2024-06-14_c65600db30efbaf1b23175661036b30a_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-14_c65600db30efbaf1b23175661036b30a_mafia
Size

228KB
MD5

c65600db30efbaf1b23175661036b30a
SHA1

1c78b855355bae8f63864523baf5877d06ba3295
SHA256

958ea5bd686ff7452b9d1b4fcb97b93e99e0e8f84a8e9c8b70af010ea2ee58ea
SHA512

6511ae83bcf2b9a5780c6202ce10fd46558b9eaf9890661f5f4d09e2964514aeb6317c729b0f5c2ce6f80f1b84db8f987baf744115f75d17b327b39cbbc23262
SSDEEP

6144:FBY4cs8V23Hn1Nn345QsGKmpTR2oCmyl:bY4PT3H1NkQRKMTRkl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-14_c65600db30efbaf1b23175661036b30a_mafia

Files

2024-06-14_c65600db30efbaf1b23175661036b30a_mafia
.exe windows:5 windows x86 arch:x86

aa322093b2d22a727465ff4f3557cdf3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

freeimage

_FreeImage_Load@12
_FreeImage_FIFSupportsReading@4
_FreeImage_Allocate@24
_FreeImage_SetOutputMessage@4
_FreeImage_GetBits@4
_FreeImage_GetFileType@8
_FreeImage_GetColorType@4
_FreeImage_GetPitch@4
_FreeImage_GetWidth@4
_FreeImage_GetFIFFromFilename@4
_FreeImage_Save@16
_FreeImage_GetBPP@4
_FreeImage_GetHeight@4

nppi32_65

nppiMalloc_8u_C1
nppiFilterBox_8u_C1R
nppiFree

nppc32_65

nppGetLibVersion

kernel32

GetLocaleInfoA
GetUserDefaultLCID
IsValidLocale
WriteConsoleW
CreateFileA
SetEndOfFile
GetStringTypeW
EnumSystemLocalesA
GetProcAddress
FreeLibrary
QueryPerformanceCounter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
CloseHandle
SwitchToThread
GetLastError
GetModuleFileNameA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
LocalAlloc
GetSystemDirectoryW
CreateFileW
LocalFree
GetModuleHandleW
SetLastError
LoadLibraryExW
GetModuleFileNameW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
ExitProcess
GetCommandLineA
HeapSetInformation
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetStartupInfoW
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
WriteFile
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryW
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetSystemTimeAsFileTime
HeapSize
GetProcessHeap

Exports

Exports

NvOptimusEnablementCuda

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa322093b2d22a727465ff4f3557cdf3

Headers

DLL Characteristics

File Characteristics

Imports

freeimage

nppi32_65

nppc32_65

kernel32

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 6KB - Virtual size: 17KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 6KB - Virtual size: 17KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 16KB - Virtual size: 16KB