2024-03-15_af46ff0cc07d4364df9482859e2e6ed3_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-15_af46ff0cc07d4364df9482859e2e6ed3_mafia
Size

1.5MB
MD5

af46ff0cc07d4364df9482859e2e6ed3
SHA1

ab9bb4c2562d92a85d6285dba0a72de28032aa2b
SHA256

c0d2d06a9389db0dfdc2f28195e6df081109ad2dc5cf24721b9248f5e7578ecb
SHA512

565322d693c6060c2645970c995de21447d34d20034f6d16417fcca404de354ed1d31af21e70f754880b33ffda9afa164d89979e0ef6ee3cf20d0f8f6b9a5d82
SSDEEP

24576:KI6Tpiq3yzbC5Hnw1MTZeEZXh2wvhNW3PFJ+VsJt8uNtF7:uoRHC5HnQhr+VsDj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-15_af46ff0cc07d4364df9482859e2e6ed3_mafia

Files

2024-03-15_af46ff0cc07d4364df9482859e2e6ed3_mafia
.exe windows:5 windows x86 arch:x86

a2ceff02ba51892b7f6b6e9124b1f4ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
VirtualQuery
IsBadReadPtr
SetUnhandledExceptionFilter
SetErrorMode
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
ResetEvent
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
LoadLibraryW
GetProcAddress
QueryPerformanceCounter
GetCommandLineA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
EncodePointer
DecodePointer
RtlUnwind
RaiseException
GetLastError
HeapFree
GetModuleHandleW
ExitProcess
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapAlloc
HeapReAlloc
GetCurrentProcessId
HeapSetInformation
LCMapStringW
GetCPInfo
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
IsProcessorFeaturePresent
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
HeapSize
GetTimeZoneInformation
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetStdHandle
CreateFileW
CompareStringW
SetEnvironmentVariableA
CreateFileA
SetEndOfFile
GetProcessHeap

Exports

Exports

hx_cffi

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2ceff02ba51892b7f6b6e9124b1f4ae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 278KB - Virtual size: 278KB

.data Size: 48KB - Virtual size: 61KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 120KB - Virtual size: 119KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 278KB - Virtual size: 278KB

.data
Size: 48KB - Virtual size: 61KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 120KB - Virtual size: 119KB