2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia

Sharing

Copy URL Twitter E-mail

General

Target
2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia
Size 1.1MB
Sample240420-lc998sdd75
SHA256 c768ba3d2abb1faa33426a6e7bf5d45e32a2782ff17ddfcf56b2a30fee409cb5
MD5 3b2cc1e66f406128c7d7879dc14a454a
SHA1 d1bfef0ae969a1cad06262c10a35e66766fe8fcd
SHA512 0444adc71bfc24dfb830a4b9405723b5917f8a9a4674fd04c846a9bfb700298f7fe1680e18bcfe4cbb86096fcddd2131dc8c02fbd628d6ab805ec265df3b8b7e
SSDEEP 24576:KXB3ZDKvwCyKc1K3fMXBYpBisubbY2NIsRNVn1Vv:KXB3ZrJuf1pBEb02NIsX5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia

File Explorer

2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia

.exe 1.1MB

2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia

IMPHASH e7f0b6d5d077f74a5b1544e0019482b8
SHA256 c768ba3d2abb1faa33426a6e7bf5d45e32a2782ff17ddfcf56b2a30fee409cb5
MD5 3b2cc1e66f406128c7d7879dc14a454a
SHA1 d1bfef0ae969a1cad06262c10a35e66766fe8fcd
SHA512 0444adc71bfc24dfb830a4b9405723b5917f8a9a4674fd04c846a9bfb700298f7fe1680e18bcfe4cbb86096fcddd2131dc8c02fbd628d6ab805ec265df3b8b7e
SSDEEP 24576:KXB3ZDKvwCyKc1K3fMXBYpBisubbY2NIsRNVn1Vv:KXB3ZrJuf1pBEb02NIsX5
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

608961

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA CryptGenRandom CryptAcquireContextA

comdlg32

GetOpenFileNameA

kernel32

GetModuleFileNameA GetEnvironmentVariableW MultiByteToWideChar GetVersionExA GetLocaleInfoA GetSystemInfo GetLastError GetCurrentThreadId CreateThread WaitForSingleObject Module32Next Module32First CreateToolhelp32Snapshot GetTempPathA VirtualAlloc VirtualFree OutputDebugStringA CloseHandle GetCurrentProcess GetCurrentProcessId CreateFileA SwitchToFiber VirtualProtect GetThreadContext GetCurrentThread DeleteFiber ConvertThreadToFiber CreateFiber GetFileAttributesExA RemoveDirectoryA FindFirstFileA FindNextFileA FindClose GetDiskFreeSpaceExA SetFileAttributesA SetEndOfFile SetFilePointer SetErrorMode DeleteFileA CreateProcessA SetDllDirectoryA SetEvent SetThreadPriority CreateEventA GetExitCodeThread GetTickCount TlsAlloc TlsFree TlsSetValue TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection TryEnterCriticalSection LeaveCriticalSection ExitThread CreateSemaphoreA ReleaseSemaphore DuplicateHandle QueryPerformanceCounter QueryPerformanceFrequency FileTimeToSystemTime SystemTimeToFileTime GetFileAttributesA GetTimeZoneInformation GlobalFree GetCommandLineA CreateFileW GetProcessHeap WriteConsoleW SetStdHandle SetEnvironmentVariableA CompareStringW IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetEnvironmentStringsW FreeEnvironmentStringsW PeekNamedPipe GetFileInformationByHandle GetCurrentDirectoryW HeapSize GetLocaleInfoW LoadLibraryW InterlockedExchange FlushFileBuffers GetConsoleMode GetConsoleCP ReadFile HeapCreate GetModuleFileNameW WriteFile GetFileType InitializeCriticalSectionAndSpinCount GetStdHandle SetHandleCount LCMapStringW IsProcessorFeaturePresent SetLastError IsValidCodePage GetOEMCP GetACP InterlockedDecrement InterlockedIncrement GetCPInfo IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW HeapSetInformation GetSystemTimeAsFileTime HeapReAlloc MoveFileA FindFirstFileExA GetDriveTypeA FileTimeToLocalFileTime CreateDirectoryA GetFullPathNameA GetDriveTypeW RaiseException EncodePointer RtlUnwind DecodePointer ExitProcess GetModuleHandleW HeapFree HeapAlloc WideCharToMultiByte GetShortPathNameW CopyFileA MulDiv GetModuleHandleA GlobalAlloc GlobalLock GlobalUnlock Sleep ExpandEnvironmentStringsA LoadLibraryA GetProcAddress FreeLibrary SystemTimeToTzSpecificLocalTime

user32

CloseClipboard EmptyClipboard SetClipboardData CreateWindowExA OpenClipboard CountClipboardFormats DestroyWindow GetSystemMetrics LoadImageA SetWindowPos ReleaseDC DrawTextA CloseWindow GetWindowInfo SetProcessDPIAware EnumChildWindows SendMessageA GetDC GetDlgItem GetClipboardData GetSysColor AdjustWindowRect GetWindowLongA ShowWindow SetFocus FlashWindow InvalidateRect GetClientRect EndDialog EndPaint FillRect BeginPaint DestroyMenu TrackPopupMenu AppendMenuA CreateMenu CreatePopupMenu ScreenToClient DialogBoxParamA CallNextHookEx TranslateMessage DispatchMessageA GetMessageA SetWindowsHookExA PostThreadMessageA GetForegroundWindow SetForegroundWindow LoadIconA SetWindowTextA KillTimer SetTimer TrackMouseEvent GetMessageExtraInfo GetWindowTextW SetWindowTextW SetDlgItemTextW GetParent SetWindowLongA MoveWindow GetWindowRect MapWindowPoints ShowCursor MapVirtualKeyA GetWindowPlacement SetPropA PostMessageA LoadCursorA RegisterClassA GetWindowTextA ValidateRect DefWindowProcA ClientToScreen

gdi32

SelectObject DeleteObject CreateDIBSection CreateCompatibleDC CreateFontA SetBkColor DeleteDC GetDeviceCaps GetBitmapBits

shell32

ShellExecuteA

ole32

CoUninitialize CoInitialize CoCreateInstance CreateStreamOnHGlobal

oleaut32

OleLoadPicture

winmm

waveInPrepareHeader waveInStart waveInGetErrorTextA waveInOpen waveInReset waveInClose waveInAddBuffer

ddraw

DirectDrawCreate

dsound

ord1

d3d9

Direct3DCreate9

ws2_32

recvfrom bind connect getsockname getpeername socket ioctlsocket WSAAsyncSelect htons sendto WSAStartup inet_addr ntohs inet_ntoa gethostname gethostbyname gethostbyaddr getsockopt setsockopt WSAGetLastError send recv accept listen __WSAFDIsSet select closesocket WSACleanup

libeay32

ord342 ord340 ord341

Sharing

General

Malware Config

Signatures

File Explorer

2024-04-20_3b2cc1e66f406128c7d7879dc14a454a_mafia

advapi32

comdlg32

kernel32

user32

gdi32

shell32

ole32

oleaut32

winmm

ddraw

dsound

d3d9

ws2_32

libeay32

generic