2024-05-17_58a36c1d22e9aca5da96a2a18425e1b3_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-17_58a36c1d22e9aca5da96a2a18425e1b3_mafia
Size

1.4MB
MD5

58a36c1d22e9aca5da96a2a18425e1b3
SHA1

85d54ff9508a3cdc5200dd4dda67c75bdaf370ee
SHA256

8ed5d53ccf1fb42e9c86a21f9dd6397ba45f710c4869a30ff31667360d3b0134
SHA512

65e754303eed1e924549cdd9e56e321a966ba2638c810f34ec74ba7fb2a544fe7572145ee781e5f73b654c698a311ab3990f8f67560e3ce0083ddbae3a9a7250
SSDEEP

24576:mN2Lp8+9fR3yHYKsA5kHLtkEom/m5b16tZeeqAA5JDPhHG5wyk4fLM9MoDQkWSLV:UEp8rYKsA5kHLtd+14Za5HG5wyk4jM96

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-17_58a36c1d22e9aca5da96a2a18425e1b3_mafia

Files

2024-05-17_58a36c1d22e9aca5da96a2a18425e1b3_mafia
.exe windows:5 windows x86 arch:x86

ea274b42f102f411fac388ceb62f10c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject

user32

GetSystemMetrics
ShowWindow
GetActiveWindow
GetDC
ReleaseDC
GetDesktopWindow
MessageBoxA

ws2_32

send
socket
recv
WSAGetLastError
__WSAFDIsSet
select
htons
closesocket
ioctlsocket
freeaddrinfo
getaddrinfo
gethostbyname
inet_ntoa
inet_addr
WSAStartup
connect
accept
recvfrom
sendto
WSAStringToAddressA
setsockopt
bind
listen

shell32

SHGetFolderPathA

opengl32

glClear
glDrawArrays
glEnableClientState
glColorPointer
glTexCoordPointer
glVertexPointer
glDisable
glBlendFunc
glEnable
glOrtho
glLoadIdentity
glMatrixMode
glDeleteTextures
glTexParameteri
glBindTexture
glGenTextures
glReadPixels
glPixelStorei
glGetIntegerv
glClearColor
glFinish
glScissor
glDepthMask
glAlphaFunc
glTexImage2D
glTexSubImage2D

glu32

gluBuild2DMipmaps

winmm

mciSendStringA

sdl

SDL_WM_GrabInput
SDL_GetRelativeMouseState
SDL_GetMouseState
SDL_WarpMouse
SDL_Init
SDL_ShowCursor
SDL_ListModes
SDL_GL_SwapBuffers
SDL_GetAppState
SDL_WM_IconifyWindow
SDL_Quit
SDL_GetVideoInfo
SDL_EventState
SDL_GL_SetAttribute
SDL_WM_SetCaption
SDL_SetVideoMode
SDL_GetError
SDL_OpenAudio
SDL_PauseAudio
SDL_PollEvent
SDL_GetKeyState
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_CloseAudio

freetype

FT_Load_Char
FT_Get_Kerning
FT_Set_Pixel_Sizes
FT_Get_First_Char
FT_Load_Glyph
FT_New_Face
FT_Get_Next_Char
FT_Init_FreeType

gdiplus

GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipFree
GdipAlloc
GdipSaveImageToFile
GdipGetImageEncodersSize

kernel32

GetProcessHeap
SetEndOfFile
CreateFileW
CreateFileA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
SetEnvironmentVariableA
CompareStringW
SetStdHandle
WriteConsoleW
LoadLibraryW
HeapReAlloc
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LCMapStringW
GetCurrentDirectoryA
GetOEMCP
GetACP
GetCPInfo
GetCurrentDirectoryW
SetFilePointer
ReadFile
HeapCreate
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetLocaleInfoW
GetModuleFileNameW
WriteFile
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetTimeZoneInformation
WideCharToMultiByte
ExitProcess
GetModuleHandleW
SetCurrentDirectoryA
IsValidCodePage
GetProcAddress
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapSetInformation
GetCommandLineA
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
GetDateFormatA
GetTimeFormatA
MoveFileA
DeleteFileA
GetFullPathNameA
GetDriveTypeW
GetLastError
HeapAlloc
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
CreateDirectoryA
FreeConsole
GetVolumeInformationA
DeleteCriticalSection
GetStdHandle
SetConsoleTextAttribute
QueryPerformanceFrequency
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
InitializeCriticalSection
CloseHandle
Sleep
WaitForSingleObject
CreateThread
SetEnvironmentVariableW
OutputDebugStringA
FindFirstFileA
FindNextFileA
FindClose

Sections

.text
Size: 823KB - Virtual size: 823KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea274b42f102f411fac388ceb62f10c8

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

ws2_32

shell32

opengl32

glu32

winmm

sdl

freetype

gdiplus

kernel32

Sections

.text Size: 823KB - Virtual size: 823KB

.rdata Size: 161KB - Virtual size: 160KB

.data Size: 29KB - Virtual size: 1.5MB

.rsrc Size: 363KB - Virtual size: 363KB

.reloc Size: 60KB - Virtual size: 60KB

.text
Size: 823KB - Virtual size: 823KB

.rdata
Size: 161KB - Virtual size: 160KB

.data
Size: 29KB - Virtual size: 1.5MB

.rsrc
Size: 363KB - Virtual size: 363KB

.reloc
Size: 60KB - Virtual size: 60KB