2024-06-16_c1875030b9b10b0407d1171f969a9ed7_mafia_sakula

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-16_c1875030b9b10b0407d1171f969a9ed7_mafia_sakula
Size

3.2MB
MD5

c1875030b9b10b0407d1171f969a9ed7
SHA1

2c9b22cb9e381c48601c70dffa11036893e098ff
SHA256

5083227fd0ab017b57c4ab7585b73f2848251cd1449748d23d6d1ae9a7551df7
SHA512

c90df815fa261d1a044cff1e4c2a12c4ca59eac17c0a6cc93c939ac60962bc12db0d757ad38033fdb56f48ca659ce73b3769d6a24b76340ce13701b651950993
SSDEEP

49152:SPdUZgH3KUi4oEOZr/CGZ8l2uUMWgbAwye3JRuGF:SPNH36bZr/NZ8guUm/ye5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-16_c1875030b9b10b0407d1171f969a9ed7_mafia_sakula

Files

2024-06-16_c1875030b9b10b0407d1171f969a9ed7_mafia_sakula
.exe windows:5 windows x86 arch:x86

d0b8182f3df1c93916f489d0ce149114

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImageVerticalResolution
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipBitmapSetResolution
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipFree
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageHorizontalResolution
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipGetImageHeight

kernel32

CreateFileW
SetEnvironmentVariableA
GetProcessHeap
SetEndOfFile
SetStdHandle
WriteConsoleW
WaitForSingleObject
GetExitCodeProcess
CreatePipe
GetStringTypeW
IsValidLocale
QueryPerformanceFrequency
QueryPerformanceCounter
Sleep
GetCurrentProcess
GetModuleFileNameA
CreateProcessA
GetModuleHandleA
GetFileAttributesA
CloseHandle
CreateFileA
GetLastError
DeleteFileA
FindClose
FindNextFileA
FindFirstFileA
SetLastError
ExitProcess
LocalFree
FormatMessageA
FreeLibrary
LoadLibraryA
GetProcAddress
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
HeapAlloc
HeapReAlloc
GetModuleHandleW
GetSystemTimeAsFileTime
MoveFileA
GetTimeFormatA
GetDateFormatA
DuplicateHandle
LCMapStringW
GetCPInfo
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
HeapCreate
GetTickCount
GetCurrentProcessId
HeapSize
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetACP
EnumSystemLocalesA
IsValidCodePage
LoadLibraryW
CompareStringW
GetTimeZoneInformation
GetUserDefaultLCID
GetLocaleInfoA
GetOEMCP

user32

GetKeyboardState
GetKeyState
GetCursorPos
GetAsyncKeyState
SetCursorPos
GetCursorInfo
ScreenToClient
PtInRect
ShowCursor
EnumDisplaySettingsA
ChangeDisplaySettingsA
InvalidateRect
MessageBoxA
LoadImageA
SendMessageA
SetWindowTextA
LoadCursorA
RegisterClassExA
GetDC
ValidateRect
DefWindowProcA
OffsetRect
GetAncestor
ClientToScreen
GetWindowRect
MoveWindow
IsWindow
ReleaseDC
DestroyWindow
GetSystemMetrics
AdjustWindowRectEx
ShowWindow
UpdateWindow
GetWindowLongA
GetClientRect
SetWindowLongA
SetWindowPos
EqualRect
CreateWindowExA
PostQuitMessage
PeekMessageA
DispatchMessageA
AdjustWindowRect

gdi32

ChoosePixelFormat
DescribePixelFormat
SwapBuffers
SetPixelFormat

opengl32

glVertexPointer
glEnableClientState
glColorPointer
glTexCoordPointer
glDrawArrays
glDrawElements
glRectf
glLineStipple
glDepthRange
glViewport
glGetFloatv
glLoadMatrixf
glDisableClientState
glColor4f
glEnable
glDisable
glLightfv
glLightf
glMatrixMode
glClear
glClearColor
glClearDepth
glClearStencil
glFinish
glScissor
glColorMask
glBlendFunc
wglGetProcAddress
wglCreateContext
wglDeleteContext
glPushMatrix
glLoadIdentity
glPopMatrix
glLightModeli
glHint
glGetString
glReadBuffer
glReadPixels
glPixelZoom
glRasterPos2i
glDrawPixels
glMaterialfv
glLightModelf
glLightModelfv
glTexParameteri
glTexEnvi
glTexGenfv
glTexGeni
glLineWidth
glPointSize
glPolygonOffset
glStencilMask
glStencilFunc
glStencilOp
glDepthMask
glDepthFunc
glShadeModel
glPolygonMode
glAlphaFunc
glCullFace
glFogf
glFogfv
glFogi
wglMakeCurrent
wglGetCurrentDC
glDeleteTextures
glBindTexture
glGenTextures
glPixelStorei
glGetIntegerv
glTexImage2D
glNormalPointer

glu32

gluScaleImage
gluBuild2DMipmaps
gluProject
gluUnProject
gluGetString
gluOrtho2D

winmm

timeGetTime
timeEndPeriod
timeBeginPeriod

ws2_32

listen
accept
connect
recv
recvfrom
send
sendto
gethostbyname
gethostname
inet_addr
socket
WSAStartup
ioctlsocket
setsockopt
WSAGetLastError
getsockopt
__WSAFDIsSet
select
WSACleanup
inet_ntoa
bind
getsockname
htons
closesocket

pthreadvc2_2010

sched_get_priority_min
sched_get_priority_max
pthread_cond_init
pthread_rwlock_init
pthread_mutexattr_init
pthread_mutexattr_settype
pthread_mutex_init
pthread_mutexattr_destroy
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setschedparam
pthread_create
pthread_attr_destroy
pthread_cond_destroy
pthread_rwlock_destroy
pthread_mutex_trylock
pthread_mutex_destroy
pthread_self
pthread_setschedparam
pthread_cond_wait
pthread_cond_signal
pthread_cond_broadcast
pthread_rwlock_unlock
pthread_rwlock_trywrlock
pthread_rwlock_wrlock
pthread_rwlock_rdlock
pthread_mutex_unlock
pthread_mutex_lock
pthread_attr_setinheritsched

openal32

alSource3f
alGetEnumValue
alGetSourcei
alSourcePause
alGetError
alSourcePlay
alSourcef
alSourcei
alcCloseDevice
alcDestroyContext
alcMakeContextCurrent
alListener3f
alListenerf
alDistanceModel
alDeleteBuffers
alDeleteSources
alGenSources
alSourceRewind
alSourceQueueBuffers
alBufferData
alSourceUnqueueBuffers
alSourceStop
alGenBuffers
alcGetString
alGetString
alGetFloatv
alcCreateContext
alcOpenDevice

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0b8182f3df1c93916f489d0ce149114

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

opengl32

glu32

winmm

ws2_32

pthreadvc2_2010

openal32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 263KB - Virtual size: 262KB

.data Size: 1.0MB - Virtual size: 1.0MB

.rsrc Size: 71KB - Virtual size: 71KB

.reloc Size: 134KB - Virtual size: 134KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 263KB - Virtual size: 262KB

.data
Size: 1.0MB - Virtual size: 1.0MB

.rsrc
Size: 71KB - Virtual size: 71KB

.reloc
Size: 134KB - Virtual size: 134KB