2024-04-06_fcf524cb38a526d5b67e7de96a4ae02f_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-06_fcf524cb38a526d5b67e7de96a4ae02f_mafia
Size

188KB
MD5

fcf524cb38a526d5b67e7de96a4ae02f
SHA1

296421a6be559a7ea343585c8ab7b734d5a0d7fa
SHA256

56f509d9258e5309c52d7b714082b37f9251ed868cdc11d35944bf2eff67703a
SHA512

d8f0559cedc6f694a494078b6de005da4310c6b4987f30fde0fb43817fbda4ec05202193c3bdd7b24c2e118f6250c0a945169169ff2ab196b4aca048133727f5
SSDEEP

3072:Aa0/3gZotz4XFYvRN9J1fnvN2X3/OuU0moSUIDtkcaK:o374uvRNzRN2/OuUp5xOcaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-06_fcf524cb38a526d5b67e7de96a4ae02f_mafia

Files

2024-04-06_fcf524cb38a526d5b67e7de96a4ae02f_mafia
.exe windows:5 windows x86 arch:x86

0d90c5031d3442c4ad41f040d56ee9fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
WideCharToMultiByte
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LoadLibraryA
GetProcAddress
SetCurrentDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
SetDllDirectoryA
FindClose
FindNextFileA
FindFirstFileA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
HeapReAlloc
GetCPInfo
HeapAlloc
LCMapStringW
IsProcessorFeaturePresent
HeapCreate
Sleep
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
WriteConsoleW
CreateFileA
CreateFileW
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
FreeLibrary
GetLastError
TlsAlloc
GetSystemFirmwareTable

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d90c5031d3442c4ad41f040d56ee9fc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 138KB - Virtual size: 138KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 7KB - Virtual size: 15KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 138KB - Virtual size: 138KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 7KB - Virtual size: 15KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 10KB