2024-05-04_1a4bef0d993ab3e560acdef65d5a815b_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-04_1a4bef0d993ab3e560acdef65d5a815b_mafia
Size

4.6MB
MD5

1a4bef0d993ab3e560acdef65d5a815b
SHA1

a27840da87170f38f43264bd7e2714697947b148
SHA256

c1fdfcca55ef390ea61440f8e23a5a758866e08994e12c10f1493189e32ae2b8
SHA512

a40bb91b295928d761ef7606b2c5cdad32b19ef4aa595b8a776d0d35d410a306a769c2d77ccae5165023dcf275543bc46e74e417b4ff9d36f004abac0c8815c5
SSDEEP

98304:OTdB9RqM2FDxMwsSiG1Ur+TGkcnarx7Go+rqxhIR1JwFDA47wdR3w3jOi:OKbiUUsQMx7GLez3jO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-04_1a4bef0d993ab3e560acdef65d5a815b_mafia

Files

2024-05-04_1a4bef0d993ab3e560acdef65d5a815b_mafia
.exe windows:5 windows x86 arch:x86

b8e7637a817cba5a5fc2c5d62f7991dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glMaterialfv
glVertex3fv
glEnd
glLineStipple
glDisable
glBegin
glLineWidth
glEnable
glClearDepth
wglCreateContext
glEnableClientState
glAlphaFunc
glVertex2f
glDepthFunc
glClear
glClearColor
glMaterialf
glDrawElements
glTexParameterf
glTexCoord2f
glColorMask
glScissor
glPointSize
glPixelStorei
glIsEnabled
glBindTexture
glPolygonOffset
glVertex2i
glGetError
glPopAttrib
glLightf
glGetString
glShadeModel
glFogi
glColorPointer
glGetFloatv
glGenTextures
glCopyTexSubImage2D
glGetTexImage
glTexImage2D
glTexSubImage2D
glGetIntegerv
glDeleteTextures
glLightModelfv
glLoadIdentity
glDepthMask
glFogfv
wglMakeCurrent
glLoadMatrixf
glTexParameteri
glPopMatrix
glDrawBuffer
glReadPixels
glDisableClientState
glReadBuffer
glPushMatrix
glMultMatrixf
glStencilFunc
glPolygonMode
glBlendFunc
glStencilMask
glCullFace
glRectf
glColorMaterial
glNormalPointer
glPushAttrib
glVertex3f
glTexEnvf
glLightModeli
glMatrixMode
glTexEnvi
glDrawArrays
glViewport
glFogf
glVertexPointer
glTranslatef
glTexCoordPointer
glLightfv
glStencilOp
glColor4ub
wglGetProcAddress
glClipPlane
glTexGeni
glFrontFace
glFlush
glHint
wglDeleteContext

ws2_32

gethostbyname
closesocket
socket
bind
sendto
setsockopt
htons
htonl
recvfrom
gethostname
WSACleanup
WSAStartup
inet_addr
WSASetLastError
WSAGetLastError
send
recv
accept
listen
getsockopt
getsockname
connect
ioctlsocket
WSASend
WSARecv
WSAGetOverlappedResult
WSAIoctl
select

gdi32

DeleteDC
SetPixel
DeleteObject
SetDeviceGammaRamp
CreateCompatibleDC
CreateCompatibleBitmap
StretchDIBits
GetDeviceGammaRamp
SwapBuffers
SetPixelFormat
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SelectObject

