2024-03-09_803a1be827fb34e9a112ad428e5cf7f1_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-09_803a1be827fb34e9a112ad428e5cf7f1_mafia
Size

2.0MB
MD5

803a1be827fb34e9a112ad428e5cf7f1
SHA1

0d26c5c9adae53feb5787afe3abc5f94fb4cd072
SHA256

7c5e596eff790fac6b5c313f81a9a9bad44711c7850f669812c67d1a3562467b
SHA512

c87e814baab1985fba9059d16f56a9a3ea2cff1b56a6c706c1137b4dc65c2c1c2898698b54b5a12359e4d8d1ac428fb6d20b1c720f62c878a073d420d94e263c
SSDEEP

49152:K0lDKUdwVM2F/R4w0e8zQQ2QVvIZfzJIGYd:K0U62HCfzQQ2oO/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-09_803a1be827fb34e9a112ad428e5cf7f1_mafia

Files

2024-03-09_803a1be827fb34e9a112ad428e5cf7f1_mafia
.exe windows:5 windows x86 arch:x86

3c7d8a1745b45a55099246d5da52f731

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContext

winmm

timeSetEvent
timeKillEvent
mciSendCommandA
mciGetErrorStringA
mmioOpenA
mmioDescend
mmioRead
mmioAscend
mmioClose
mciSendStringA
joyGetNumDevs
joyGetDevCapsA
joyGetPosEx
timeGetDevCaps
timeBeginPeriod
timeGetTime
mixerOpen
mixerSetControlDetails
mixerClose
timeEndPeriod

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

d3d9

Direct3DCreate9

kernel32

SetEvent
WaitForSingleObject
ResetEvent
CloseHandle
WaitForMultipleObjects
GetLastError
CreateThread
LocalFree
GetFileAttributesA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
InterlockedDecrement
InterlockedIncrement
Sleep
GetCurrentThreadId
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
VirtualLock
VirtualAlloc
CreateDirectoryA
MoveFileA
DeleteFileA
CopyFileA
VirtualFree
OutputDebugStringA
GetLocalTime
GetUserDefaultLCID
GetSystemDefaultLCID
CreateProcessA
GetComputerNameA
SetFileAttributesA
SetFileTime
GetFileTime
GetModuleFileNameA
SetThreadPriority
ResumeThread
CreateEventA
GetTempFileNameA
GetTempPathA
GetStartupInfoA
SetCurrentDirectoryA
CreateSemaphoreA
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
CreateFileW
LeaveCriticalSection
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
GetSystemInfo
IsProcessorFeaturePresent
MultiByteToWideChar
InterlockedExchange
InterlockedCompareExchange
GetFullPathNameA
lstrcmpiA
HeapAlloc
HeapFree
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapReAlloc
ExitProcess
GetModuleHandleW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
RaiseException
DecodePointer
EncodePointer
RtlUnwind
MulDiv
GetCurrentProcess
ReleaseSemaphore
GetTickCount
GetCurrentThread
GetThreadPriority
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetConsoleMode
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
WriteFile
ReadFile
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FindClose
CreateFileA
SetFilePointer
GlobalAlloc
GetFileSize
GlobalFree
GetOEMCP
IsValidCodePage
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
LCMapStringW
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
VirtualQuery
GetConsoleCP
UnmapViewOfFile

user32

RegisterClassExA
GetMenu
CreateWindowExA
UpdateWindow
PostMessageA
InvalidateRect
ValidateRect
GetWindowLongA
DefWindowProcA
LoadIconA
DestroyWindow
ShowWindow
PostQuitMessage
SetTimer
GetSubMenu
TrackPopupMenu
DestroyMenu
GetSystemMenu
RemoveMenu
GetForegroundWindow
IsIconic
GetQueueStatus
RegisterWindowMessageA
PostThreadMessageA
MsgWaitForMultipleObjects
KillTimer
GetUpdateRgn
ValidateRgn
LoadCursorFromFileA
wsprintfA
SetRectEmpty
ScreenToClient
LoadCursorA
SetCursor
GetAsyncKeyState
GetParent
UnhookWindowsHookEx
SetRect
ClientToScreen
MonitorFromWindow
GetMonitorInfoA
SetWindowLongA
SetMenu
LoadMenuA
DrawMenuBar
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
WaitMessage
IsDialogMessageA
SystemParametersInfoA
GetWindowRect
SetCursorPos
GetSystemMetrics
SetWindowPos
SendMessageA
GetClientRect
MessageBoxA
GetCursorPos
ShowCursor

gdi32

EnumFontFamiliesExA
DeleteDC
RemoveFontMemResourceEx
RemoveFontResourceExA
GetCurrentObject
CreateFontIndirectA
GetGlyphOutlineA
GetTextMetricsA
SetTextColor
TextOutA
SetBkMode
CreatePolygonRgn
PtInRegion
DeleteObject
AddFontMemResourceEx
CreateICA
GetTextExtentPoint32A
GetRegionData
GetRgnBox
CreateRectRgn
GetStockObject
SelectObject

advapi32

RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetSpecialFolderPathA

ole32

CoCreateInstance
CoInitialize
CoFreeUnusedLibraries
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize

oleaut32

SysStringLen
VariantInit
VariantClear

Exports

Exports

_GetClassObject@4

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3c7d8a1745b45a55099246d5da52f731

Headers

DLL Characteristics

File Characteristics

Imports

imm32

winmm

version

d3d9

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 260KB - Virtual size: 260KB

.data Size: 75KB - Virtual size: 102KB

.rsrc Size: 82KB - Virtual size: 82KB

.reloc Size: 62KB - Virtual size: 62KB

.text Size: 1KB - Virtual size: 1KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 260KB - Virtual size: 260KB

.data
Size: 75KB - Virtual size: 102KB

.rsrc
Size: 82KB - Virtual size: 82KB

.reloc
Size: 62KB - Virtual size: 62KB

.text
Size: 1KB - Virtual size: 1KB