2024-06-20_6c6094d2e2d1ad11b3cb24810f66d845_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-20_6c6094d2e2d1ad11b3cb24810f66d845_mafia
Size

244KB
MD5

6c6094d2e2d1ad11b3cb24810f66d845
SHA1

3c1dab3e3614757a3cc509a9f84708a52f8f52b5
SHA256

568ffe9d8b02095f4435186a147e3c733230713d9190b161882d5e691704ddfa
SHA512

d7df0381e2220fbf712905979e052187d48fe560af7ae02b28ef539928c18687872daf512744e13e21127f5658719c39f2570558f50991f9247650b21a1e082e
SSDEEP

6144:0FCjGBVbHwr/Y+A9NMNj+o67dY5lBWpX:KVbHwr/YT9No+oudSl6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-20_6c6094d2e2d1ad11b3cb24810f66d845_mafia

Files

2024-06-20_6c6094d2e2d1ad11b3cb24810f66d845_mafia
.exe windows:5 windows x86 arch:x86

425f921be4cf9e7982e5388099455e65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindNextFileA
FindFirstFileA
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
RtlUnwind
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
EncodePointer
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetLastError
HeapAlloc
HeapReAlloc
GetDriveTypeA
FindFirstFileExA
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LoadLibraryW
IsProcessorFeaturePresent
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
RaiseException
Sleep
SetStdHandle
WideCharToMultiByte
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
ReadFile
GetConsoleCP
GetConsoleMode
CloseHandle
SetFilePointer
FlushFileBuffers
CreateFileA
LCMapStringW
GetFullPathNameA
GetCurrentDirectoryW
HeapSize
CompareStringW
SetEnvironmentVariableA
GetStringTypeW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
GetDriveTypeW
CreateFileW

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

425f921be4cf9e7982e5388099455e65

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 184KB - Virtual size: 184KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 7KB - Virtual size: 22KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 184KB - Virtual size: 184KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 7KB - Virtual size: 22KB

.reloc
Size: 14KB - Virtual size: 13KB