2024-03-28_38f0f96acba832f973a6d1c42d01cac5_mafia

General

Target
2024-03-28_38f0f96acba832f973a6d1c42d01cac5_mafia
Size 351KB
Sample240328-d56hrabd96
SHA256 813a8c112f716246d6f7184e0aa27f40418837db086937a367f62b79a28847ef
MD5 38f0f96acba832f973a6d1c42d01cac5
SHA1 2abe9940de2156f4b4f472290b1e9579db89c340
SHA512 c2a288b335c71d6935fc0293df6de7ce5c30fa8bbd80e6539bf75df9eff0459fe6841c71b332163bcdc41b34a7731ddae131a1039ab5c412555deda98e582e30
SSDEEP 3072:HpNMs+Kr1wbWGjl0xjsNNeVKBNVBxKT46xl+wndfIQQOaC3QBn7/hsb2BhGZ1/Nb:HpNMsLWEjsXjBATRpuuwnGD/Nj6a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-28_38f0f96acba832f973a6d1c42d01cac5_mafia

File Explorer

2024-03-28_38f0f96acba832f973a6d1c42d01cac5_mafia

.exe 351KB

2024-03-28_38f0f96acba832f973a6d1c42d01cac5_mafia

IMPHASH 5cf8f8970573dd7550aeb1b7e1c9767c
SHA256 813a8c112f716246d6f7184e0aa27f40418837db086937a367f62b79a28847ef
MD5 38f0f96acba832f973a6d1c42d01cac5
SHA1 2abe9940de2156f4b4f472290b1e9579db89c340
SHA512 c2a288b335c71d6935fc0293df6de7ce5c30fa8bbd80e6539bf75df9eff0459fe6841c71b332163bcdc41b34a7731ddae131a1039ab5c412555deda98e582e30
SSDEEP 3072:HpNMs+Kr1wbWGjl0xjsNNeVKBNVBxKT46xl+wndfIQQOaC3QBn7/hsb2BhGZ1/Nb:HpNMsLWEjsXjBATRpuuwnGD/Nj6a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

24118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GlobalAlloc GetSystemTimeAdjustment GetLastError GetCurrentDirectoryW GetProcAddress LoadLibraryA FindAtomA GetProcessShutdownParameters VirtualProtect GetFileInformationByHandle GetSystemTime HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP HeapSize GetLocaleInfoW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount LoadLibraryW

user32

GetDlgCtrlID GetNextDlgGroupItem SendDlgItemMessageA BeginPaint GetMonitorInfoA GetUpdateRect LoadIconW GetAltTabInfoW

shell32

DragFinish ShellAboutW ShellExecuteA DragQueryFileA ExtractIconW

winhttp

WinHttpConnect

Sharing

General

Malware Config

Signatures

File Explorer

2024-03-28_38f0f96acba832f973a6d1c42d01cac5_mafia

kernel32

user32

shell32

winhttp

generic