2024-04-18_87ae813be3136cb20638d7dae4c5bd6d_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-18_87ae813be3136cb20638d7dae4c5bd6d_mafia
Size

990KB
MD5

87ae813be3136cb20638d7dae4c5bd6d
SHA1

6ed19d34c282294cdcc4557a5ea0716b09bd24dd
SHA256

2a17d043ccd828ff61bddc3ba96b03f3e4df473d755f3b69157827892b207260
SHA512

a7f13b2af0e944783d174d9b58b6d8f9199bd83234c15b6431cd6e2fb7d07446aa64036061ba183273ae788be5a38eea7299e638e334d668586f0a6c35a6b381
SSDEEP

12288:EeXKV+apZY9nD6jj+DrHCtpwCnqOUBwNUzlNze4Nyg5uS0jUqgCFduTkEjAJ1u2h:EeXxE8nO+7fc5WAJpH8vChVpM2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-18_87ae813be3136cb20638d7dae4c5bd6d_mafia

Files

2024-04-18_87ae813be3136cb20638d7dae4c5bd6d_mafia
.exe windows:5 windows x86 arch:x86

ff74d2256493eacce83201bc290cdae0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CryptGenRandom
CryptAcquireContextA

comdlg32

GetOpenFileNameA

kernel32

GetModuleFileNameA
GetEnvironmentVariableW
MultiByteToWideChar
GetVersionExA
GetLocaleInfoA
GetSystemInfo
GetLastError
GetCurrentThreadId
CreateThread
WaitForSingleObject
Module32Next
Module32First
CreateToolhelp32Snapshot
GetTempPathA
VirtualAlloc
VirtualFree
OutputDebugStringA
CloseHandle
GetCurrentProcess
GetCurrentProcessId
CreateFileA
SwitchToFiber
VirtualProtect
GetThreadContext
GetCurrentThread
DeleteFiber
ConvertThreadToFiber
CreateFiber
GetFileAttributesExA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetDiskFreeSpaceExA
SetFileAttributesA
SetEndOfFile
SetFilePointer
SetErrorMode
DeleteFileA
CreateProcessA
SetDllDirectoryA
SetEvent
SetThreadPriority
CreateEventA
GetExitCodeThread
GetTickCount
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
ExitThread
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
QueryPerformanceCounter
QueryPerformanceFrequency
FileTimeToSystemTime
SystemTimeToFileTime
GetFileAttributesA
GetTimeZoneInformation
GlobalFree
GetCommandLineA
CreateFileW
GetProcessHeap
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
PeekNamedPipe
GetFileInformationByHandle
GetCurrentDirectoryW
HeapSize
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapCreate
GetModuleFileNameW
WriteFile
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LCMapStringW
IsProcessorFeaturePresent
SetLastError
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
HeapReAlloc
MoveFileA
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
CreateDirectoryA
GetFullPathNameA
GetDriveTypeW
RaiseException
EncodePointer
RtlUnwind
DecodePointer
ExitProcess
GetModuleHandleW
HeapFree
HeapAlloc
WideCharToMultiByte
GetShortPathNameW
CopyFileA
MulDiv
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
ExpandEnvironmentStringsA
LoadLibraryA
GetProcAddress
FreeLibrary
SystemTimeToTzSpecificLocalTime

user32

EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
CountClipboardFormats
GetClipboardData
GetSystemMetrics
LoadImageA
SetWindowPos
ReleaseDC
DrawTextA
SetForegroundWindow
CloseWindow
GetWindowInfo
EnumChildWindows
SendMessageA
GetDC
GetDlgItem
SetWindowTextA
CreateWindowExA
DestroyWindow
GetWindowLongA
ShowWindow
SetFocus
FlashWindow
InvalidateRect
GetClientRect
EndDialog
EndPaint
FillRect
BeginPaint
DestroyMenu
TrackPopupMenu
AppendMenuA
CreateMenu
CreatePopupMenu
ScreenToClient
DialogBoxParamA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetMessageA
SetWindowsHookExA
PostThreadMessageA
ValidateRect
AdjustWindowRect
LoadIconA
GetSysColor
KillTimer
SetTimer
TrackMouseEvent
GetMessageExtraInfo
GetWindowTextW
SetWindowTextW
SetWindowLongA
ClientToScreen
GetParent
MoveWindow
GetWindowRect
MapWindowPoints
ShowCursor
MapVirtualKeyA
GetWindowPlacement
SetPropA
PostMessageA
LoadCursorA
RegisterClassA
GetWindowTextA
GetForegroundWindow
DefWindowProcA
SetDlgItemTextW

gdi32

CreateFontA
SelectObject
DeleteObject
CreateCompatibleDC
GetDeviceCaps
DeleteDC
GetBitmapBits
SetBkColor
CreateDIBSection

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

OleLoadPicture

winmm

waveInPrepareHeader
waveInStart
waveInGetErrorTextA
waveInOpen
waveInReset
waveInClose
waveInAddBuffer

ddraw

DirectDrawCreate

dsound

ord1

d3d9

Direct3DCreate9

ws2_32

recvfrom
bind
connect
getsockname
getpeername
socket
ioctlsocket
WSAAsyncSelect
htons
sendto
WSAStartup
inet_addr
ntohs
inet_ntoa
gethostname
gethostbyname
gethostbyaddr
getsockopt
setsockopt
WSAGetLastError
send
recv
accept
listen
__WSAFDIsSet
select
closesocket
WSACleanup

libeay32

ord342
ord340
ord341

Exports

Exports

Main
s3eExtGet

Sections

.text
Size: 570KB - Virtual size: 569KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff74d2256493eacce83201bc290cdae0

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comdlg32

kernel32

user32

gdi32

shell32

ole32

oleaut32

winmm

ddraw

dsound

d3d9

ws2_32

libeay32

Exports

Exports

Sections

.text Size: 570KB - Virtual size: 569KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 10KB - Virtual size: 2.1MB

.rsrc Size: 273KB - Virtual size: 273KB

.reloc Size: 43KB - Virtual size: 42KB

.text
Size: 570KB - Virtual size: 569KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 10KB - Virtual size: 2.1MB

.rsrc
Size: 273KB - Virtual size: 273KB

.reloc
Size: 43KB - Virtual size: 42KB