2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia
Size

1.1MB
MD5

3b2cc1e66f406128c7d7879dc14a454a
SHA1

d1bfef0ae969a1cad06262c10a35e66766fe8fcd
SHA256

c768ba3d2abb1faa33426a6e7bf5d45e32a2782ff17ddfcf56b2a30fee409cb5
SHA512

0444adc71bfc24dfb830a4b9405723b5917f8a9a4674fd04c846a9bfb700298f7fe1680e18bcfe4cbb86096fcddd2131dc8c02fbd628d6ab805ec265df3b8b7e
SSDEEP

24576:KXB3ZDKvwCyKc1K3fMXBYpBisubbY2NIsRNVn1Vv:KXB3ZrJuf1pBEb02NIsX5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia

Files

2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia
.exe windows:5 windows x86 arch:x86

e7f0b6d5d077f74a5b1544e0019482b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CryptGenRandom
CryptAcquireContextA

comdlg32

GetOpenFileNameA

kernel32

GetModuleFileNameA
GetEnvironmentVariableW
MultiByteToWideChar
GetVersionExA
GetLocaleInfoA
GetSystemInfo
GetLastError
GetCurrentThreadId
CreateThread
WaitForSingleObject
Module32Next
Module32First
CreateToolhelp32Snapshot
GetTempPathA
VirtualAlloc
VirtualFree
OutputDebugStringA
CloseHandle
GetCurrentProcess
GetCurrentProcessId
CreateFileA
SwitchToFiber
VirtualProtect
GetThreadContext
GetCurrentThread
DeleteFiber
ConvertThreadToFiber
CreateFiber
GetFileAttributesExA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetDiskFreeSpaceExA
SetFileAttributesA
SetEndOfFile
SetFilePointer
SetErrorMode
DeleteFileA
CreateProcessA
SetDllDirectoryA
SetEvent
SetThreadPriority
CreateEventA
GetExitCodeThread
GetTickCount
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
ExitThread
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
QueryPerformanceCounter
QueryPerformanceFrequency
FileTimeToSystemTime
SystemTimeToFileTime
GetFileAttributesA
GetTimeZoneInformation
GlobalFree
GetCommandLineA
CreateFileW
GetProcessHeap
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
PeekNamedPipe
GetFileInformationByHandle
GetCurrentDirectoryW
HeapSize
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapCreate
GetModuleFileNameW
WriteFile
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LCMapStringW
IsProcessorFeaturePresent
SetLastError
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
HeapReAlloc
MoveFileA
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
CreateDirectoryA
GetFullPathNameA
GetDriveTypeW
RaiseException
EncodePointer
RtlUnwind
DecodePointer
ExitProcess
GetModuleHandleW
HeapFree
HeapAlloc
WideCharToMultiByte
GetShortPathNameW
CopyFileA
MulDiv
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
ExpandEnvironmentStringsA
LoadLibraryA
GetProcAddress
FreeLibrary
SystemTimeToTzSpecificLocalTime

user32

CloseClipboard
EmptyClipboard
SetClipboardData
CreateWindowExA
OpenClipboard
CountClipboardFormats
DestroyWindow
GetSystemMetrics
LoadImageA
SetWindowPos
ReleaseDC
DrawTextA
CloseWindow
GetWindowInfo
SetProcessDPIAware
EnumChildWindows
SendMessageA
GetDC
GetDlgItem
GetClipboardData
GetSysColor
AdjustWindowRect
GetWindowLongA
ShowWindow
SetFocus
FlashWindow
InvalidateRect
GetClientRect
EndDialog
EndPaint
FillRect
BeginPaint
DestroyMenu
TrackPopupMenu
AppendMenuA
CreateMenu
CreatePopupMenu
ScreenToClient
DialogBoxParamA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetMessageA
SetWindowsHookExA
PostThreadMessageA
GetForegroundWindow
SetForegroundWindow
LoadIconA
SetWindowTextA
KillTimer
SetTimer
TrackMouseEvent
GetMessageExtraInfo
GetWindowTextW
SetWindowTextW
SetDlgItemTextW
GetParent
SetWindowLongA
MoveWindow
GetWindowRect
MapWindowPoints
ShowCursor
MapVirtualKeyA
GetWindowPlacement
SetPropA
PostMessageA
LoadCursorA
RegisterClassA
GetWindowTextA
ValidateRect
DefWindowProcA
ClientToScreen

gdi32

SelectObject
DeleteObject
CreateDIBSection
CreateCompatibleDC
CreateFontA
SetBkColor
DeleteDC
GetDeviceCaps
GetBitmapBits

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

OleLoadPicture

winmm

waveInPrepareHeader
waveInStart
waveInGetErrorTextA
waveInOpen
waveInReset
waveInClose
waveInAddBuffer

ddraw

DirectDrawCreate

dsound

ord1

d3d9

Direct3DCreate9

ws2_32

recvfrom
bind
connect
getsockname
getpeername
socket
ioctlsocket
WSAAsyncSelect
htons
sendto
WSAStartup
inet_addr
ntohs
inet_ntoa
gethostname
gethostbyname
gethostbyaddr
getsockopt
setsockopt
WSAGetLastError
send
recv
accept
listen
__WSAFDIsSet
select
closesocket
WSACleanup

libeay32

ord342
ord340
ord341

Exports

Exports

Main
s3eExtGet

Sections

.text
Size: 683KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7f0b6d5d077f74a5b1544e0019482b8

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comdlg32

kernel32

user32

gdi32

shell32

ole32

oleaut32

winmm

ddraw

dsound

d3d9

ws2_32

libeay32

Exports

Exports

Sections

.text Size: 683KB - Virtual size: 682KB

.rdata Size: 150KB - Virtual size: 150KB

.data Size: 10KB - Virtual size: 2.1MB

.rsrc Size: 273KB - Virtual size: 273KB

.reloc Size: 56KB - Virtual size: 56KB

.text
Size: 683KB - Virtual size: 682KB

.rdata
Size: 150KB - Virtual size: 150KB

.data
Size: 10KB - Virtual size: 2.1MB

.rsrc
Size: 273KB - Virtual size: 273KB

.reloc
Size: 56KB - Virtual size: 56KB