2024-04-28_02404df532dd9096ae9600e8375cab60_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-28_02404df532dd9096ae9600e8375cab60_mafia
Size

2.3MB
MD5

02404df532dd9096ae9600e8375cab60
SHA1

e2d5c1ec691ac938f3c55f6b8fdb471d55dffa57
SHA256

1889c521f76717834325babbd395405aafcd95886755b1884e68724c05757aa6
SHA512

0f4e8ca898908844e59352d4dbfd62619a3156b0efb07bf27f99303edb168e2f153dc0d3b18ed3f369dcb3d71d7ee0c67c0166b4b30f52c329945b2d83c14533
SSDEEP

24576:kKEbsIlUUqb207+l2RHvRNYOy3LbasdmRTcGE:1EHub2Jg9/Ly3LbasdmG1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-28_02404df532dd9096ae9600e8375cab60_mafia

Files

2024-04-28_02404df532dd9096ae9600e8375cab60_mafia
.exe windows:5 windows x86 arch:x86

9a1847614882b2879b86f7b02ddf0d3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

sdl2

SDL_SetWindowPosition
SDL_SetWindowSize
SDL_RenderSetVSync
SDL_SetWindowMinimumSize
SDL_SetWindowTitle
SDL_CreateRenderer
SDL_CreateWindow
SDL_GetTicks64
SDL_HasIntersection
SDL_isdigit
SDL_isxdigit
SDL_strtol
SDL_Quit
SDL_Delay
SDL_fmodf
SDL_ShowWindow
SDL_Init
SDL_SetHintWithPriority
SDL_SetError
SDL_FreeRW
SDL_AllocRW
SDL_UnloadObject
SDL_LoadFunction
SDL_LoadObject
SDL_Log
SDL_SetHint
SDL_GetAudioDriver
SDL_RenderPresent
SDL_GetPlatform
SDL_GetHint
SDL_HasSSE2
SDL_HasNEON
SDL_InitSubSystem
SDL_QuitSubSystem
SDL_PauseAudioDevice
SDL_OpenAudioDevice
SDL_GetAudioDeviceName
SDL_CloseAudioDevice
SDL_GetNumAudioDevices
SDL_CreateMutex
SDL_DestroyMutex
SDL_LockMutex
SDL_UnlockMutex
SDL_RWFromMem
SDL_GetAudioDeviceSpec
SDL_GetDefaultAudioInfo
SDL_getenv
SDL_GetRendererOutputSize
SDL_GetDesktopDisplayMode
SDL_SetWindowIcon
SDL_GetWindowDisplayIndex
SDL_DestroyRenderer
SDL_DestroyWindow
SDL_memmove
SDL_strtoll
SDL_atoi
SDL_atof
SDL_RWFromConstMem
SDL_LoadWAV_RW
SDL_RWclose
SDL_RWtell
SDL_RWseek
SDL_RWread
SDL_cos
SDL_sin
SDL_log
SDL_exp
SDL_pow
SDL_memcmp
SDL_qsort
SDL_scalbn
SDL_PollEvent
SDL_GetWindowFromID
SDL_GetWindowFlags
SDL_GetCurrentVideoDriver
SDL_SetWindowFullscreen
SDL_DisableScreenSaver
SDL_EnableScreenSaver
SDL_SetClipboardText
SDL_GameControllerOpen
SDL_GameControllerName
SDL_GameControllerGetJoystick
SDL_JoystickInstanceID
SDL_GameControllerClose
SDL_StartTextInput
SDL_ShowCursor
SDL_IsTextInputActive
SDL_StopTextInput
SDL_MinimizeWindow
SDL_GetClipboardText
SDL_iconv_string
SDL_wcslen
SDL_UpperBlitScaled
SDL_RenderReadPixels
SDL_UpdateTexture
SDL_GetRGB
SDL_GetRGBA
SDL_MapRGB
SDL_MapRGBA
SDL_CreateRGBSurface
SDL_GetSurfaceBlendMode
SDL_UpperBlit
SDL_LockSurface
SDL_floor
SDL_UnlockSurface
SDL_CreateTextureFromSurface
SDL_ConvertSurfaceFormat
SDL_SetSurfaceBlendMode
SDL_CreateRGBSurfaceWithFormatFrom
SDL_RenderClear
SDL_RenderDrawPoints
SDL_RenderDrawRect
SDL_RenderFillRect
SDL_SetRenderDrawColor
SDL_RenderCopyEx
SDL_RenderCopy
SDL_GetTextureColorMod
SDL_GetTextureAlphaMod
SDL_SetTextureBlendMode
SDL_SetRenderDrawBlendMode
SDL_QueryTexture
SDL_SetTextureAlphaMod
SDL_SetTextureColorMod
SDL_SetRenderTarget
SDL_CreateTexture
SDL_SetTextureScaleMode
SDL_ceilf
SDL_strcasecmp
SDL_DestroyTexture
SDL_FreeSurface
SDL_strncmp
SDL_GetBasePath
SDL_strdup
SDL_ShowSimpleMessageBox
SDL_RWFromFile
SDL_GameControllerAddMappingsFromRW
SDL_OpenURL
SDL_GetError
SDL_memcpy
SDL_calloc
SDL_strstr
SDL_strlcat
SDL_realloc
SDL_fabsf
SDL_strchr
SDL_abs
SDL_ceil
SDL_snprintf
SDL_RenderDrawLine
SDL_RenderDrawPoint
SDL_malloc
SDL_strlen
SDL_GetRenderTarget
SDL_sscanf
SDL_tolower
SDL_GetHintBoolean
SDL_GameControllerGetVendor
SDL_GameControllerGetProduct
SDL_GameControllerGetType
SDL_strlcpy
SDL_strcmp
SDL_free
SDL_GetNumAudioDrivers
SDL_memset
SDL_SetMainReady

