2024-03-09_69472173bbfdec1bb4131bdfa924a928_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-09_69472173bbfdec1bb4131bdfa924a928_mafia
Size

143KB
MD5

69472173bbfdec1bb4131bdfa924a928
SHA1

eb80535ede57095e5394bc84882ec4bb06b94a65
SHA256

401d103045f491ad1f3d2d71633259ba95c6b81c3284b7b68463e6a50c2f519a
SHA512

d64010eb9a25aa3011dd90ee3895a40e9dedb2196b2c635515891132b8d049d73957dca91b833e344de0a4f22c265842dcfe6a27f2c457fb6cc0b1441e2cdec4
SSDEEP

3072:kxOOgZel/St/OqUX/QTv+9BE6v9NWUTTri6iO:cOOKel/St/VJv6OQBt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-09_69472173bbfdec1bb4131bdfa924a928_mafia

Files

2024-03-09_69472173bbfdec1bb4131bdfa924a928_mafia
.exe windows:5 windows x86 arch:x86

2d3fd66f6f2dcf8e85729bc6e2ea6ff5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\FactoryPrograms\wintest\GetSpcMac\Release\GetSpcMac.pdb

Imports

kernel32

GetStdHandle
SetConsoleTextAttribute
GetConsoleWindow
WideCharToMultiByte
SetEnvironmentVariableA
CompareStringW
SetStdHandle
GetModuleHandleW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
RtlUnwind
LCMapStringW
GetCPInfo
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameW
GetFileAttributesA
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
LoadLibraryW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
WriteConsoleW
CreateFileW

user32

SendMessageW
LoadIconW

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d3fd66f6f2dcf8e85729bc6e2ea6ff5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

iphlpapi

Sections

.text Size: 82KB - Virtual size: 81KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 26KB - Virtual size: 25KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 82KB - Virtual size: 81KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 8KB - Virtual size: 7KB