2024-04-24_8a2329caa9288cbd10e424df49ee088d_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-24_8a2329caa9288cbd10e424df49ee088d_mafia
Size

1.3MB
MD5

8a2329caa9288cbd10e424df49ee088d
SHA1

5c22426b480e6517742b03df8ec17df0e97e988d
SHA256

3ac50b73417e8255e5624a439a1c68da7fd0f83fc7621705be692a2d4fa7fc80
SHA512

4cdc109e2c01fa93b6385be1250aeaabfb6bcba644ec82532a33024c8d68a917da6f88c5b876b0a196f5e78251759c1d6709d8baeb2789ae6790572b0de3807a
SSDEEP

24576:NazPQbGRMo2myjwcL95pWqpSgj9OFEHMsywoQzEOyIrUT+tbHGp:iQJTjwcL95pCgUF8vywoQcIrUTGLe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-24_8a2329caa9288cbd10e424df49ee088d_mafia

Files

2024-04-24_8a2329caa9288cbd10e424df49ee088d_mafia
.exe windows:5 windows x86 arch:x86

18b13c1830ba15c1bc214485a5b396f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GetCurrentThreadId
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
RtlUnwind
GetLastError
HeapFree
RaiseException
GetCommandLineA
HeapSetInformation
HeapAlloc
TlsFree
InitializeSListHead
GetCurrentProcess
CloseHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetModuleFileNameW
GetThreadTimes
GetCurrentThread
GetProcAddress
SetLastError
GetModuleHandleW
SetFilePointer
GetFileType
CreateFileW
LCMapStringW
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
HeapCreate
SetHandleCount
GetStdHandle
GetStartupInfoW
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
CreateFileA
SetStdHandle
SetEndOfFile
GetProcessHeap
HeapReAlloc
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
WideCharToMultiByte
lstrlenA
ExitProcess
GetTickCount
Sleep
FindFirstFileExA
GetFileAttributesExA
FindClose
FindNextFileA
TlsAlloc
TlsGetValue
TlsSetValue
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
IsProcessorFeaturePresent
QueryPerformanceCounter

user32

SetCapture
GetKeyState
SetCursor
EndPaint
BeginPaint
RegisterClassA
LoadCursorA
LoadIconA
InvalidateRect
GetClassLongA
MonitorFromRect
GetMonitorInfoA
UnregisterClassA
CreateWindowExA
ShowWindow
SetWindowLongA
DispatchMessageA
GetMessageA
TranslateMessage
PeekMessageA
DefWindowProcA
SetFocus
MoveWindow
GetClientRect
GetWindowRect
SubtractRect
ScreenToClient
OffsetRect
SendMessageA
GetWindowLongA
ReleaseCapture

gdi32

CreateRectRgn
StretchBlt
BitBlt
SetDIBColorTable
CombineRgn
GetStockObject
CreateCompatibleDC
CreateDIBSection
FillRgn
SelectObject
DeleteObject
DeleteDC
GdiFlush
GetCurrentObject
SetStretchBltMode
GetObjectA

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 954KB - Virtual size: 954KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18b13c1830ba15c1bc214485a5b396f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 954KB - Virtual size: 954KB

.rdata Size: 256KB - Virtual size: 255KB

.data Size: 23KB - Virtual size: 32KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 69KB - Virtual size: 69KB

.text
Size: 954KB - Virtual size: 954KB

.rdata
Size: 256KB - Virtual size: 255KB

.data
Size: 23KB - Virtual size: 32KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 69KB - Virtual size: 69KB