2024-02-22_9f430d633da5e77a7308613fe9ed8098_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-22_9f430d633da5e77a7308613fe9ed8098_mafia
Size

899KB
MD5

9f430d633da5e77a7308613fe9ed8098
SHA1

16554d0d42e10485dc46e35df47372800720a24d
SHA256

82c44831c2182a63f61952236c34320630277e7bd5de24270e886b8c16558ced
SHA512

6d8afee73730feda5f686fdf092b1eff9ac1eb74c8f2e8acb72fda4677a68a3b528c37c8056f885ba5345b667383da8be08e7acbfc3dcfa1ed785542f68968f2
SSDEEP

24576:kwCzQf3f8Ttr1JbHQv7wZjeiN9Rgn2Kdt8FIrsoj:kwCzQfeBJbHEwZn982at8FIrsoj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-22_9f430d633da5e77a7308613fe9ed8098_mafia

Files

2024-02-22_9f430d633da5e77a7308613fe9ed8098_mafia
.exe windows:5 windows x86 arch:x86

fe88ec99a1d9ceb6fc4b26cbeb6e8eef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\u\arc\scite\bin\SciTE.pdb

Imports

kernel32

DeleteCriticalSection
GetCommandLineW
FreeResource
GetCPInfo
FindResourceW
LoadResource
GlobalLock
GlobalAlloc
WideCharToMultiByte
SizeofResource
FormatMessageW
GetExitCodeProcess
TerminateProcess
GetModuleFileNameW
MultiByteToWideChar
GlobalUnlock
GetTempPathW
GetStdHandle
PeekConsoleInputW
IsValidCodePage
GlobalFree
LockResource
LocalFree
FormatMessageA
LoadLibraryA
GetModuleFileNameA
GetProcessHeap
SetEndOfFile
SetStdHandle
WriteConsoleW
GetTickCount
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
FlushFileBuffers
CreateFileA
GetCurrentProcessId
GetFileAttributesA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetOEMCP
GetACP
GetFileInformationByHandle
SetFilePointer
EnterCriticalSection
GetConsoleCP
HeapCreate
GetFileType
SetHandleCount
InitializeCriticalSectionAndSpinCount
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DeleteFileA
MoveFileA
HeapReAlloc
RtlUnwind
CreateThread
ResumeThread
ExitThread
GetCurrentProcess
DuplicateHandle
CreateProcessA
DeleteFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
SetEnvironmentVariableW
FindFirstFileExW
GetDriveTypeW
HeapFree
ExitProcess
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
CreateMutexW
FreeLibrary
GetLastError
MulDiv
Beep
GetLocaleInfoW
LoadLibraryW
FileTimeToLocalFileTime
GetFileTime
CreateFileW
FileTimeToSystemTime
GetFileAttributesW
WriteFile
GetDateFormatA
SetEnvironmentVariableA
GetTimeFormatA
QueryPerformanceFrequency
IsDBCSLeadByteEx
QueryPerformanceCounter
Sleep
LCMapStringW
CloseHandle
FindNextFileW
CreatePipe
FindClose
GetProcAddress
CompareStringW
ReadFile
GetModuleHandleW
WaitForSingleObject
SetHandleInformation
CreateProcessW
PeekNamedPipe
FindFirstFileW
GetConsoleMode
GetFullPathNameW

