2024-05-28_d71a99b74a893de9921a9f8f30e72c49_mafia_magniber_qakbot

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-28_d71a99b74a893de9921a9f8f30e72c49_mafia_magniber_qakbot
Size

7.2MB
MD5

d71a99b74a893de9921a9f8f30e72c49
SHA1

3b74be21de508b48591d1926dee0f290d0f1ab8e
SHA256

7f1e5eb8b61cd515ce4791d43e0f7d80745847982c42c632d46517e3a7f4773f
SHA512

341434601701580ad5b0df45000a8bc32f66d16dff0868016d0deee317613053e14a9ec68be0e9214d32507450e22e9345ae1e8f422da889bee8318f441c0edf
SSDEEP

98304:YVWMzjkgx9QIZjwmzfa4x6XFOGJVupOPtQA8J641bqvPwqf7PFzpm:YVWMzjtQIa+faLFOL0+6Wbqgqf7PFzQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-28_d71a99b74a893de9921a9f8f30e72c49_mafia_magniber_qakbot

Files

2024-05-28_d71a99b74a893de9921a9f8f30e72c49_mafia_magniber_qakbot
.exe windows:5 windows x86 arch:x86

935a6c1493991cdf420b0d63ffb0889d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AreFileApisANSI
ChangeTimerQueueTimer
CloseHandle
CompareStringW
CreateDirectoryW
CreateEventW
CreateFileW
CreateSemaphoreW
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
DecodePointer
DeleteCriticalSection
DeleteFileW
DeleteTimerQueueTimer
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNumaHighestNodeNumber
GetOEMCP
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringW
QueryDepthSList
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RegisterWaitForSingleObject
ReleaseSemaphore
RtlUnwind
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetThreadAffinityMask
SetThreadExecutionState
SetThreadPriority
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnregisterWait
UnregisterWaitEx
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

openal32

alBufferData
alDeleteBuffers
alDeleteSources
alGenBuffers
alGenSources
alGetError
alGetSourcei
alIsSource
alListener3f
alSource3f
alSourcePause
alSourcePlay
alSourceQueueBuffers
alSourceStop
alSourceUnqueueBuffers
alSourcef
alcCloseDevice
alcCreateContext
alcDestroyContext
alcGetContextsDevice
alcGetError
alcMakeContextCurrent
alcOpenDevice

sdl2

SDL_AllocFormat
SDL_ClearError
SDL_ConvertSurfaceFormat
SDL_CreateColorCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRenderer
SDL_CreateTexture
SDL_CreateTextureFromSurface
SDL_CreateThread
SDL_CreateWindow
SDL_Delay
SDL_DestroyMutex
SDL_DestroyRenderer
SDL_DestroyTexture
SDL_DestroyWindow
SDL_Error
SDL_FreeFormat
SDL_FreeSurface
SDL_GetDisplayMode
SDL_GetDisplayUsableBounds
SDL_GetError
SDL_GetNumDisplayModes
SDL_GetPixelFormatName
SDL_GetRGBA
SDL_GetRenderDrawColor
SDL_GetRendererInfo
SDL_GetTicks
SDL_GetWindowFlags
SDL_GetWindowSize
SDL_Init
SDL_LoadFile_RW
SDL_LoadFunction
SDL_LoadObject
SDL_LockMutex
SDL_LockSurface
SDL_LockTexture
SDL_Log
SDL_MapRGB
SDL_MapRGBA
SDL_MaximizeWindow
SDL_PollEvent
SDL_PushEvent
SDL_QueryTexture
SDL_Quit
SDL_RWFromFile
SDL_ReadLE16
SDL_ReadLE32
SDL_RenderClear
SDL_RenderCopyExF
SDL_RenderFillRect
SDL_RenderPresent
SDL_RenderSetClipRect
SDL_RenderSetScale
SDL_RestoreWindow
SDL_SetColorKey
SDL_SetCursor
SDL_SetError
SDL_SetHint
SDL_SetRenderDrawColor
SDL_SetRenderTarget
SDL_SetTextureAlphaMod
SDL_SetTextureBlendMode
SDL_SetTextureColorMod
SDL_SetWindowDisplayMode
SDL_SetWindowFullscreen
SDL_SetWindowPosition
SDL_SetWindowSize
SDL_ShowCursor
SDL_StartTextInput
SDL_StopTextInput
SDL_UnloadObject
SDL_UnlockMutex
SDL_UnlockSurface
SDL_UnlockTexture
SDL_WaitThread
SDL_acosf
SDL_atan2f
SDL_calloc
SDL_ceilf
SDL_cosf
SDL_fabs
SDL_fabsf
SDL_floorf
SDL_fmodf
SDL_free
SDL_isdigit
SDL_isspace
SDL_malloc
SDL_memcmp
SDL_memcpy
SDL_memset
SDL_pow
SDL_qsort
SDL_realloc
SDL_sinf
SDL_snprintf
SDL_sqrt
SDL_sqrtf
SDL_sscanf
SDL_strchr
SDL_strcmp
SDL_strlcpy
SDL_strlen
SDL_strncasecmp
SDL_strncmp
SDL_strrchr
SDL_strstr
SDL_strtol
SDL_strtoll
SDL_tanf
SDL_toupper

