Static task
static1
Behavioral task
behavioral1
Sample
2024-06-09_ff02557325154e6ec86713867926a050_mafia.exe
Resource
win7-20240215-en
General
-
Target
2024-06-09_ff02557325154e6ec86713867926a050_mafia
-
Size
1.0MB
-
MD5
ff02557325154e6ec86713867926a050
-
SHA1
b6bef6ae48f0a654e47ef6c7a63cb6744fce1681
-
SHA256
ee414ce8c39cc601f41f5071f316ab538b9332f71e4b86c015392cd0c72b39b1
-
SHA512
0d4399cd00e28fe4da21bd76b276f763614d715e02a1ac2668557474fe15cd0f99836af9d09188ecce10eec69cf2b5aee9741da8261810886014edea6d5604bf
-
SSDEEP
24576:w2O7UudHFpLrK77Z+O/z2wuRTUL4WCXaYc/:NO71OJ2bq7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-09_ff02557325154e6ec86713867926a050_mafia
Files
-
2024-06-09_ff02557325154e6ec86713867926a050_mafia.exe windows:5 windows x86 arch:x86
425799d77b5f5f1323ee95a4543bb3be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
FindClose
GetCurrentThreadId
LockResource
GlobalAlloc
GetCurrentProcess
GetTickCount
DeleteFileA
SetFilePointer
GetModuleHandleA
GetLastError
GetCurrentProcessId
GlobalSize
LocalFlags
GlobalFlags
IsDebuggerPresent
FlushFileBuffers
MoveFileA
IsProcessorFeaturePresent
GlobalHandle
GetDriveTypeA
GetStdHandle
LoadResource
FindResourceA
GetProcessHeap
CloseHandle
GetProcAddress
CompareStringW
CreateFileW
GetTimeZoneInformation
SetEndOfFile
GetDriveTypeW
SetStdHandle
WriteConsoleW
HeapSize
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
Sleep
GetStringTypeW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
SetHandleCount
ReadFile
MultiByteToWideChar
LCMapStringW
RtlUnwind
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
SetEnvironmentVariableA
GetFullPathNameA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
TerminateProcess
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
GetModuleHandleW
ExitProcess
DecodePointer
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileExA
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
HeapDestroy
EncodePointer
WriteFile
GetModuleFileNameW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
gdi32
GetGraphicsMode
GetStretchBltMode
GetRandomRgn
SetPixel
SetTextAlign
GetClipRgn
UpdateColors
SetSystemPaletteUse
GetBkColor
GetMapMode
GetDCPenColor
GetTextCharacterExtra
GetNearestPaletteIndex
GetTextCharset
SetTextJustification
GetFontLanguageInfo
GetTextAlign
GetSystemPaletteUse
GetMetaRgn
GetCurrentObject
GetTextColor
GetTextCharsetInfo
GetFontUnicodeRanges
GetDeviceCaps
user32
SendMessageA
GetMenuContextHelpId
IsWindowUnicode
GetWindowLongA
SetFocus
EnableWindow
WindowFromDC
GetDC
EndPaint
MoveWindow
GetDlgItem
BeginPaint
LoadIconA
GetInputState
GetForegroundWindow
CheckDlgButton
GetWindowDC
GetMenuCheckMarkDimensions
PostMessageA
GetMenu
GetMenuState
GetMenuItemCount
SetWindowTextA
ShowWindow
GetDlgItemInt
SetDlgItemTextA
GetCursor
GetMenuItemID
IsWindowEnabled
RemovePropA
EndDialog
GetScrollPos
GetQueueStatus
DrawTextA
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