user32

TranslateMessage
LoadAcceleratorsW
LoadIconW
GetWindowPlacement
PeekMessageW
EmptyClipboard
OpenClipboard
RegisterClipboardFormatW
UpdateWindow
SetClipboardData
WinHelpW
DispatchMessageW
GetThreadDesktop
SetForegroundWindow
FindWindowW
SendMessageTimeoutW
FlashWindow
GetUserObjectInformationW
GetNextDlgTabItem
PostMessageW
PostQuitMessage
EndPaint
IsChild
LoadImageW
DrawTextW
TrackMouseEvent
BeginPaint
DrawFocusRect
AppendMenuW
GetWindowTextW
GetClassNameW
GetSysColor
GetMessageW
DestroyAcceleratorTable
VkKeyScanW
TranslateAcceleratorW
CloseClipboard
ClientToScreen
EnumWindows
SetWindowPlacement
DefWindowProcW
SendMessageW
RegisterClassW
CreateWindowExW
SetWindowLongW
RegisterWindowMessageW
DestroyWindow
GetSystemMetrics
GetDlgCtrlID
DrawFrameControl
GetWindowTextLengthW
GetDlgItemInt
FillRect
GetKeyState
DialogBoxParamW
SetDlgItemInt
IsDialogMessageW
GetWindowLongW
GetDlgItem
EndDialog
SendDlgItemMessageW
CheckDlgButton
IsDlgButtonChecked
CreateDialogParamW
MessageBoxW
GetDlgItemTextW
SetDlgItemTextW
EnableWindow
SetDlgItemTextA
SetCursor
SetTimer
ScreenToClient
SetCapture
KillTimer
GetSubMenu
DeleteMenu
GetParent
LoadCursorW
SetFocus
GetMenuItemInfoW
ModifyMenuW
GetClassInfoW
GetDC
GetMenu
GetWindowTextA
CheckMenuRadioItem
SystemParametersInfoW
ReleaseDC
EnableMenuItem
GetMenuState
GetCursorPos
DrawMenuBar
GetMenuItemCount
InsertMenuW
DeferWindowPos
ReleaseCapture
BeginDeferWindowPos
EndDeferWindowPos
SetMenuItemInfoW
CallWindowProcW
CheckMenuItem
GetWindow
GetWindowRect
TrackPopupMenu
GetFocus
GetClientRect
InvalidateRect
SetWindowPos
ShowWindow
CreatePopupMenu
DestroyMenu
SetWindowTextW
IsIconic

gdi32

DPtoLP
SetBkColor
GetDeviceCaps
CreateFontA
DeleteDC
SetTextColor
StartPage
ExtTextOutW
GetTextMetricsW
EndPage
MoveToEx
CreateCompatibleDC
GetDIBits
TranslateCharsetInfo
StartDocW
SetTextAlign
EndDoc
GetStockObject
CreateFontIndirectW
Polygon
SelectObject
DeleteObject
GetNearestColor
LineTo
CreateSolidBrush
CreatePen

msimg32

TransparentBlt

comdlg32

PrintDlgW
GetSaveFileNameW
GetOpenFileNameW
PageSetupDlgW
CommDlgExtendedError

comctl32

InitCommonControlsEx

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

shell32

Shell_NotifyIconW
DragQueryFileW
SHGetMalloc
SHBrowseForFolderW
DragAcceptFiles
SHGetPathFromIDListW
ShellExecuteExW
DragFinish

uxtheme

DrawThemeParentBackground
DrawThemeBackground
GetThemePartSize
OpenThemeData
GetThemeBackgroundContentRect
CloseThemeData

Exports

Exports

luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_error
luaL_findtable
luaL_getmetafield
luaL_gsub
luaL_loadbuffer
luaL_loadfile
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlib
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffer
luaL_pushresult
luaL_ref
luaL_register
luaL_typerror
luaL_unref
luaL_where
lua_atpanic
lua_call
lua_checkstack
lua_close
lua_concat
lua_cpcall
lua_createtable
lua_dump
lua_equal
lua_error
lua_gc
lua_getallocf
lua_getfenv
lua_getfield
lua_gethook
lua_gethookcount
lua_gethookmask
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_insert
lua_iscfunction
lua_isnumber
lua_isstring
lua_isuserdata
lua_lessthan
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_objlen
lua_pcall
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawset
lua_rawseti
lua_remove
lua_replace
lua_resume
lua_setallocf
lua_setfenv
lua_setfield
lua_sethook
lua_setlevel
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_status
lua_toboolean
lua_tocfunction
lua_tointeger
lua_tolstring
lua_tonumber
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_xmove
lua_yield
luaopen_base
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table

Sections

.text
Size: 549KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe88ec99a1d9ceb6fc4b26cbeb6e8eef

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

comctl32

advapi32

shell32

uxtheme

Exports

Exports

Sections

.text Size: 549KB - Virtual size: 548KB

.rdata Size: 205KB - Virtual size: 204KB

.data Size: 40KB - Virtual size: 48KB

.rsrc Size: 66KB - Virtual size: 66KB

.reloc Size: 37KB - Virtual size: 36KB

.text
Size: 549KB - Virtual size: 548KB

.rdata
Size: 205KB - Virtual size: 204KB

.data
Size: 40KB - Virtual size: 48KB

.rsrc
Size: 66KB - Virtual size: 66KB

.reloc
Size: 37KB - Virtual size: 36KB