shell32

SHGetFolderPathA
ShellExecuteW

user32

GetSystemMetrics

Exports

Exports

IMG_Init
IMG_Linked_Version
IMG_Load
IMG_LoadBMP_RW
IMG_LoadCUR_RW
IMG_LoadGIF_RW
IMG_LoadICO_RW
IMG_LoadJPG_RW
IMG_LoadLBM_RW
IMG_LoadPCX_RW
IMG_LoadPNG_RW
IMG_LoadPNM_RW
IMG_LoadSVG_RW
IMG_LoadTGA_RW
IMG_LoadTIF_RW
IMG_LoadTexture
IMG_LoadTextureTyped_RW
IMG_LoadTexture_RW
IMG_LoadTyped_RW
IMG_LoadWEBP_RW
IMG_LoadXCF_RW
IMG_LoadXPM_RW
IMG_LoadXV_RW
IMG_Load_RW
IMG_Quit
IMG_ReadXPMFromArray
IMG_SaveJPG
IMG_SaveJPG_RW
IMG_SavePNG
IMG_SavePNG_RW
IMG_isBMP
IMG_isCUR
IMG_isGIF
IMG_isICO
IMG_isJPG
IMG_isLBM
IMG_isPCX
IMG_isPNG
IMG_isPNM
IMG_isSVG
IMG_isTIF
IMG_isWEBP
IMG_isXCF
IMG_isXPM
IMG_isXV

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 592KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text1
Size: 768KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc1
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Geddon
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

935a6c1493991cdf420b0d63ffb0889d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

openal32

sdl2

shell32

user32

Exports

Exports

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 436KB - Virtual size: 436KB

.data Size: 592KB - Virtual size: 592KB

_RDATA Size: 272KB - Virtual size: 272KB

.reloc Size: 212KB - Virtual size: 212KB

.text1 Size: 768KB - Virtual size: 768KB

.adata Size: 64KB - Virtual size: 64KB

.data1 Size: 192KB - Virtual size: 192KB

.reloc1 Size: 64KB - Virtual size: 64KB

.pdata Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 268KB - Virtual size: 268KB

.Geddon Size: 8KB - Virtual size: 8KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 436KB - Virtual size: 436KB

.data
Size: 592KB - Virtual size: 592KB

_RDATA
Size: 272KB - Virtual size: 272KB

.reloc
Size: 212KB - Virtual size: 212KB

.text1
Size: 768KB - Virtual size: 768KB

.adata
Size: 64KB - Virtual size: 64KB

.data1
Size: 192KB - Virtual size: 192KB

.reloc1
Size: 64KB - Virtual size: 64KB

.pdata
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 268KB - Virtual size: 268KB

.Geddon
Size: 8KB - Virtual size: 8KB