2024-05-29_82f7a39bd911ad76ad0c27982cb71504_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-29_82f7a39bd911ad76ad0c27982cb71504_mafia
Size

7.9MB
MD5

82f7a39bd911ad76ad0c27982cb71504
SHA1

164b278735401a39677ed812deba3862f34e6807
SHA256

40448b7838b50271f4a6f0d90a4a55c772deeeae45d506c9de6a99e6176c38ab
SHA512

ae45ec7ac6927747247e5871dfdd3eb0b8fa1345624d71fabd6a29d5f39a08b15e0020f698c97d5346b83ba20fa0530818f73036e337daee038c4d83cdb74a5c
SSDEEP

196608:gOERb5nMLxF7ttOn0J1S+hJUw4aCY3AOz4Fexh//t+NMWV8c6:9ERb5nMLxF7ttOnGS+caCyAO6+h//t+q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-29_82f7a39bd911ad76ad0c27982cb71504_mafia

Files

2024-05-29_82f7a39bd911ad76ad0c27982cb71504_mafia
.exe windows:5 windows x86 arch:x86

5525c057f4de320766bd9fb10d14a5e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
SetEnvironmentVariableA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcess
SetThreadPriority
IsWow64Process
SetConsoleCtrlHandler
GetSystemInfo
GetModuleFileNameA
SetThreadAffinityMask
GetVersionExA
CreateProcessA
GetLocaleInfoW
FormatMessageA
DeleteFileA
GetTempPathA
GetFileAttributesA
FindClose
RemoveDirectoryA
GetLastError
FindFirstFileA
CreateDirectoryA
FindNextFileA
GetTickCount
MultiByteToWideChar
GetCurrentThreadId
Sleep
TerminateThread
GetModuleHandleA
GetProcAddress
ReleaseSemaphore
CreateWaitableTimerA
SetWaitableTimer
SystemTimeToFileTime
ResumeThread
CreateDirectoryW
MoveFileExW
CreateSemaphoreA
FindNextFileW
FindFirstFileW
DeviceIoControl
RemoveDirectoryW
CompareStringW
WriteConsoleW
GetExitCodeProcess
CreatePipe
SetStdHandle
GetCurrentDirectoryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
IsValidLocale
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
CreateEventA
GetLocaleInfoA
SetEvent
WaitForSingleObject
GetUserDefaultLCID
GetTimeZoneInformation
HeapSize
LCMapStringW
GetStartupInfoW
SetHandleCount
GetConsoleCP
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
HeapCreate
IsProcessorFeaturePresent
GetModuleFileNameW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetDriveTypeA
GetFileInformationByHandle
RtlUnwind
FindFirstFileExA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetCurrentDirectoryA
GetCurrentDirectoryA
GetDriveTypeW
HeapSetInformation
GetCommandLineA
GetCPInfo
GetModuleHandleW
MoveFileA
GetDateFormatA
GetTimeFormatA
HeapReAlloc
EncodePointer
DecodePointer
GetLocalTime
DuplicateHandle
HeapAlloc
OpenEventA
GetProcessHeap
HeapFree
ExpandEnvironmentStringsA
GetFileType
WaitForMultipleObjects
PeekNamedPipe
SleepEx
VirtualProtect
GetModuleHandleExA
VirtualQuery
VirtualFree
VirtualAlloc
SetLastError
CreateFileMappingA
MapViewOfFile
CreateFileW
CreateFileA
UnmapViewOfFile
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetFullPathNameW
GetFullPathNameA
GetFileAttributesExW
DeleteFileW
GetFileAttributesW
GetTempPathW
GetFileSize
FlushFileBuffers
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
FormatMessageW
GetSystemTimeAsFileTime
GetSystemTime
GetCurrentProcessId
LoadLibraryW
UnlockFileEx
LockFileEx
LockFile
UnlockFile
AreFileApisANSI
GetExitCodeThread
TlsFree
TlsAlloc
SetConsoleTitleW
SetConsoleCursorPosition
ReadConsoleInputA
GetNumberOfConsoleInputEvents
SetConsoleMode
GetConsoleMode
SetConsoleScreenBufferSize
SetConsoleDisplayMode
GetStdHandle
LocalFree
GetCurrentThread
OutputDebugStringA
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalMemoryStatus
ExitProcess
lstrlenA
GetACP
GetThreadLocale
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InterlockedCompareExchange
DebugBreak
IsDebuggerPresent
ExitThread
CreateThread
WaitForSingleObjectEx
ResetEvent
WideCharToMultiByte
SwitchToThread
TlsGetValue
TlsSetValue
FreeLibrary
SetEnvironmentVariableW

