2024-06-20_59ab6cd2424b83d844174ee6af405e55_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-20_59ab6cd2424b83d844174ee6af405e55_mafia
Size

264KB
MD5

59ab6cd2424b83d844174ee6af405e55
SHA1

75b14e524526cabb06b85471b27673dfe1630953
SHA256

9d4b2a06acfb063a16ff2690bc3084e916697ed04590e85a3082be1698e49b58
SHA512

f7b01676bf77966b1a6cacd4c62f894a976c2efdb454a1dc03cd52b31786c8cfec6375ca7b896f107e91c2aaa0a2ad93e52d9d77131cb80dcc118f374eb9cd9c
SSDEEP

6144:Se7xFT0E/Zy0uZZ5MeN5NwJrt1rFFfOUfsmhgB9N:5T0Ehy0uZjvN4drFFfOUzg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-20_59ab6cd2424b83d844174ee6af405e55_mafia

Files

2024-06-20_59ab6cd2424b83d844174ee6af405e55_mafia
.exe windows:5 windows x86 arch:x86

a5a63b6a74bc82a3161d665c945e280c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\buildslave\unity\build\build\WindowsEditor\Data\Tools\binary2text.pdb

Imports

shlwapi

PathFileExistsW
PathCanonicalizeW

shell32

SHGetFolderPathW
SHFileOperationW

kernel32

GetProcessHeap
CreateFileA
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapReAlloc
HeapQueryInformation
IsValidCodePage
GetOEMCP
GetACP
SetStdHandle
FlushFileBuffers
GetStartupInfoW
GetFileType
SetHandleCount
WideCharToMultiByte
GetCurrentDirectoryW
SleepEx
RaiseException
CloseHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
MultiByteToWideChar
OutputDebugStringW
IsDebuggerPresent
SetFileAttributesW
GetFileAttributesW
GetLastError
ReadFile
SetFilePointerEx
WriteFile
SetFilePointer
SetEndOfFile
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
CreateFileW
MoveFileExW
GetFileAttributesExW
GetFileSizeEx
SetFileTime
SystemTimeToFileTime
GetSystemTime
GetModuleFileNameW
CopyFileW
FindClose
FindNextFileW
FindFirstFileW
FindFirstFileExW
LocalFree
FormatMessageW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
Sleep
InitializeCriticalSection
EncodePointer
DecodePointer
HeapFree
RtlUnwind
GetProcAddress
GetModuleHandleW
ExitProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
LCMapStringW
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetConsoleCP
GetConsoleMode
GetStdHandle
GetLocaleInfoW
LoadLibraryW
HeapSize

Sections

.text
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5a63b6a74bc82a3161d665c945e280c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

shell32

kernel32

Sections

.text Size: 197KB - Virtual size: 197KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 7KB - Virtual size: 24KB

.reloc Size: 19KB - Virtual size: 18KB

.text
Size: 197KB - Virtual size: 197KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 7KB - Virtual size: 24KB

.reloc
Size: 19KB - Virtual size: 18KB