2024-02-28_1e08c1d17f91a6230efe1a696eef1bb8_mafia

General

Target
2024-02-28_1e08c1d17f91a6230efe1a696eef1bb8_mafia
Size 106KB
Sample240228-b7cmcagd72
SHA256 5b722692a1fe3d231b2d8d92e391478591f2b84a7351b85b583c604e72700e0b
MD5 1e08c1d17f91a6230efe1a696eef1bb8
SHA1 8d9519b7a4aaeb2c30bef399f4aa8dad8ec03fe1
SHA512 9aa98f81d50e2b22e15042c567890d10cb07feaf196c80964d901f196f5e1f7efb044ddb9ac81fe940274515fa9a662c65aa85b372ba282ca3a4dd9f78a63cd7
SSDEEP 1536:dTzOz4jTSWri/y+hFmZZ3MbjfCwybg796BjJSMrqXMG+HOtC:dTzDvSWGaocns6SyqXMTHaC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-28_1e08c1d17f91a6230efe1a696eef1bb8_mafia

File Explorer

2024-02-28_1e08c1d17f91a6230efe1a696eef1bb8_mafia

.exe 106KB

2024-02-28_1e08c1d17f91a6230efe1a696eef1bb8_mafia

IMPHASH 8a48cfc12fabae7f5006798339563a46
SHA256 5b722692a1fe3d231b2d8d92e391478591f2b84a7351b85b583c604e72700e0b
MD5 1e08c1d17f91a6230efe1a696eef1bb8
SHA1 8d9519b7a4aaeb2c30bef399f4aa8dad8ec03fe1
SHA512 9aa98f81d50e2b22e15042c567890d10cb07feaf196c80964d901f196f5e1f7efb044ddb9ac81fe940274515fa9a662c65aa85b372ba282ca3a4dd9f78a63cd7
SSDEEP 1536:dTzOz4jTSWri/y+hFmZZ3MbjfCwybg796BjJSMrqXMG+HOtC:dTzDvSWGaocns6SyqXMTHaC
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

27028

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

libeay32

ord501

kernel32

GetModuleFileNameA CreateFileW InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree GetCommandLineA HeapSetInformation HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress IsProcessorFeaturePresent HeapCreate SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer CloseHandle HeapSize GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc LoadLibraryW WriteConsoleW SetStdHandle

Sharing

General

Malware Config

Signatures

File Explorer

2024-02-28_1e08c1d17f91a6230efe1a696eef1bb8_mafia

libeay32

kernel32

generic