2024-05-23_aad036b0a1297486ecfc6d56ee410dc2_mafia_magniber_qakbot

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-23_aad036b0a1297486ecfc6d56ee410dc2_mafia_magniber_qakbot
Size

3.0MB
MD5

aad036b0a1297486ecfc6d56ee410dc2
SHA1

026cb604e65941ff1528969c1f34a8ecaf457425
SHA256

fd6999fa8e5a1de59ffb5902326f7d3dfd155b1eb7f5a19243901659eedd8e0b
SHA512

541b994aa9ee9d899438c7694a80ea319e58a37b612d1e5fab873c7909f365290a52b76e3c46895f0d55462c7ed547e9b1d162755536cfcb4d14cf30cad5140a
SSDEEP

49152:jNGZ2rjjZY4B3dnTPrXKKlP/kAvM3YXyhnH0E6FdMzCnuKlKuuGaXKy4IBAUZLYZ:aKjjZpF7rXKU/7MEG61eBAUZLe7MU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-23_aad036b0a1297486ecfc6d56ee410dc2_mafia_magniber_qakbot

Files

2024-05-23_aad036b0a1297486ecfc6d56ee410dc2_mafia_magniber_qakbot
.exe windows:5 windows x86 arch:x86

ed6eaadab86906293089bdd7506802cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Jarek\Projects\DCC\HO\bin\Win32\Release\MMHA\MMHA.pdb

Imports

kernel32

GetModuleHandleA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateFileA
LoadLibraryA
SetErrorMode
SetUnhandledExceptionFilter
GetModuleFileNameA
Sleep
CreateThread
TerminateProcess
GetCurrentThread
GetLocaleInfoA
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
TerminateThread
MultiByteToWideChar
ReadFile
GetExitCodeProcess
DuplicateHandle
CreatePipe
GetTickCount
FreeLibrary
SetLastError
ReadProcessMemory
GetLastError
GetEnvironmentVariableA
GetVersionExA
ResumeThread
GetThreadContext
SuspendThread
GetACP
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
EncodePointer
DecodePointer
HeapAlloc
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
DeleteFileA
GetModuleHandleW
ExitProcess
HeapFree
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCPInfo
GetOEMCP
IsValidCodePage
WideCharToMultiByte
LCMapStringW
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
HeapSize
HeapQueryInformation
GetTimeZoneInformation
SetStdHandle
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FatalAppExitA
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
RaiseException
SetEndOfFile
GetProcessHeap
GetDriveTypeW
WriteConsoleW
CreateFileW
CompareStringW
SetEnvironmentVariableA
GetSystemInfo
QueryPerformanceFrequency
InitializeCriticalSection
LocalAlloc
LocalFree
GetComputerNameA
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
DeviceIoControl
VirtualQuery
QueryPerformanceCounter
GetFileAttributesA
CreateDirectoryA
DebugBreak
ReleaseMutex
CreateMutexA
GetCurrentDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
SetHandleCount
GetTempPathA

advapi32

GetUserNameA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

user32

AdjustWindowRectEx
GetAsyncKeyState
LoadCursorA
GetMonitorInfoA
MonitorFromWindow
PeekMessageA
TranslateMessage
DispatchMessageA
InflateRect
OffsetRect
SetWindowTextA
SetRect
SetWindowPos
SetWindowLongA
GetWindowLongA
ShowWindow
MessageBoxA
GetClientRect
MsgWaitForMultipleObjects
DestroyWindow
MonitorFromPoint
CreateWindowExA
GetDC
ClientToScreen
LoadIconA
RegisterClassA
DefWindowProcA
ReleaseCapture
SetCapture
ShowCursor
SetForegroundWindow
SetCursor
ReleaseDC

gdi32

BitBlt
DeleteDC
DeleteObject
CreateCompatibleDC
GetStockObject
SelectObject
CreateCompatibleBitmap

shell32

SHGetSpecialFolderPathA
ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

libegl

ord1
ord4
ord12
ord8
ord22
ord5
ord29
ord34
ord24
ord25
ord7
ord13
ord9
ord11
ord23
ord14
ord3
ord2
ord30
ord32

libglesv2

ord37
ord30
ord33
ord93
ord54
ord25
ord47
ord52
ord95
ord6
ord53
ord28
ord16
ord18
ord112
ord113
ord77
ord34
ord69
ord68
ord21
ord36
ord27
ord32
ord66
ord65
ord90
ord3
ord2
ord26
ord22
ord91
ord61
ord124
ord125
ord114
ord72
ord64
ord131
ord42
ord43
ord11
ord39
ord41
ord141
ord44
ord40
ord14
ord29
ord50
ord4
ord13
ord5
ord48
ord142
ord97
ord31
ord1
ord106
ord109
ord46
ord7
ord24
ord130
ord139
ord17
ord99
ord49

openal32

alBufferData
alDeleteBuffers
alSourceStop
alSourcei
alSourcefv
alSourcef
alListenerf
alGetSourcei
alListenerfv
alDistanceModel
alGenSources
alGetString
alcMakeContextCurrent
alcCreateContext
alcOpenDevice
alcGetString
alcCloseDevice
alcDestroyContext
alDeleteSources
alSourcePlay
alGenBuffers

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 673KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed6eaadab86906293089bdd7506802cd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

user32

gdi32

shell32

ole32

libegl

libglesv2

openal32

version

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 46KB - Virtual size: 673KB

.rsrc Size: 157KB - Virtual size: 156KB

.reloc Size: 63KB - Virtual size: 62KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 46KB - Virtual size: 673KB

.rsrc
Size: 157KB - Virtual size: 156KB

.reloc
Size: 63KB - Virtual size: 62KB