2024-06-08_42df6c00e7bdf6357baf9ed5afcaf6d4_mafia

General

Target
2024-06-08_42df6c00e7bdf6357baf9ed5afcaf6d4_mafia
Size 325KB
Sample240608-d4p5dahd24
SHA256 9c88cc717a65f8b4f31ebf1c6aa01ffe32f104cdfa71b73eceb65eaa5e448a57
MD5 42df6c00e7bdf6357baf9ed5afcaf6d4
SHA1 a5b6c905f76cdeb973ad407b378e84fbdefef497
SHA512 e9b291a00719a8856bd411e87df7d8d7a327ab47d1ca8b76f84a2f4f425c2b4ff48319a40260ef9af893f40919cb22218f9579b172afd9106d252f8def3f02db
SSDEEP 6144:T5OGTnncBQmBCjTlOgLA3tjp7OEyXk0Lk3dgvXr:VBTwrBCjTcgLA33aEyUak3dgvb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-08_42df6c00e7bdf6357baf9ed5afcaf6d4_mafia

File Explorer

2024-06-08_42df6c00e7bdf6357baf9ed5afcaf6d4_mafia

.exe 325KB

2024-06-08_42df6c00e7bdf6357baf9ed5afcaf6d4_mafia

IMPHASH 797ab842c0608da5bae820b393680135
SHA256 9c88cc717a65f8b4f31ebf1c6aa01ffe32f104cdfa71b73eceb65eaa5e448a57
MD5 42df6c00e7bdf6357baf9ed5afcaf6d4
SHA1 a5b6c905f76cdeb973ad407b378e84fbdefef497
SHA512 e9b291a00719a8856bd411e87df7d8d7a327ab47d1ca8b76f84a2f4f425c2b4ff48319a40260ef9af893f40919cb22218f9579b172afd9106d252f8def3f02db
SSDEEP 6144:T5OGTnncBQmBCjTlOgLA3tjp7OEyXk0Lk3dgvXr:VBTwrBCjTcgLA33aEyUak3dgvb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddConsoleAliasW LoadLibraryW FindFirstVolumeMountPointW PulseEvent VirtualAlloc GetTapePosition GetLastError lstrlenA CreateFileW ReadFile FlushFileBuffers WriteConsoleW SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer IsValidLocale WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapFree RaiseException RtlUnwind GetCommandLineA HeapSetInformation GetStartupInfoW LCMapStringW GetCPInfo HeapAlloc IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetStringTypeW GetLocaleInfoW HeapReAlloc HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA CloseHandle

user32

PostMessageW CreateCursor RemoveMenu SetMenuInfo DrawEdge GetWindowTextLengthA GetLastInputInfo SetWindowsHookA

ole32

CoReleaseMarshalData

Sharing

General

Malware Config

Signatures

File Explorer

2024-06-08_42df6c00e7bdf6357baf9ed5afcaf6d4_mafia

kernel32

user32

ole32

generic