kernel32

GetStringTypeW
SetFilePointer
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetLocaleInfoW
LoadLibraryW
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetUserDefaultLCID
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
GetCPInfo
LCMapStringW
HeapReAlloc
HeapAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitProcess
HeapFree
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
DecodePointer
EncodePointer
InitializeCriticalSection
Sleep
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
SetLastError
EnumSystemLocalesA
IsValidLocale
CreateFileA
WriteConsoleW
SetStdHandle
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetCommandLineW
LocalFree
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileAttributesExW
RemoveDirectoryW
DeleteFileW
FlushFileBuffers
WriteFile
ReadFile
FindNextFileW
FindClose
GetCurrentThreadId
GetCurrentProcess
GetModuleFileNameW
CreateEventA
CreateThread
WaitForSingleObject
CloseHandle
GetModuleHandleW
SetEvent
LoadLibraryA
GetProcAddress
SetErrorMode
GetDriveTypeA
GetVolumeInformationA
FreeLibrary
GetFileInformationByHandleEx
SetFilePointerEx
CreateFileW
InitializeCriticalSectionEx
FindFirstFileExW
AllocConsole
SetConsoleOutputCP
GetStdHandle
SetConsoleMode
WideCharToMultiByte
GetLastError
MultiByteToWideChar
CreateDirectoryW
GetLocaleInfoA

user32

RegisterClassExA
CreateWindowExA
GetMessageW
PostMessageW
DispatchMessageW
DestroyWindow
UnregisterClassA
DefWindowProcW
TranslateMessage

