2024-04-10_8ecf8cd4ac3c3fa448e1954f7f2ea9a9_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-04-10_8ecf8cd4ac3c3fa448e1954f7f2ea9a9_mafia
Size

2.4MB
MD5

8ecf8cd4ac3c3fa448e1954f7f2ea9a9
SHA1

cdcf9b93c262934e14b70b80b6a1dedf6a58ed69
SHA256

792c51ad61ce35f04b4166de68fe52260c77dc0990340afccf8846514123db82
SHA512

a0d767b27673313934b6994c3df53cf38f459db60b1181fbd79170be5becd62ad1374fde7272bcd3eb391c64bbc2cac7336a6d5370d26bc9ae05440b28d931c6
SSDEEP

49152:LrCMp7Q1F6YjjUEKJ4nlB7ppRD5pabWVpLh8TNva4qtFCALWn:jp7SF6eNnVtpRrhCvlqfL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-10_8ecf8cd4ac3c3fa448e1954f7f2ea9a9_mafia

Files

2024-04-10_8ecf8cd4ac3c3fa448e1954f7f2ea9a9_mafia
.exe windows:5 windows x86 arch:x86

8f8ea16a5ecbc51165e71ad1f27aabfb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\nemoto\Documents\Visual Studio 2010\Projects\Aurorablast3\Release\Aurorablast3.pdb

Imports

kernel32

ExitProcess
lstrlenA
CreateThread
Sleep
SetEndOfFile
SetEnvironmentVariableA
CloseHandle
CreateEventA
GetCurrentThreadId
ResetEvent
WaitForSingleObject
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
SetFilePointer
DeleteFileA
ExitThread
ResumeThread
SetThreadPriority
lstrcpyW
SetEvent
lstrcpyA
lstrcatA
GetTempPathA
GlobalUnlock
GlobalLock
GlobalSize
GlobalFree
GlobalAlloc
lstrcmpA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetVersionExA
GetSystemInfo
GetOEMCP
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalMemoryStatus
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
GetLocalTime
DeleteFileW
GetCurrentDirectoryA
SetCurrentDirectoryA
HeapFree
GetProcessHeap
HeapAlloc
lstrlenW
SuspendThread
GetCurrentThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTempFileNameA
ReadFile
GetExitCodeThread
GetFileSize
FindFirstFileA
FindNextFileA
FindClose
HeapReAlloc
WaitForMultipleObjects
GetThreadPriority
GetTickCount
lstrcmpW
MulDiv
lstrcpynW
InterlockedIncrement
GetLastError
InterlockedDecrement
CreateSemaphoreA
ReleaseSemaphore
VirtualAlloc
VirtualFree
EncodePointer
DecodePointer
RtlUnwind
GetModuleHandleW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
LCMapStringW
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetModuleFileNameW
HeapSize
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetConsoleCP
GetConsoleMode
GetACP
IsValidCodePage
LoadLibraryW
GetLocaleInfoW
FlushFileBuffers
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
WriteConsoleW
SetStdHandle
CreateFileW
CompareStringW

user32

GetSystemMetrics
GetWindowRect
SetMenu
SetWindowTextA
LoadIconA
SystemParametersInfoA
UpdateWindow
ShowWindow
ClipCursor
GetClipboardData
CloseClipboard
IsClipboardFormatAvailable
OpenClipboard
SetClipboardData
EmptyClipboard
SetWindowRgn
SendMessageA
GetMenuItemInfoA
GetMenuItemCount
PostMessageA
ShowCursor
GetCursorPos
UnhookWindowsHookEx
ChangeDisplaySettingsA
SetWindowPos
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
SetActiveWindow
AdjustWindowRectEx
SetWindowLongA
ClientToScreen
DrawMenuBar
GetKeyboardState
MoveWindow
DefWindowProcA
SetCursor
DestroyWindow
EndPaint
FillRect
BeginPaint
CreateWindowExA
DestroyMenu
BringWindowToTop
RegisterClassExA
LoadCursorA
GetWindowLongA
FindWindowA
UnregisterClassA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
IsDialogMessageA
PeekMessageA
SetTimer
KillTimer
EnumDisplaySettingsA
PostThreadMessageA
GetQueueStatus
RegisterWindowMessageA
MsgWaitForMultipleObjects
GetClientRect
GetDC
ReleaseDC
GetDesktopWindow
LoadImageA
MessageBoxA
PostQuitMessage
DrawTextA
wsprintfA

gdi32

SelectObject
BitBlt
DeleteDC
CreateDIBSection
EnumFontFamiliesExA
GetTextMetricsA
GetGlyphOutlineA
StretchDIBits
SetDIBitsToDevice
CreateSolidBrush
GetStockObject
GetDeviceCaps
DeleteObject
SetBkMode
CreateFontA
SetTextColor
GetObjectA
CreateCompatibleDC

winmm

timeBeginPeriod
timeGetTime

shell32

DragQueryFileA
DragFinish
DragAcceptFiles

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 8.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f8ea16a5ecbc51165e71ad1f27aabfb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winmm

shell32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 245KB - Virtual size: 245KB

.data Size: 266KB - Virtual size: 8.8MB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 113KB - Virtual size: 112KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 245KB - Virtual size: 245KB

.data
Size: 266KB - Virtual size: 8.8MB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 113KB - Virtual size: 112KB