2024-05-20_7b051be62db359678f4d35fbedf40bca_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-20_7b051be62db359678f4d35fbedf40bca_mafia
Size

1.4MB
MD5

7b051be62db359678f4d35fbedf40bca
SHA1

22b9c95e71f8d945f713b5b4568bc49f789f2c3e
SHA256

7229bf27fd039611300213372d77fc419e9ba8b2b7d6e0379ee1ab8a0de43dcd
SHA512

426b02420a15279d9aa252f9979f32bb6f935a5cdfe9c3b2d5e159b16ee18c00a13ab0b443ecdf445269146bc82d7320aa9845ff0f76d3e27e0b5b75fc0754b8
SSDEEP

24576:xPzpyONKF+ycBfqI48vaLNJsj/WXDsNXpubbY2NIsRNV9:1zpy4k+y+4rsj0DsNIb02NIsXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-20_7b051be62db359678f4d35fbedf40bca_mafia

Files

2024-05-20_7b051be62db359678f4d35fbedf40bca_mafia
.exe windows:5 windows x86 arch:x86

42968636feef6f2aae562f4dbae9a953

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CryptGenRandom
CryptAcquireContextA

comdlg32

GetOpenFileNameA

kernel32

GetShortPathNameW
WideCharToMultiByte
GetFileAttributesA
GetModuleFileNameA
GetEnvironmentVariableW
MultiByteToWideChar
GetLocaleInfoA
GetSystemInfo
GetLastError
GetCurrentThreadId
CreateThread
WaitForSingleObject
Module32Next
Module32First
CreateToolhelp32Snapshot
GetTempPathA
VirtualAlloc
VirtualFree
OutputDebugStringA
CloseHandle
GetCurrentProcess
GetCurrentProcessId
CreateFileA
SwitchToFiber
DeleteFiber
CreateFiber
ConvertThreadToFiber
CreateFiberEx
GetFileAttributesExA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetDiskFreeSpaceExA
SetFileAttributesA
SetEndOfFile
SetFilePointer
SetErrorMode
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
SetEvent
CreateEventA
InterlockedDecrement
DeleteFileA
VirtualProtect
CreateProcessA
SetDllDirectoryA
SetThreadPriority
GetExitCodeThread
GetTickCount
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
TryEnterCriticalSection
ExitThread
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
GetCurrentThread
QueryPerformanceCounter
CopyFileA
FileTimeToSystemTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GlobalFree
GetCommandLineA
GetProcessHeap
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
PeekNamedPipe
GetFileInformationByHandle
GetCurrentDirectoryW
HeapSize
GetLocaleInfoW
LoadLibraryW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapCreate
GetModuleFileNameW
WriteFile
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LCMapStringW
IsProcessorFeaturePresent
SetLastError
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
HeapReAlloc
MoveFileA
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
CreateDirectoryA
GetFullPathNameA
GetDriveTypeW
EncodePointer
RtlUnwind
DecodePointer
ExitProcess
GetModuleHandleW
HeapFree
CreateFileW
HeapAlloc
RaiseException
LocalAlloc
MulDiv
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
ExpandEnvironmentStringsA
LoadLibraryA
GetProcAddress
FreeLibrary
InterlockedExchange
QueryPerformanceFrequency

user32

CreateWindowExA
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
KillTimer
GetKeyboardLayout
CountClipboardFormats
GetClipboardData
GetSystemMetrics
LoadImageA
SetWindowPos
ReleaseDC
DrawTextA
SendMessageA
SetTimer
TrackMouseEvent
GetMessageExtraInfo
EnumChildWindows
GetDC
GetDlgItem
DestroyWindow
GetWindowInfo
CloseWindow
GetSysColor
AdjustWindowRect
GetWindowLongA
ShowWindow
SetFocus
FlashWindow
InvalidateRect
GetClientRect
EndDialog
EndPaint
FillRect
BeginPaint
DestroyMenu
TrackPopupMenu
AppendMenuA
CreateMenu
CreatePopupMenu
ScreenToClient
DialogBoxParamA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetMessageA
SetWindowsHookExA
PostThreadMessageA
GetForegroundWindow
DefWindowProcA
ValidateRect
GetWindowTextA
RegisterClassA
SetForegroundWindow
LoadIconA
SetWindowTextA
GetWindowTextW
SetWindowTextW
SetDlgItemTextW
ClientToScreen
MoveWindow
GetWindowRect
UnregisterClassA
MapWindowPoints
GetCursorInfo
ShowCursor
SetWindowLongA
MapVirtualKeyA
GetWindowPlacement
SetPropA
PostMessageA
LoadCursorA
GetParent

gdi32

DeleteDC
GetBitmapBits
CreateDIBSection
CreateCompatibleDC
SetBkColor
DeleteObject
SelectObject
GetDeviceCaps
CreateFontA

shell32

ShellExecuteA

ole32

CoInitialize
PropVariantClear
CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal

oleaut32

OleLoadPicture

winmm

waveInPrepareHeader
waveInStart
waveInGetErrorTextA
waveInOpen
waveInReset
waveInClose
waveInAddBuffer

ddraw

DirectDrawCreate

dsound

ord1

d3d9

Direct3DCreate9

shlwapi

ord219

ws2_32

bind
closesocket
connect
getsockname
getpeername
socket
htons
WSACleanup
WSAStartup
ioctlsocket
WSAAsyncSelect
recvfrom
getaddrinfo
freeaddrinfo
inet_ntoa
gethostname
gethostbyname
gethostbyaddr
getsockopt
setsockopt
WSAGetLastError
WSAAddressToStringA
WSAStringToAddressA
sendto
send
recv
accept
listen
__WSAFDIsSet
select
inet_addr

libeay32

ord340
ord341
ord342

Exports

Exports

Main
s3eExtGet

Sections

.text
Size: 879KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42968636feef6f2aae562f4dbae9a953

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comdlg32

kernel32

user32

gdi32

shell32

ole32

oleaut32

winmm

ddraw

dsound

d3d9

shlwapi

ws2_32

libeay32

Exports

Exports

Sections

.text Size: 879KB - Virtual size: 878KB

.rdata Size: 161KB - Virtual size: 160KB

.data Size: 19KB - Virtual size: 2.2MB

.rsrc Size: 273KB - Virtual size: 273KB

.reloc Size: 73KB - Virtual size: 73KB

.text
Size: 879KB - Virtual size: 878KB

.rdata
Size: 161KB - Virtual size: 160KB

.data
Size: 19KB - Virtual size: 2.2MB

.rsrc
Size: 273KB - Virtual size: 273KB

.reloc
Size: 73KB - Virtual size: 73KB