2024-04-23_442252d9e30fbb891ca49222d34ee238_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-23_442252d9e30fbb891ca49222d34ee238_mafia
Size

1.4MB
MD5

442252d9e30fbb891ca49222d34ee238
SHA1

38ae15c789633b357bce468668089f40b3ec22ee
SHA256

4f4f97d6f647c6421c816e40960c39d2fba5b681fdbb50a9cbd535f5a75dedb6
SHA512

6a988418cc31aacd129b5ec30753d37d5f1d3b2279f8b987a9026f8eda7bf2e40af01d777b5c0a71c2c42e5a31229958c44fa53cd7b44aceef191fb8f6ff05cc
SSDEEP

24576:PNh8/qi8d++xX/SwItxN9x5TXXEkbPdsK2a9DYPQ6R4xBdTyAxG6XZmz8r2NVAz9:PT5X/SDVXTVPd52a949R49TyAs6Y8r2N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-23_442252d9e30fbb891ca49222d34ee238_mafia

Files

2024-04-23_442252d9e30fbb891ca49222d34ee238_mafia
.exe windows:5 windows x86 arch:x86

75f2655788bc439f022bdef8725dc7dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Programacion\HR1_New\builds\HiddenRunaway.pdb

Imports

openal32

alDeleteBuffers
alSourceUnqueueBuffers
alIsExtensionPresent
alGenSources
alIsBuffer
alSourcePlay
alSourcei
alIsSource
alGenBuffers
alSourceStop
alDeleteSources
alGetBufferi
alSourcePause
alBufferData
alGetSourcei
alGetEnumValue
alSourceQueueBuffers
alGetError
alListenerf
alListenerfv
alDistanceModel
alSourcef
alSource3f
alSource3i
alGetSourcef
alcCloseDevice
alcCreateContext
alcOpenDevice
alcMakeContextCurrent
alcGetContextsDevice
alGetProcAddress
alcGetString
alcIsExtensionPresent
alcDestroyContext
alcGetCurrentContext

pthreadvc2

pthread_join
pthread_create
pthread_setcancelstate
pthread_attr_setdetachstate
pthread_cancel
pthread_testcancel
pthread_attr_init
pthread_mutex_unlock
pthread_mutex_lock
pthread_attr_destroy
pthread_setcanceltype

shell32

SHGetSpecialFolderPathA
ShellExecuteA
SHCreateDirectoryExA

user32

LoadCursorA
ChangeDisplaySettingsA
RegisterClassA
MessageBeep
SetCursor
GetMessageA
PostQuitMessage
GetSystemMetrics
TranslateMessage
ShowCursor
CreateWindowExA
PeekMessageA
DefWindowProcA
ShowWindow
DispatchMessageA
AdjustWindowRectEx
SetWindowPos
LoadIconA
ReleaseDC
UnregisterClassA
SetWindowLongA
GetDC
SetFocus
SetForegroundWindow
DestroyWindow
MessageBoxA

gdi32

SetPixelFormat
SwapBuffers
ChoosePixelFormat

opengl32

glGetError
glDisable
glGetString
glShadeModel
glColorPointer
glDrawArrays
wglMakeCurrent
glLoadMatrixf
glTexParameteri
glPopMatrix
glReadPixels
glDisableClientState
glPushMatrix
glRotatef
glNormalPointer
glScalef
glTexEnvf
glMatrixMode
glTexEnvi
glViewport
glVertexPointer
glTranslatef
glTexCoordPointer
glLightfv
glEnable
glGenTextures
glHint
wglDeleteContext
glLoadIdentity
glLightModelfv
wglGetProcAddress
glBindTexture
glOrtho
glTexSubImage2D
glClearColor
glClear
glDepthFunc
glEnableClientState
wglCreateContext
glClearDepth
glDeleteTextures
glTexImage2D

avcodec-54

ord76
ord72
ord114
ord124
ord71
ord25
ord106
ord98
ord78
ord94
ord126

avformat-54

ord66
ord47
ord57
ord52
ord37
ord41
ord55

swscale-2

ord261
ord243
ord250

avutil-51

ord53
ord100
ord160

kernel32

CreateFileA
LoadLibraryW
FlushFileBuffers
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetLocaleInfoW
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
WriteFile
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapCreate
ExitProcess
GetModuleHandleW
HeapSize
CloseHandle
WriteConsoleW
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
ReadFile
SetFilePointer
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
RtlUnwind
GetCPInfo
RaiseException
CreateDirectoryA
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DecodePointer
EncodePointer
MultiByteToWideChar
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
GetProcAddress
SetEndOfFile
GetProcessHeap
CreateFileW
GetFileType
Sleep
FindFirstFileA
RemoveDirectoryA
FindClose
FindNextFileA
GetSystemTime
DeleteFileA
OutputDebugStringA
GetModuleHandleA
GetTickCount

Sections

.text
Size: 965KB - Virtual size: 964KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75f2655788bc439f022bdef8725dc7dc

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

openal32

pthreadvc2

shell32

user32

gdi32

opengl32

avcodec-54

avformat-54

swscale-2

avutil-51

kernel32

Sections

.text Size: 965KB - Virtual size: 964KB

.rdata Size: 146KB - Virtual size: 145KB

.data Size: 16KB - Virtual size: 2.6MB

.rsrc Size: 221KB - Virtual size: 221KB

.reloc Size: 83KB - Virtual size: 83KB

.text
Size: 965KB - Virtual size: 964KB

.rdata
Size: 146KB - Virtual size: 145KB

.data
Size: 16KB - Virtual size: 2.6MB

.rsrc
Size: 221KB - Virtual size: 221KB

.reloc
Size: 83KB - Virtual size: 83KB