ws2_32

WSACleanup
bind
socket
sendto
__WSAFDIsSet
closesocket
listen
ioctlsocket
ntohs
htons
htonl
ntohl
recvfrom
WSAStartup
WSASetLastError
select
WSAGetLastError
accept
connect
getpeername
gethostname
freeaddrinfo
getsockname
setsockopt
WSAIoctl
send
getaddrinfo
recv
getsockopt

advapi32

InitializeSecurityDescriptor
RegQueryValueExA
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptAcquireContextA
CryptCreateHash
SetSecurityDescriptorDacl
RegOpenKeyExA
RegCloseKey

wldap32

ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord46
ord41
ord27
ord301
ord33
ord200
ord32
ord79
ord35

dinput8

DirectInput8Create

opengl32

glGetFloatv
glGenTextures
glDeleteTextures
glGetIntegerv
glGetTexImage
glCopyTexSubImage2D
glTexImage2D
glTexSubImage2D
wglCreateContext
wglGetProcAddress
glVertex2i
glRectf
glScissor
glTexCoord2f
glVertex2f
glColorPointer
glNormalPointer
glTexCoordPointer
glGetString
glClearDepth
glFrontFace
glTranslatef
glTexParameterf
glLoadMatrixf
glMultMatrixf
wglDeleteContext
glIsEnabled
glLightf
glLightfv
glMaterialfv
glColorMaterial
glMaterialf
glLightModeli
glPolygonOffset
glLineWidth
glPointSize
glDrawElements
glClipPlane
glDepthFunc
glPolygonMode
glEnableClientState
glVertexPointer
glStencilMask
glCullFace
glDrawArrays
glDisableClientState
glTexGeni
glAlphaFunc
glTexEnvf
glTexEnvi
glPixelStorei
glReadBuffer
glReadPixels
glDrawBuffer
glViewport
glFogf
glFogi
glHint
glFogfv
glPushAttrib
glShadeModel
glColorMask
glBlendFunc
glStencilFunc
glStencilOp
glMatrixMode
glPushMatrix
glLoadIdentity
glBegin
glColor4ub
glVertex3f
glEnd
glPopMatrix
glPopAttrib
glLightModelfv
glTexParameteri
glDisable
glEnable
glBindTexture
glGetError
glClearColor
glDepthMask
glClear
glFlush
wglMakeCurrent

user32

GetWindowRect
GetForegroundWindow
GetMessageA
PostThreadMessageA
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LoadImageA
RegisterClassExA
CreateWindowExA
UpdateWindow
MoveWindow
GetDoubleClickTime
SetActiveWindow
LoadCursorA
GetCursorPos
GetMessagePos
SetCursorPos
GetCursorInfo
ShowCursor
DestroyCursor
DispatchMessageA
GetCapture
SetCapture
GetSystemMetrics
SendMessageTimeoutW
UnregisterClassA
DestroyWindow
PostQuitMessage
PeekMessageA
GetActiveWindow
GetFocus
GetWindowPlacement
EnumDisplaySettingsA
ChangeDisplaySettingsA
SetWindowPos
AdjustWindowRect
SetWindowLongA
SetWindowPlacement
ReleaseDC
GetDC
GetClientRect
CreateIconIndirect
SetCursor
DefWindowProcA
ToAsciiEx
GetKeyboardState
MapVirtualKeyA
GetKeyboardLayout
SetForegroundWindow
ShowWindow
EndPaint
BeginPaint
ClientToScreen
ReleaseCapture

gdi32

GetDeviceGammaRamp
DeleteObject
DeleteDC
SetPixel
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SwapBuffers
DescribePixelFormat
GetPixelFormat
SetPixelFormat
ChoosePixelFormat
SetDeviceGammaRamp
StretchDIBits

shell32

SHGetSpecialFolderPathA

ole32

PropVariantClear
CoInitialize
CoUninitialize
StringFromCLSID
CoTaskMemFree
CoCreateInstance

winmm

waveInClose
waveOutPrepareHeader
waveOutOpen
waveOutClose
waveInAddBuffer
waveOutWrite
waveInGetNumDevs
waveInGetDevCapsA
waveOutGetNumDevs
waveOutGetDevCapsA
timeGetTime
waveInUnprepareHeader
waveInPrepareHeader
waveInOpen
waveInReset
waveInStart
waveInStop
waveOutUnprepareHeader

