2024-02-28_97b2b8a0b74d284ebd93f53f79ff3c57_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-28_97b2b8a0b74d284ebd93f53f79ff3c57_mafia
Size

491KB
MD5

97b2b8a0b74d284ebd93f53f79ff3c57
SHA1

a203f1e181ce384d264cae56d26feb67b0ce33a7
SHA256

d97627607f57c5f7f26387f8ab4c9241f0136648e17daf104e3a632d7dff97de
SHA512

0bbffe9df34cdfbc60b5107e16f8f0a05a25ddfa3ed79216e525682213e55dd611297d586d30fc1c2bb9eee798b83a576ab0567e392f212e29371f8d9cb1959b
SSDEEP

12288:wBRJqJOrXe681X3adR26ikEI1csBcuoze37RPchWQxDtYqWovHKN+j42qjuzBn3O:fNmpA2zyk5UjDh0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-28_97b2b8a0b74d284ebd93f53f79ff3c57_mafia

Files

2024-02-28_97b2b8a0b74d284ebd93f53f79ff3c57_mafia
.exe windows:5 windows x86 arch:x86

5c4a32e44907e035154c177ae33a2e61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\David\Desktop\matricks-bam-0e7e2db\bam.pdb

Imports

kernel32

WaitForSingleObject
InitializeCriticalSection
Sleep
LeaveCriticalSection
FindFirstFileA
GetProcAddress
EnterCriticalSection
FindClose
LoadLibraryA
SetEnvironmentVariableA
FindNextFileA
DeleteCriticalSection
CloseHandle
CreateThread
FreeLibrary
FormatMessageA
GetLastError
GetModuleFileNameA
HeapFree
HeapAlloc
DeleteFileA
GetDriveTypeW
GetFullPathNameA
HeapReAlloc
GetSystemTimeAsFileTime
CreateProcessA
DuplicateHandle
GetCurrentProcess
DecodePointer
EncodePointer
SetConsoleCtrlHandler
CreateDirectoryA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
RtlUnwind
GetModuleHandleW
ExitProcess
MoveFileA
GetTimeFormatA
GetDateFormatA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoW
SetFilePointer
FatalAppExitA
FlushFileBuffers
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
GetFileAttributesA
CreatePipe
GetExitCodeProcess
SetStdHandle
CreateFileA
GetFileInformationByHandle
PeekNamedPipe
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
GetCurrentProcessId
IsProcessorFeaturePresent
RaiseException
GetTimeZoneInformation
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
LCMapStringW
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleW
SetEndOfFile
GetProcessHeap
HeapSize
CreateFileW

Exports

Exports

luaI_openlib
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_error
luaL_findtable
luaL_getmetafield
luaL_gsub
luaL_loadbuffer
luaL_loadfile
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffer
luaL_pushresult
luaL_ref
luaL_register
luaL_typerror
luaL_unref
luaL_where
lua_atpanic
lua_call
lua_checkstack
lua_close
lua_concat
lua_cpcall
lua_createtable
lua_dump
lua_equal
lua_error
lua_gc
lua_getallocf
lua_getfenv
lua_getfield
lua_gethook
lua_gethookcount
lua_gethookmask
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_insert
lua_iscfunction
lua_isnumber
lua_isstring
lua_isuserdata
lua_lessthan
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_objlen
lua_pcall
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawset
lua_rawseti
lua_remove
lua_replace
lua_resume
lua_setallocf
lua_setfenv
lua_setfield
lua_sethook
lua_setlevel
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_status
lua_toboolean
lua_tocfunction
lua_tointeger
lua_tolstring
lua_tonumber
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_xmove
lua_yield
luaopen_base
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table

Sections

.text
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c4a32e44907e035154c177ae33a2e61

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 351KB - Virtual size: 350KB

.rdata Size: 118KB - Virtual size: 118KB

.data Size: 6KB - Virtual size: 19KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 351KB - Virtual size: 350KB

.rdata
Size: 118KB - Virtual size: 118KB

.data
Size: 6KB - Virtual size: 19KB

.reloc
Size: 14KB - Virtual size: 13KB