2024-03-13_79d3b2fb0d3bb89522bbd8149107f43d_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-13_79d3b2fb0d3bb89522bbd8149107f43d_mafia
Size

178KB
MD5

79d3b2fb0d3bb89522bbd8149107f43d
SHA1

c6aecb5742dd43b2d645e7e9c30d85994eea2099
SHA256

44b1992d304069319e4bbc79c23434bc3847e4994d5fd7de80557c6c25bc4c0f
SHA512

bc39278bd0f484449006c39b96cfa466b7befba141a5c1d6677a3b0b00d7927f0c98ae3535db02c063903036782be0e65a05096f212f7feccbc3806230919489
SSDEEP

3072:fLgFNDRiOCs8ev2r24FaA91cCaonpuKA6qdNo4Sdap++GPg70H7:fcFNDRiPs85rlaPYA5zXSdajq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-13_79d3b2fb0d3bb89522bbd8149107f43d_mafia

Files

2024-03-13_79d3b2fb0d3bb89522bbd8149107f43d_mafia
.exe windows:5 windows x86 arch:x86

9a12d85c010412d5df5f9faeb91119b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\media-api-build\release_6_3\build-20110702-070301\omneon\pcapps\bin\Win32\Release\ommq.pdb

Imports

ommedia

?getThisSwVersion@OmMediaQuery@@QBE?AUOmSwVersion@@XZ
??0OmMediaQueryEx@@QAE@W4MediaAPIVersion@@@Z
?setFile@OmMediaQuery@@QAE_NPBD_N@Z
?getMovieInfo@OmMediaQuery@@QBE_NAAUOmMediaInfo@@@Z
?getTrackInfo1@OmMediaQuery@@QBE_NIAAUOmMediaSummary1@@@Z
?getStartTimecode@OmMediaQuery@@QBE_NAAI000@Z
?getUmid@OmMediaQuery@@QBEPBDXZ
?getVideoAfd@OmMediaQuery@@QBEEI@Z
?getMediaId@OmMediaQuery@@QBEII@Z
?getPath@OmMediaQuery@@QBE_NIPADI@Z
?getSampleInfo@OmMediaQuery@@QBE_NIHAAUOmMediaSample@@@Z
?getProperties@OmMediaQuery@@QBEPBVOmMediaPropertyList@@XZ
?getPropertyCount@OmMediaPropertyList@@QBEIXZ
?get@OmMediaPropertyList@@QBEPBVOmMediaProperty@@I@Z
?getProperties@OmMediaQuery@@QBEPBVOmMediaPropertyList@@I@Z
?generateUmid@OmMediaQuery@@QAE_NXZ
?setDefaultIn@OmMediaQuery@@QAE_NI@Z
?setDefaultOut@OmMediaQuery@@QAE_NI@Z
?setFirstFrame@OmMediaQuery@@QAE_NI@Z
?setStartTimecode@OmMediaQuery@@QAE_NIIII@Z
?setVideoAfd@OmMediaQuery@@QAE_NEI@Z
?setProperty@OmMediaQuery@@QAE_NIABVOmMediaProperty@@@Z
?setProperty@OmMediaQuery@@QAE_NABVOmMediaProperty@@@Z
??1OmMediaQuery@@QAE@XZ
??1OmMediaQueryEx@@QAE@XZ
?set@OmMediaProperty@@QAEXPBD0@Z

kernel32

GetCurrentProcess
CreateFileW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
LCMapStringW
WriteConsoleW
CloseHandle
SetStdHandle
SetFilePointer
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
ReadFile
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
Sleep
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a12d85c010412d5df5f9faeb91119b2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ommedia

kernel32

Sections

.text Size: 142KB - Virtual size: 142KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 142KB - Virtual size: 142KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 6KB - Virtual size: 6KB