2024-03-26_504cf8c36e81da00e541499260495b4e_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-26_504cf8c36e81da00e541499260495b4e_mafia
Size

1.0MB
MD5

504cf8c36e81da00e541499260495b4e
SHA1

2b3a847b9d41649ee7abd35ab5cd6cb8a3ebb684
SHA256

5e2ddee4917bf4f65795b1a1dbdd53d3d2eec86598537bd6b7fda93097ce0429
SHA512

13cf6ca183053260aeea01890b855e6b74def77610076e8b0329fcefab236ebdb706022d58d57714f51560f146ee7705ce82406e086176dd8ff7fdaa14ba80d8
SSDEEP

24576:wg/n/7KXWMo1HYgxUBMfiWt9H+hQp67spWYH6DCuTy3U1DQ:w8mXWpgOp67s486XTp1D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-26_504cf8c36e81da00e541499260495b4e_mafia

Files

2024-03-26_504cf8c36e81da00e541499260495b4e_mafia
.exe windows:5 windows x86 arch:x86

00dd311b038f9ce384325e33881e3d76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

closesocket
recv
WSAStartup
socket
inet_addr
gethostbyname
htons
connect
setsockopt
send
ioctlsocket
WSAGetLastError
WSACleanup

kernel32

SetFilePointer
SetHandleCount
DeleteFileA
MoveFileA
CloseHandle
CreateFileA
FlushFileBuffers
UnlockFile
LockFile
WriteFile
ReadFile
_lopen
GetProfileStringA
GetProfileSectionA
SetCommTimeouts
SetCommState
GetCommState
PurgeComm
SetupComm
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameW
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
PeekNamedPipe
GetLastError
DeleteCriticalSection
GetFileType
GetStdHandle
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapCreate
IsProcessorFeaturePresent
CreateDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeW
FindNextFileA
SetCurrentDirectoryW
GetCurrentDirectoryW
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
DecodePointer
GetModuleHandleW
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoW
HeapSetInformation
HeapReAlloc
HeapAlloc
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
HeapFree
GetFileSize
OpenFile
GetTickCount
_lclose
GlobalReAlloc
LocalAlloc
LocalFree
GetTimeZoneInformation
LoadLibraryW
SetStdHandle
LCMapStringW
_llseek
_lread
GlobalFree
CreateProcessA
GetExitCodeProcess
GlobalAlloc
GetProcAddress
GetFileAttributesA
GlobalLock
GlobalUnlock
GetModuleHandleA
GetModuleFileNameA
Sleep
ExitProcess
GetCommandLineA
SetEndOfFile
GetProcessHeap
WriteConsoleW
GetStringTypeW
CompareStringW
SetEnvironmentVariableA
HeapSize
WaitForSingleObject
RaiseException
CreateFileW
GetCurrentDirectoryA
SetCurrentDirectoryA
DuplicateHandle
GetFileInformationByHandle
SetEnvironmentVariableW

user32

wvsprintfA
SetCursor
GetKeyState
GetKeyboardState
EnableWindow
KillTimer
ScreenToClient
SetTimer
SetKeyboardState
GetDlgItemInt
SetDlgItemInt
GetWindowLongA
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
MessageBeep
PeekMessageA
GetMessageA
TranslateMessage
IsDialogMessageA
TranslateAcceleratorA
DispatchMessageA
DrawTextA
ClientToScreen
GetClientRect
SetWindowTextA
SetWindowLongA
SendMessageA
SetCaretPos
FillRect
OemToCharA
IsIconic
GetSystemMetrics
wsprintfA
GetSysColor
PostMessageA
GetDC
ReleaseDC
InvalidateRect
GetClassInfoA
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
SetDlgItemTextA
GetDlgItem
GetDlgItemTextA
EndDialog
PostQuitMessage
GetWindowRect
SetFocus
SetForegroundWindow
DialogBoxParamA
DefWindowProcA
HideCaret
BeginPaint
EndPaint
ShowCaret
CreateCaret
DestroyCaret
LoadCursorA
LoadIconA
RegisterClassA
FindWindowA
MessageBoxA
CreateWindowExA
SetWindowPos
UpdateWindow
DestroyWindow
ShowWindow
CreateDialogParamA

gdi32

CreatePalette
CreateCompatibleDC
GetObjectA
BitBlt
SelectPalette
RealizePalette
SetBkMode
SetBkColor
SetTextColor
TextOutA
CreatePen
CreateHalftonePalette
LineTo
SelectObject
GetTextMetricsA
CreateFontA
EndPage
EndDoc
StartDocA
StartPage
GetDeviceCaps
SetStretchBltMode
DeleteDC
DeleteObject
GetStockObject
Rectangle
CreateDCA
CreateDIBitmap
GetDIBits
PatBlt
MoveToEx
CreateCompatibleBitmap
StretchDIBits

winspool.drv

OpenPrinterA
StartDocPrinterA
StartPagePrinter
WritePrinter
EndPagePrinter
EndDocPrinter
ClosePrinter

comdlg32

PrintDlgA
ChooseColorA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 751KB - Virtual size: 751KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00dd311b038f9ce384325e33881e3d76

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

Sections

.text Size: 751KB - Virtual size: 751KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 133KB - Virtual size: 1.3MB

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 65KB - Virtual size: 65KB

.text
Size: 751KB - Virtual size: 751KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 133KB - Virtual size: 1.3MB

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 65KB - Virtual size: 65KB