2024-06-03_c67cddbb3eb7d61aab1ef530fe445194_mafia

General

Target
2024-06-03_c67cddbb3eb7d61aab1ef530fe445194_mafia
Size 1.2MB
Sample240603-mpe6asbf2t
SHA256 8b39ee199dbbeee33299136a6573a1055044bd35cea51d80366e6584c166ff18
MD5 c67cddbb3eb7d61aab1ef530fe445194
SHA1 f18f70abee7c7790cf3b7a2280b113a5663e2342
SHA512 385d71c0b5adf22ed29e74d14543566d90d48c77068ab9833bce0b6dd4802e5bea4cce80ce20614db26279059ead1804319b67767184cac276d914a3957bc9fb
SSDEEP 24576:Xp99Mea3HsU0t8y4hM0D42gsqjnhMgeiCl7G0nehbGZpbD:XtM3x0tN4xD42cDmg27RnWGj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-03_c67cddbb3eb7d61aab1ef530fe445194_mafia

File Explorer

2024-06-03_c67cddbb3eb7d61aab1ef530fe445194_mafia

.exe 1.2MB

2024-06-03_c67cddbb3eb7d61aab1ef530fe445194_mafia

IMPHASH 7f653cbfa23a23fa0652b5a610933bae
SHA256 8b39ee199dbbeee33299136a6573a1055044bd35cea51d80366e6584c166ff18
MD5 c67cddbb3eb7d61aab1ef530fe445194
SHA1 f18f70abee7c7790cf3b7a2280b113a5663e2342
SHA512 385d71c0b5adf22ed29e74d14543566d90d48c77068ab9833bce0b6dd4802e5bea4cce80ce20614db26279059ead1804319b67767184cac276d914a3957bc9fb
SSDEEP 24576:Xp99Mea3HsU0t8y4hM0D42gsqjnhMgeiCl7G0nehbGZpbD:XtM3x0tN4xD42cDmg27RnWGj
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

402566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\DL_04\src\NVIDIASteamLauncher\SteamLauncher\Release\NVIDIA.SteamLauncher.pdb

kernel32

GetModuleFileNameW GetModuleHandleW GetCurrentThreadId CreateDirectoryW GetCurrentDirectoryW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CreateSemaphoreW GetProcessHeap WaitForSingleObject ReleaseSemaphore ResumeThread CreateThread Sleep GetExitCodeProcess LocalFree FormatMessageW GetLastError CreateProcessW HeapAlloc CloseHandle HeapFree CreateFileW WriteConsoleW SetEnvironmentVariableA CompareStringW CreateFileA SetStdHandle IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID HeapReAlloc GetStringTypeW HeapSize GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA LoadLibraryW GetTimeZoneInformation InterlockedCompareExchange InterlockedExchange WideCharToMultiByte InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer MultiByteToWideChar RaiseException RtlUnwind GetCurrentProcessId GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetProcAddress ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW LCMapStringW GetCPInfo IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetACP GetOEMCP IsValidCodePage WriteFile GetStdHandle HeapCreate SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer SetEndOfFile

iphlpapi

GetAdaptersAddresses GetAdaptersInfo

ws2_32

socket connect bind listen getsockname select recv send WSAIoctl setsockopt closesocket htonl ntohs ntohl getaddrinfo freeaddrinfo gethostname gethostbyname inet_ntoa WSAStartup

Sharing

General

Malware Config

Signatures

File Explorer

2024-06-03_c67cddbb3eb7d61aab1ef530fe445194_mafia

kernel32

iphlpapi

ws2_32

generic