KB - Virtual size: 20KB