2024-06-03_0b9ce4973496800e20e92da904c38a5e_mafia

General

Target
2024-06-03_0b9ce4973496800e20e92da904c38a5e_mafia
Size 1.4MB
Sample240603-nwtspsef22
SHA256 c7eb1f125a51f9ec9b0d08c63c11fe6384f770f21c3f255d5f5c6efaf36a1119
MD5 0b9ce4973496800e20e92da904c38a5e
SHA1 8db9b1efb44b883e4dc037909c7692b4a921ca5a
SHA512 b04c4755964eed6e80c89ca54cc0a2635292353a8304701fbdb97931f52fb5c9f37165c4e73fbb3151e003c5de475d272eebd39963956fda91e54061263cb3c1
SSDEEP 12288:q60B8l6jaOC4owiDhTFjpK0GMFgRnAkZFHAtU+:q6FnOCsiDjpFGMeRXFH+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-03_0b9ce4973496800e20e92da904c38a5e_mafia

File Explorer

2024-06-03_0b9ce4973496800e20e92da904c38a5e_mafia

.exe 1.4MB

2024-06-03_0b9ce4973496800e20e92da904c38a5e_mafia

IMPHASH e4096a595380f3b2a3dd2f7f7060d845
SHA256 c7eb1f125a51f9ec9b0d08c63c11fe6384f770f21c3f255d5f5c6efaf36a1119
MD5 0b9ce4973496800e20e92da904c38a5e
SHA1 8db9b1efb44b883e4dc037909c7692b4a921ca5a
SHA512 b04c4755964eed6e80c89ca54cc0a2635292353a8304701fbdb97931f52fb5c9f37165c4e73fbb3151e003c5de475d272eebd39963956fda91e54061263cb3c1
SSDEEP 12288:q60B8l6jaOC4owiDhTFjpK0GMFgRnAkZFHAtU+:q6FnOCsiDjpFGMeRXFH+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

152149

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetTickCount Sleep GetProcAddress VirtualAlloc LoadLibraryA VirtualProtect InterlockedCompareExchange IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID CloseHandle CreateFileW SetStdHandle SetFilePointer GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc FlushFileBuffers GetConsoleMode GetConsoleCP RtlUnwind IsValidCodePage GetOEMCP GetACP HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetLastError HeapFree WriteConsoleW GetFileType GetStdHandle GetModuleFileNameW EncodePointer DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent ExitProcess WriteFile HeapCreate HeapDestroy TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread RaiseException GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection SetConsoleCtrlHandler LoadLibraryW HeapSize GetLocaleInfoW FatalAppExitA FreeLibrary InterlockedExchange GetCPInfo InitializeCriticalSection

user32

EndPaint DestroyWindow GetMessageA RegisterClassExA PostQuitMessage LoadStringA LoadIconA BeginPaint TranslateMessage CreateWindowExA TranslateAcceleratorA EndDialog DefWindowProcA LoadAcceleratorsA ShowWindow DispatchMessageA UpdateWindow LoadCursorA DialogBoxParamA

Sharing

General

Malware Config

Signatures

File Explorer

2024-06-03_0b9ce4973496800e20e92da904c38a5e_mafia

kernel32

user32

generic