Static task
static1
Behavioral task
behavioral1
Sample
2024-06-09_777614b7648dbb4d25e6975eb3792e78_mafia.exe
Resource
win7-20240508-en
General
-
Target
2024-06-09_777614b7648dbb4d25e6975eb3792e78_mafia
-
Size
1003KB
-
MD5
777614b7648dbb4d25e6975eb3792e78
-
SHA1
2c0e9f17c67fe07b27f1714eda4b1c91be24c1c3
-
SHA256
a434ff12e30ecf60b58aed4ab761f0c98b0c2aa4312efcb9dd89c86c36dffb83
-
SHA512
98452dc98db577e5357034765fc5c9393ba337fb6608d79f83f9eaf4aed496480f5c5730860c634c13da6cb4b00137d384dec94fe75bb98b094e06209033a5b8
-
SSDEEP
24576:jIBtdrlHsSOEf0moNbLn6Pf07AZ3xyJNlBt/pT:jM9i6n0cox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-09_777614b7648dbb4d25e6975eb3792e78_mafia
Files
-
2024-06-09_777614b7648dbb4d25e6975eb3792e78_mafia.exe windows:5 windows x86 arch:x86
15b37357933ce312707fbec1e8e0a28c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalHandle
GetCurrentProcess
GetFileType
LocalFlags
GlobalAlloc
FlushFileBuffers
GetModuleHandleA
GetDriveTypeA
QueryPerformanceCounter
GlobalFlags
FindResourceA
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
GetVersion
GetTickCount
LoadResource
GetLastError
GetCurrentThreadId
GetFileTime
SizeofResource
DeleteFileA
SetFilePointer
GlobalSize
GetProcAddress
CompareStringW
CreateFileW
GetTimeZoneInformation
SetEndOfFile
GetDriveTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
HeapSize
SetStdHandle
WriteConsoleW
Sleep
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
SetHandleCount
ReadFile
MultiByteToWideChar
LCMapStringW
RtlUnwind
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileA
PeekNamedPipe
GetFileInformationByHandle
CloseHandle
GetFullPathNameA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetEnvironmentVariableA
GetModuleFileNameW
GetStdHandle
GetLocaleInfoW
LoadLibraryW
HeapFree
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
DecodePointer
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileExA
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
HeapDestroy
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
gdi32
SetSystemPaletteUse
GetMapMode
GetMetaRgn
SetPixel
GetFontLanguageInfo
GetTextCharset
SetTextColor
GetBkColor
GetDCBrushColor
GetTextCharsetInfo
GetNearestColor
GetTextAlign
GetDCPenColor
SetTextAlign
GetRandomRgn
GetFontUnicodeRanges
SetTextJustification
GetDeviceCaps
GetGraphicsMode
UpdateColors
GetObjectType
user32
GetMenuItemCount
GetDlgItemInt
IsWindowUnicode
GetWindowContextHelpId
GetWindowDC
EnableWindow
GetMenuState
PostMessageA
LoadIconA
SendMessageA
GetForegroundWindow
IsWindowEnabled
GetMenuContextHelpId
GetCursor
SetFocus
GetMenuCheckMarkDimensions
MoveWindow
GetPropA
SetDlgItemTextA
EndPaint
RemovePropA
DrawTextA
EndDialog
SetWindowTextA
GetInputState
GetDlgItem
BeginPaint
GetScrollPos
GetKeyboardType
ShowWindow
GetDC
CheckDlgButton
GetQueueStatus
GetWindowLongA
CallWindowProcA
GetMenuItemID
WindowFromDC
Sections
.text Size: 663KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