Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_b633e766118fbacbbf5b580f750a4c62_mafia.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-17_b633e766118fbacbbf5b580f750a4c62_mafia.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-17_b633e766118fbacbbf5b580f750a4c62_mafia
-
Size
441KB
-
MD5
b633e766118fbacbbf5b580f750a4c62
-
SHA1
08558a934546a51f392f222b8e1b8c29e06303da
-
SHA256
5801df01505bd3fcb2a3f7554f7fbb8411d80458627b55ee0f5de1eb3ee4f30e
-
SHA512
0bcc134f41e8615ab70984ba9d61b7518fdedd867440cb01b4789b71262283c9cc72488351c5abc2c7dc0b3ba1488947c684a85be7348587a0dc24df656c72c5
-
SSDEEP
12288:NKbUguK37r+7PoQa1XgwV9TKsPQSnG0jv/+TQ+fY:NKMKri70TVPtnGGmQ+fY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-17_b633e766118fbacbbf5b580f750a4c62_mafia
Files
-
2024-05-17_b633e766118fbacbbf5b580f750a4c62_mafia.exe windows:5 windows x86 arch:x86
8431c235d574c73e1a99ff81a5643c88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetLocaleInfoA
GetNumberFormatA
FormatMessageA
FindFirstFileA
GetLastError
FindClose
FindNextFileA
GetCurrentDirectoryA
LocalFree
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MoveFileA
HeapFree
DeleteFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetProcAddress
GetModuleHandleW
ExitProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetCommandLineA
HeapSetInformation
RaiseException
GetCPInfo
RtlUnwind
HeapAlloc
LCMapStringW
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetLocaleInfoW
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
HeapCreate
ReadFile
SetFilePointer
FlushFileBuffers
CloseHandle
CreateFileA
GetModuleFileNameW
GetTimeZoneInformation
LoadLibraryW
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapReAlloc
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetDriveTypeW
CreateFileW
Sections
.text Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