2024-05-23_87891985ff9931bb196a658882564742_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-23_87891985ff9931bb196a658882564742_mafia
Size

1.2MB
MD5

87891985ff9931bb196a658882564742
SHA1

012aefa5b13fa9215db94efd7f700b4b12e3dc85
SHA256

7ced0802d16f4ae06efab354fb46a460c9367420b3c753f8ccdea0375fcecbd2
SHA512

c0f87397c2230ecfb0f6729a8d508ba96958eaba4201e690b1873f63d262c37660c8ab1e908ceca5c12f86b825961b4f06c7284c8062a276571bf0b431e15780
SSDEEP

12288:uBBSRDLeE2P8lhko4a1PwiZCxRODXagwuSzTDAX8nC+PZKCoYDw/EqkoqMWL:aBkLb3Z2znnC+BKMxqZLWL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-23_87891985ff9931bb196a658882564742_mafia

Files

2024-05-23_87891985ff9931bb196a658882564742_mafia
.exe windows:5 windows x86 arch:x86

81d6f41960fc9f64c9510343dfb4483f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects_2012\Spud81\Release\Spud81.pdb

Imports

kernel32

SetFilePointer
ReadFile
GetModuleFileNameW
WriteFile
ExitProcess
HeapCreate
IsProcessorFeaturePresent
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
GetProcAddress
GetConsoleCP
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
CreateFileW
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCPInfo
LCMapStringW
GetConsoleMode
FlushFileBuffers
HeapSize
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetLocaleInfoW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
SetStdHandle
WriteConsoleW
GetCurrentThreadId
CreateFileA
SetEndOfFile
GetModuleFileNameA
LoadLibraryA
GetTickCount
Sleep
GlobalFree
RtlUnwind
GetProcessHeap
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
GlobalUnlock
GlobalAlloc
TlsGetValue
GlobalLock
GetLastError
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
EncodePointer
DecodePointer
InterlockedExchange
InitializeCriticalSection

user32

SetWindowPos
EnableWindow
SetDlgItemTextA
GetDlgItem
SendDlgItemMessageA
RegisterClassExA
PostQuitMessage
SetForegroundWindow
LoadIconA
TranslateMessage
GetMenu
PeekMessageA
DefWindowProcA
ShowWindow
SetMenu
DispatchMessageA
LoadCursorA
LoadBitmapA
SetDlgItemInt
SetWindowTextA
EndPaint
HideCaret
ShowCaret
BeginPaint
DestroyCaret
CreateCaret
SetCaretPos
AdjustWindowRect
GetFocus
ClientToScreen
BringWindowToTop
AdjustWindowRectEx
ChangeDisplaySettingsA
CreateDialogParamA
LoadMenuA
SetFocus
GetAsyncKeyState
SetWindowLongA
GetWindowLongA
CreateWindowExA
EndDialog
CallWindowProcA
DialogBoxParamA
CheckMenuItem
GetClientRect
SendMessageA
GetDC
MessageBoxA
ReleaseDC
GetSystemMetrics
UpdateWindow
GetDlgItemTextA
SetScrollInfo
DestroyWindow
GetWindowRect

gdi32

CreateFontA
SetBitmapBits
StretchBlt
GetDIBits
SetStretchBltMode
GetObjectA
SetBkMode
CreateSolidBrush
BitBlt
PatBlt
SetTextColor
DeleteDC
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
GetTextMetricsA
TextOutA
GetStockObject

comctl32

CreatePropertySheetPageA
InitCommonControlsEx
PropertySheetA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHGetMalloc
SHGetPathFromIDListA
DragQueryFileA
SHGetSpecialFolderPathA
DragAcceptFiles
SHCreateDirectoryExA
DragFinish
SHBrowseForFolderA

ddraw

DirectDrawCreate

dsound

ord1

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateTexture
D3DXMatrixTransformation2D
D3DXCreateSprite

Sections

.text
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81d6f41960fc9f64c9510343dfb4483f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comctl32

comdlg32

shell32

ddraw

dsound

d3d9

d3dx9_43

Sections

.text Size: 312KB - Virtual size: 311KB

.rdata Size: 38KB - Virtual size: 38KB

.data Size: 11KB - Virtual size: 291KB

.rsrc Size: 795KB - Virtual size: 795KB

.reloc Size: 44KB - Virtual size: 44KB

.text
Size: 312KB - Virtual size: 311KB

.rdata
Size: 38KB - Virtual size: 38KB

.data
Size: 11KB - Virtual size: 291KB

.rsrc
Size: 795KB - Virtual size: 795KB

.reloc
Size: 44KB - Virtual size: 44KB