Exports

Exports

alAuxiliaryEffectSlotf
alAuxiliaryEffectSlotfv
alAuxiliaryEffectSloti
alAuxiliaryEffectSlotiv
alBuffer3f
alBuffer3i
alBufferData
alBufferSamplesSOFT
alBufferSubDataSOFT
alBufferSubSamplesSOFT
alBufferf
alBufferfv
alBufferi
alBufferiv
alDeferUpdatesSOFT
alDeleteAuxiliaryEffectSlots
alDeleteBuffers
alDeleteEffects
alDeleteFilters
alDeleteSources
alDisable
alDistanceModel
alDopplerFactor
alDopplerVelocity
alEffectf
alEffectfv
alEffecti
alEffectiv
alEnable
alFilterf
alFilterfv
alFilteri
alFilteriv
alGenAuxiliaryEffectSlots
alGenBuffers
alGenEffects
alGenFilters
alGenSources
alGetAuxiliaryEffectSlotf
alGetAuxiliaryEffectSlotfv
alGetAuxiliaryEffectSloti
alGetAuxiliaryEffectSlotiv
alGetBoolean
alGetBooleanv
alGetBuffer3f
alGetBuffer3i
alGetBufferSamplesSOFT
alGetBufferf
alGetBufferfv
alGetBufferi
alGetBufferiv
alGetDouble
alGetDoublev
alGetEffectf
alGetEffectfv
alGetEffecti
alGetEffectiv
alGetEnumValue
alGetError
alGetFilterf
alGetFilterfv
alGetFilteri
alGetFilteriv
alGetFloat
alGetFloatv
alGetInteger
alGetIntegerv
alGetListener3f
alGetListener3i
alGetListenerf
alGetListenerfv
alGetListeneri
alGetListeneriv
alGetProcAddress
alGetSource3dSOFT
alGetSource3f
alGetSource3i
alGetSource3i64SOFT
alGetSourcedSOFT
alGetSourcedvSOFT
alGetSourcef
alGetSourcefv
alGetSourcei
alGetSourcei64SOFT
alGetSourcei64vSOFT
alGetSourceiv
alGetString
alIsAuxiliaryEffectSlot
alIsBuffer
alIsBufferFormatSupportedSOFT
alIsEffect
alIsEnabled
alIsExtensionPresent
alIsFilter
alIsSource
alListener3f
alListener3i
alListenerf
alListenerfv
alListeneri
alListeneriv
alProcessUpdatesSOFT
alSource3dSOFT
alSource3f
alSource3i
alSource3i64SOFT
alSourcePause
alSourcePausev
alSourcePlay
alSourcePlayv
alSourceQueueBuffers
alSourceRewind
alSourceRewindv
alSourceStop
alSourceStopv
alSourceUnqueueBuffers
alSourcedSOFT
alSourcedvSOFT
alSourcef
alSourcefv
alSourcei
alSourcei64SOFT
alSourcei64vSOFT
alSourceiv
alSpeedOfSound
alcCaptureCloseDevice
alcCaptureOpenDevice
alcCaptureSamples
alcCaptureStart
alcCaptureStop
alcCloseDevice
alcCreateContext
alcDestroyContext
alcGetContextsDevice
alcGetCurrentContext
alcGetEnumValue
alcGetError
alcGetIntegerv
alcGetProcAddress
alcGetString
alcGetThreadContext
alcIsExtensionPresent
alcIsRenderFormatSupportedSOFT
alcLoopbackOpenDeviceSOFT
alcMakeContextCurrent
alcOpenDevice
alcProcessContext
alcRenderSamplesSOFT
alcSetThreadContext
alcSuspendContext
luaJIT_setmode
luaJIT_version_2_0_2
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_error
luaL_execresult
luaL_fileresult
luaL_findtable
luaL_getmetafield
luaL_gsub
luaL_loadbuffer
luaL_loadbufferx
luaL_loadfile
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlib
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffer
luaL_pushresult
luaL_ref
luaL_register
luaL_traceback
luaL_typerror
luaL_unref
luaL_where
lua_atpanic
lua_call
lua_checkstack
lua_close
lua_concat
lua_cpcall
lua_createtable
lua_dump
lua_equal
lua_error
lua_gc
lua_getallocf
lua_getfenv
lua_getfield
lua_gethook
lua_gethookcount
lua_gethookmask
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_insert
lua_iscfunction
lua_isnumber
lua_isstring
lua_isuserdata
lua_lessthan
lua_load
lua_loadx
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_objlen
lua_pcall
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawset
lua_rawseti
lua_remove
lua_replace
lua_resume
lua_setallocf
lua_setfenv
lua_setfield
lua_sethook
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_status
lua_toboolean
lua_tocfunction
lua_tointeger
lua_tolstring
lua_tonumber
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_xmove
lua_yield
luaopen_base
luaopen_bit
luaopen_debug
luaopen_ffi
luaopen_io
luaopen_jit
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5525c057f4de320766bd9fb10d14a5e1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

advapi32

wldap32

dinput8

opengl32

user32

gdi32

shell32

ole32

winmm

Exports

Exports

Sections

.text Size: 5.7MB - Virtual size: 5.7MB

.rdata Size: 1.8MB - Virtual size: 1.8MB

.data Size: 95KB - Virtual size: 192KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 311KB - Virtual size: 311KB

.text
Size: 5.7MB - Virtual size: 5.7MB

.rdata
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 95KB - Virtual size: 192KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 311KB - Virtual size: 311KB