kernel32

TlsSetValue
TlsGetValue
TlsAlloc
GetStartupInfoW
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
SetUnhandledExceptionFilter
RaiseException
ResumeThread
ExitThread
GetTimeZoneInformation
GetFileType
GetDateFormatA
GetTimeFormatA
MoveFileA
GetCurrentProcess
DuplicateHandle
CreateProcessA
TlsFree
InterlockedDecrement
RtlUnwind
GetDriveTypeW
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileExW
DecodePointer
EncodePointer
HeapSetInformation
GetCommandLineA
IsDebuggerPresent
GetLocaleInfoW
IsProcessorFeaturePresent
GetConsoleCP
GetCurrentDirectoryW
GetCPInfo
SetLastError
TerminateProcess
InterlockedIncrement
UnhandledExceptionFilter
CreateIoCompletionPort
PostQueuedCompletionStatus
CreateSemaphoreW
ReleaseSemaphore
GetQueuedCompletionStatus
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
LoadLibraryExA
GetModuleFileNameA
DeleteFileA
AreFileApisANSI
GetSystemTime
GetTempPathA
GetCurrentProcessId
DeleteFileW
GetVersionExA
GetFileAttributesExW
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
WideCharToMultiByte
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
OutputDebugStringW
LockFile
UnlockFile
InterlockedCompareExchange
HeapFree
SystemTimeToFileTime
HeapAlloc
FreeLibrary
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
CompareStringW
LCMapStringW
CreatePipe
GetExitCodeProcess
SetStdHandle
GetFullPathNameW
WaitForSingleObject
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
CreateThread
FindFirstFileW
Sleep
FindClose
FindNextFileW
InitializeCriticalSection
CreateEventW
DeleteCriticalSection
CloseHandle
WriteFile
CreateFileW
QueryPerformanceCounter
GetTickCount
GetCurrentThread
GetSystemInfo
QueryPerformanceFrequency
OutputDebugStringA
SetThreadAffinityMask
GetNumberOfConsoleInputEvents
SetConsoleScreenBufferSize
GetConsoleMode
SetConsoleMode
SetConsoleCursorPosition
GetStdHandle
SetConsoleCtrlHandler
SetConsoleDisplayMode
SetConsoleTitleW
ReadConsoleInputW
GetModuleHandleW
FormatMessageW
GetVersionExW
MultiByteToWideChar
GetLastError
GetProcAddress
lstrcmpiW
LocalFree
GlobalMemoryStatus
GlobalLock
GlobalAlloc
GlobalUnlock
LoadLibraryW
LoadLibraryA
ExitProcess
lstrlenA
WriteConsoleW
GetFullPathNameA
HeapReAlloc
CreateFileA
GetFileSize
CreateMutexW
SetFilePointer
MapViewOfFile
UnmapViewOfFile
SetEndOfFile

user32

SetActiveWindow
GetWindowRect
MapVirtualKeyW
SetCursor
SetWindowPlacement
DestroyWindow
ClientToScreen
EndPaint
ToAsciiEx
SetClipboardData
OpenClipboard
EmptyClipboard
GetClipboardData
CloseClipboard
PostQuitMessage
ChangeDisplaySettingsW
LoadImageW
SetCapture
UnregisterClassW
SetForegroundWindow
GetFocus
LoadCursorW
GetClientRect
BeginPaint
GetDoubleClickTime
CreateIconIndirect
GetDC
GetCapture
TranslateMessage
GetKeyboardState
RegisterClassExW
GetWindowPlacement
GetCursorInfo
GetKeyboardLayout
SetCursorPos
PeekMessageW
ReleaseDC
SetWindowLongW
DestroyCursor
SetWindowPos
GetCursorPos
ShowWindow
SendMessageTimeoutW
GetActiveWindow
CreateWindowExW
ReleaseCapture
GetSystemMetrics
UpdateWindow
AdjustWindowRect
DefWindowProcW
EnumDisplaySettingsW
GetMessagePos
MoveWindow
DispatchMessageW
ShowCursor

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

dinput8

DirectInput8Create

Exports

Exports

create_duel
end_duel
get_log_message
get_message
new_card
new_tag_card
preload_script
process
query_card
query_field_card
query_field_count
query_field_info
set_card_reader
set_message_handler
set_player_info
set_responseb
set_responsei
set_script_reader
start_duel

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8e7637a817cba5a5fc2c5d62f7991dc

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

ws2_32

gdi32

kernel32

user32

imm32

advapi32

dinput8

Exports

Exports

Sections

.text Size: 3.8MB - Virtual size: 3.8MB

.rdata Size: 443KB - Virtual size: 443KB

.data Size: 35KB - Virtual size: 221KB

.rsrc Size: 279KB - Virtual size: 279KB

.reloc Size: 141KB - Virtual size: 141KB

.text
Size: 3.8MB - Virtual size: 3.8MB

.rdata
Size: 443KB - Virtual size: 443KB

.data
Size: 35KB - Virtual size: 221KB

.rsrc
Size: 279KB - Virtual size: 279KB

.reloc
Size: 141KB - Virtual size: 141KB