2024-06-16_2755539c4678926445c27845a01eb1ec_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-16_2755539c4678926445c27845a01eb1ec_mafia
Size

1.2MB
MD5

2755539c4678926445c27845a01eb1ec
SHA1

af840d57d045df85c9f48725f994f2de41c03c56
SHA256

ffa5dff07618eb6ff46107075ea6eda3c932e67a079e3a6d1c2db6a3b0cabbfe
SHA512

ffbbef5902d6e73a756f0ea01e1f1610522e1f353b1842f4faf496b3dd1c813f1c22ff4b48bd4e23897411b29c4fa1c2ebd3bf019be47beff6d58321ceb981da
SSDEEP

24576:5npvNDX4WYDGprFsEog6/CALc5m65zh6TLiRm4cafSs0:DvNDpYKyCALcM66PiReL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-16_2755539c4678926445c27845a01eb1ec_mafia

Files

2024-06-16_2755539c4678926445c27845a01eb1ec_mafia
.exe windows:5 windows x86 arch:x86

7bc6410b101ccffe174bbb5887de20b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CryptGenRandom
CryptAcquireContextA

comdlg32

GetOpenFileNameA

kernel32

GetShortPathNameW
WideCharToMultiByte
GetFileAttributesA
GetModuleFileNameA
GetEnvironmentVariableW
MultiByteToWideChar
GetLocaleInfoA
GetSystemInfo
GetLastError
GetCurrentThreadId
CreateThread
WaitForSingleObject
Module32Next
Module32First
CreateToolhelp32Snapshot
GetTempPathA
VirtualAlloc
VirtualFree
OutputDebugStringA
CloseHandle
GetCurrentProcess
GetCurrentProcessId
CreateFileA
SwitchToFiber
DeleteFiber
CreateFiber
ConvertThreadToFiber
CreateFiberEx
GetFileAttributesExA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetDiskFreeSpaceExA
SetFileAttributesA
SetEndOfFile
SetFilePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetErrorMode
InterlockedIncrement
SetEvent
CreateEventA
InterlockedDecrement
DeleteFileA
VirtualProtect
CreateProcessA
SetDllDirectoryA
SetThreadPriority
GetExitCodeThread
GetTickCount
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
TryEnterCriticalSection
ExitThread
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
GetCurrentThread
QueryPerformanceCounter
CopyFileA
FileTimeToSystemTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GlobalFree
GetCommandLineA
GetProcessHeap
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
PeekNamedPipe
GetFileInformationByHandle
GetCurrentDirectoryW
HeapSize
GetLocaleInfoW
LoadLibraryW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapCreate
GetModuleFileNameW
WriteFile
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LCMapStringW
IsProcessorFeaturePresent
SetLastError
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
HeapReAlloc
MoveFileA
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
CreateDirectoryA
GetFullPathNameA
GetDriveTypeW
EncodePointer
RtlUnwind
DecodePointer
ExitProcess
GetModuleHandleW
HeapFree
HeapAlloc
RaiseException
CreateFileW
LocalAlloc
MulDiv
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
ExpandEnvironmentStringsA
LoadLibraryA
GetProcAddress
FreeLibrary
InterlockedExchange
QueryPerformanceFrequency

user32

KillTimer
GetKeyboardLayout
SetClassLongA
DestroyWindow
CreateWindowExA
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
SetCursor
DestroyCursor
CountClipboardFormats
GetClipboardData
GetSystemMetrics
LoadImageA
SetWindowPos
ReleaseDC
DrawTextA
SendMessageA
SetTimer
TrackMouseEvent
GetMessageExtraInfo
EnumChildWindows
GetDC
GetDlgItem
LoadCursorFromFileA
GetWindowInfo
SetWindowTextA
GetSysColor
AdjustWindowRect
GetWindowLongA
ShowWindow
SetFocus
FlashWindow
InvalidateRect
GetClientRect
EndDialog
EndPaint
FillRect
BeginPaint
DestroyMenu
TrackPopupMenu
AppendMenuA
CreateMenu
CreatePopupMenu
ScreenToClient
DialogBoxParamA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetMessageA
SetWindowsHookExA
PostThreadMessageA
GetForegroundWindow
ValidateRect
DefWindowProcA
SetDlgItemTextW
GetWindowTextA
CloseWindow
SetForegroundWindow
LoadIconA
GetWindowTextW
SetWindowTextW
ClientToScreen
GetParent
MoveWindow
GetWindowRect
UnregisterClassA
MapWindowPoints
GetCursorInfo
ShowCursor
SetWindowLongA
MapVirtualKeyA
GetWindowPlacement
SetPropA
PostMessageA
LoadCursorA
RegisterClassA

gdi32

DeleteDC
GetBitmapBits
CreateDIBSection
CreateCompatibleDC
SetBkColor
CreateFontA
SelectObject
GetDeviceCaps
DeleteObject

shell32

ShellExecuteA

ole32

CoInitialize
PropVariantClear
CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal

oleaut32

OleLoadPicture

winmm

waveInAddBuffer
waveInStart
waveInGetErrorTextA
waveInOpen
waveInReset
waveInClose
waveInPrepareHeader

ddraw

DirectDrawCreate

dsound

ord1

d3d9

Direct3DCreate9

shlwapi

ord219

ws2_32

bind
closesocket
connect
getsockname
getpeername
socket
htons
WSACleanup
WSAStartup
ioctlsocket
WSAAsyncSelect
recvfrom
getaddrinfo
freeaddrinfo
inet_ntoa
gethostname
gethostbyname
gethostbyaddr
getsockopt
setsockopt
WSAGetLastError
WSAAddressToStringA
WSAStringToAddressA
sendto
send
recv
accept
listen
__WSAFDIsSet
inet_addr
select

libeay32

ord341
ord342
ord340

Exports

Exports

Main
s3eExtGet

Sections

.text
Size: 772KB - Virtual size: 771KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bc6410b101ccffe174bbb5887de20b5

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comdlg32

kernel32

user32

gdi32

shell32

ole32

oleaut32

winmm

ddraw

dsound

d3d9

shlwapi

ws2_32

libeay32

Exports

Exports

Sections

.text Size: 772KB - Virtual size: 771KB

.rdata Size: 100KB - Virtual size: 100KB

.data Size: 19KB - Virtual size: 2.2MB

.rsrc Size: 273KB - Virtual size: 273KB

.reloc Size: 60KB - Virtual size: 60KB

.text
Size: 772KB - Virtual size: 771KB

.rdata
Size: 100KB - Virtual size: 100KB

.data
Size: 19KB - Virtual size: 2.2MB

.rsrc
Size: 273KB - Virtual size: 273KB

.reloc
Size: 60KB - Virtual size: 60KB