shell32

SHGetFolderPathW
CommandLineToArgvW

advapi32

OpenProcessToken

Exports

Exports

FAudioCOMConstructEXT
FAudioCOMConstructWithCustomAllocatorEXT
FAudioCreate
FAudioCreateWithCustomAllocatorEXT
FAudioLinkedVersion
FAudioMasteringVoice_GetChannelMask
FAudioSourceVoice_Discontinuity
FAudioSourceVoice_ExitLoop
FAudioSourceVoice_FlushSourceBuffers
FAudioSourceVoice_GetFrequencyRatio
FAudioSourceVoice_GetState
FAudioSourceVoice_SetFrequencyRatio
FAudioSourceVoice_SetSourceSampleRate
FAudioSourceVoice_Start
FAudioSourceVoice_Stop
FAudioSourceVoice_SubmitSourceBuffer
FAudioVoice_DestroyVoice
FAudioVoice_DisableEffect
FAudioVoice_EnableEffect
FAudioVoice_GetChannelVolumes
FAudioVoice_GetEffectParameters
FAudioVoice_GetEffectState
FAudioVoice_GetFilterParameters
FAudioVoice_GetFilterParametersEXT
FAudioVoice_GetOutputFilterParameters
FAudioVoice_GetOutputFilterParametersEXT
FAudioVoice_GetOutputMatrix
FAudioVoice_GetVoiceDetails
FAudioVoice_GetVolume
FAudioVoice_SetChannelVolumes
FAudioVoice_SetEffectChain
FAudioVoice_SetEffectParameters
FAudioVoice_SetFilterParameters
FAudioVoice_SetFilterParametersEXT
FAudioVoice_SetOutputFilterParameters
FAudioVoice_SetOutputFilterParametersEXT
FAudioVoice_SetOutputMatrix
FAudioVoice_SetOutputVoices
FAudioVoice_SetVolume
FAudio_AddRef
FAudio_CommitChanges
FAudio_CommitOperationSet
FAudio_CreateMasteringVoice
FAudio_CreateMasteringVoice8
FAudio_CreateSourceVoice
FAudio_CreateSubmixVoice
FAudio_GetDeviceCount
FAudio_GetDeviceDetails
FAudio_GetPerformanceData
FAudio_GetProcessingQuantum
FAudio_Initialize
FAudio_RegisterForCallbacks
FAudio_Release
FAudio_SetDebugConfiguration
FAudio_SetEngineProcedureEXT
FAudio_StartEngine
FAudio_StopEngine
FAudio_UnregisterForCallbacks
FAudio_close
FAudio_fopen
FAudio_memopen
FAudio_memptr
PHYSFSRWOPS_makeRWops
PHYSFSRWOPS_openAppend
PHYSFSRWOPS_openRead
PHYSFSRWOPS_openWrite
PHYSFS_addToSearchPath
PHYSFS_caseFold
PHYSFS_close
PHYSFS_deinit
PHYSFS_delete
PHYSFS_deregisterArchiver
PHYSFS_enumerate
PHYSFS_enumerateFiles
PHYSFS_enumerateFilesCallback
PHYSFS_eof
PHYSFS_exists
PHYSFS_fileLength
PHYSFS_flush
PHYSFS_freeList
PHYSFS_getAllocator
PHYSFS_getBaseDir
PHYSFS_getCdRomDirs
PHYSFS_getCdRomDirsCallback
PHYSFS_getDirSeparator
PHYSFS_getErrorByCode
PHYSFS_getLastError
PHYSFS_getLastErrorCode
PHYSFS_getLastModTime
PHYSFS_getLinkedVersion
PHYSFS_getMountPoint
PHYSFS_getPrefDir
PHYSFS_getRealDir
PHYSFS_getSearchPath
PHYSFS_getSearchPathCallback
PHYSFS_getUserDir
PHYSFS_getWriteDir
PHYSFS_init
PHYSFS_isDirectory
PHYSFS_isInit
PHYSFS_isSymbolicLink
PHYSFS_mkdir
PHYSFS_mount
PHYSFS_mountHandle
PHYSFS_mountIo
PHYSFS_mountMemory
PHYSFS_openAppend
PHYSFS_openRead
PHYSFS_openWrite
PHYSFS_permitSymbolicLinks
PHYSFS_read
PHYSFS_readBytes
PHYSFS_readSBE16
PHYSFS_readSBE32
PHYSFS_readSBE64
PHYSFS_readSLE16
PHYSFS_readSLE32
PHYSFS_readSLE64
PHYSFS_readUBE16
PHYSFS_readUBE32
PHYSFS_readUBE64
PHYSFS_readULE16
PHYSFS_readULE32
PHYSFS_readULE64
PHYSFS_registerArchiver
PHYSFS_removeFromSearchPath
PHYSFS_seek
PHYSFS_setAllocator
PHYSFS_setBuffer
PHYSFS_setErrorCode
PHYSFS_setRoot
PHYSFS_setSaneConfig
PHYSFS_setWriteDir
PHYSFS_stat
PHYSFS_supportedArchiveTypes
PHYSFS_swapSBE16
PHYSFS_swapSBE32
PHYSFS_swapSBE64
PHYSFS_swapSLE16
PHYSFS_swapSLE32
PHYSFS_swapSLE64
PHYSFS_swapUBE16
PHYSFS_swapUBE32
PHYSFS_swapUBE64
PHYSFS_swapULE16
PHYSFS_swapULE32
PHYSFS_swapULE64
PHYSFS_symbolicLinksPermitted
PHYSFS_tell
PHYSFS_ucs4stricmp
PHYSFS_unmount
PHYSFS_utf16stricmp
PHYSFS_utf8FromLatin1
PHYSFS_utf8FromUcs2
PHYSFS_utf8FromUcs4
PHYSFS_utf8FromUtf16
PHYSFS_utf8ToUcs2
PHYSFS_utf8ToUcs4
PHYSFS_utf8ToUtf16
PHYSFS_utf8stricmp
PHYSFS_write
PHYSFS_writeBytes
PHYSFS_writeSBE16
PHYSFS_writeSBE32
PHYSFS_writeSBE64
PHYSFS_writeSLE16
PHYSFS_writeSLE32
PHYSFS_writeSLE64
PHYSFS_writeUBE16
PHYSFS_writeUBE32
PHYSFS_writeUBE64
PHYSFS_writeULE16
PHYSFS_writeULE32
PHYSFS_writeULE64
stb_vorbis_close
stb_vorbis_get_comment
stb_vorbis_get_error
stb_vorbis_get_file_offset
stb_vorbis_get_frame_float
stb_vorbis_get_info
stb_vorbis_get_sample_offset
stb_vorbis_get_samples_float
stb_vorbis_get_samples_float_interleaved
stb_vorbis_open_file
stb_vorbis_open_file_section
stb_vorbis_open_filename
stb_vorbis_open_memory
stb_vorbis_seek
stb_vorbis_seek_frame
stb_vorbis_seek_start
stb_vorbis_stream_length_in_samples
stb_vorbis_stream_length_in_seconds

Sections

.text
Size: 901KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a1847614882b2879b86f7b02ddf0d3b

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

kernel32

user32

shell32

advapi32

Exports

Exports

Sections

.text Size: 901KB - Virtual size: 900KB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 49KB - Virtual size: 2.1MB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 82KB - Virtual size: 82KB

.text
Size: 901KB - Virtual size: 900KB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 49KB - Virtual size: 2.1MB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 82KB - Virtual size: 82KB