2024-03-28_54a5a9ea41d3c253bd679f5146b0d2b1_mafia

General

Target
2024-03-28_54a5a9ea41d3c253bd679f5146b0d2b1_mafia
Size 300KB
Sample240328-c46axsdc7w
SHA256 50573540aa3007d66973df4931d071725048170c97382acea40933d197d853eb
MD5 54a5a9ea41d3c253bd679f5146b0d2b1
SHA1 3601bbdab82976e4128c810fe7a3b3e1d28fe279
SHA512 b013f7348ff573d790f3776df0e3960ccd14a1a53fa48b8c9c6ceb0be0e2a9d5dd1de4392abde42316ee38c8cdddd2b86d0852e4712dbfd01d886bc21c47c0e7
SSDEEP 6144:vvEANMO1UnseVgkV0xwvfxnhLTiusLe1740B:kuM0Unsna5mut40B
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-28_54a5a9ea41d3c253bd679f5146b0d2b1_mafia

File Explorer

2024-03-28_54a5a9ea41d3c253bd679f5146b0d2b1_mafia

.exe 300KB

2024-03-28_54a5a9ea41d3c253bd679f5146b0d2b1_mafia

IMPHASH c1a7cd492f8081347598067bc439debf
SHA256 50573540aa3007d66973df4931d071725048170c97382acea40933d197d853eb
MD5 54a5a9ea41d3c253bd679f5146b0d2b1
SHA1 3601bbdab82976e4128c810fe7a3b3e1d28fe279
SHA512 b013f7348ff573d790f3776df0e3960ccd14a1a53fa48b8c9c6ceb0be0e2a9d5dd1de4392abde42316ee38c8cdddd2b86d0852e4712dbfd01d886bc21c47c0e7
SSDEEP 6144:vvEANMO1UnseVgkV0xwvfxnhLTiusLe1740B:kuM0Unsna5mut40B
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

24237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddConsoleAliasW LoadLibraryW GetTapePosition GetLastError VirtualAlloc FindFirstVolumeMountPointW lstrlenA CreateFileW WriteConsoleW SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer CloseHandle PulseEvent HeapReAlloc IsValidLocale WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA FlushFileBuffers

user32

RemoveMenu SetMenuInfo PostMessageW CreateCursor GetWindowTextLengthA DrawEdge SetWindowsHookW

advapi32

ReportEventW

ole32

CoReleaseMarshalData CreateStreamOnHGlobal

Sharing

General

Malware Config

Signatures

File Explorer

2024-03-28_54a5a9ea41d3c253bd679f5146b0d2b1_mafia

kernel32

user32

advapi32

ole32

generic