2024-06-24_26fa0b78b411c287e1aecafdb5ce6758_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-24_26fa0b78b411c287e1aecafdb5ce6758_mafia
Size

2.2MB
MD5

26fa0b78b411c287e1aecafdb5ce6758
SHA1

c4f555832f56001b4d5d92488b031900c17b37fe
SHA256

ef52348fdfb366b7681aada85633f83513181a9599463ccf69014740066a3ef0
SHA512

790a2bde67e94a884dba3c535596909befed5ab9045273bd01500423c44cd954d9f028dd0698f38bb0d79610ea08ed1a89c736a8a4c90a5e3d5da02ce07cafdc
SSDEEP

49152:u46GFSGiC725zm9aIkq+sf3TRKhmq/z0QMPAg9:u46GSGiCgmLs/z0QM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-24_26fa0b78b411c287e1aecafdb5ce6758_mafia

Files

2024-06-24_26fa0b78b411c287e1aecafdb5ce6758_mafia
.exe windows:5 windows x86 arch:x86

e883933da6776b44d44b3e04f7836daf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Nonotaro\works\dynamarisa\package\dynamarisa.pdb

Imports

kernel32

GetFileSize
Sleep
WriteFile
SetFilePointer
CreateFileA
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleCursorPosition
GetDriveTypeA
CloseHandle
CreateEventA
SetEvent
SetEnvironmentVariableA
CompareStringW
CreateFileW
GetProcessHeap
SetEndOfFile
WriteConsoleW
ReadFile
SetCurrentDirectoryA
GetLastError
GetModuleFileNameA
CreateMutexA
FillConsoleOutputCharacterA
GetTimeZoneInformation
FlushFileBuffers
LoadLibraryW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
GetModuleFileNameW
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
MultiByteToWideChar
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetThreadPriority
GetExitCodeThread
CreateThread
GetFileAttributesA
GetCurrentDirectoryA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EncodePointer
DecodePointer
FindFirstFileA
FindClose
FindNextFileA
OutputDebugStringA
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
RaiseException
GetCPInfo
RtlUnwind
LCMapStringW
HeapReAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
GetSystemTimeAsFileTime
WaitForSingleObject

user32

ClipCursor
GetForegroundWindow
ClientToScreen
SetRect
LoadCursorA
UpdateWindow
GetSystemMetrics
ShowWindow
CreateWindowExA
MessageBoxA
LoadIconA
RegisterClassExA
GetAsyncKeyState
CharPrevA
DestroyWindow
SendMessageA
IsWindow
GetWindowRect
ToAscii
GetMessageA
PostQuitMessage
TranslateMessage
ShowCursor
PeekMessageA
DefWindowProcA
DispatchMessageA
SetWindowTextA
GetDC
ReleaseDC
GetWindowInfo
CharLowerBuffA
GetCursorPos
ScreenToClient
CharNextA
SetWindowPos
MonitorFromWindow
GetWindowLongA
GetMonitorInfoA
EnumDisplaySettingsA

gdi32

DeleteObject
SetBkMode
SetTextColor
CreateFontA
SelectObject
GetGlyphOutlineA
GetTextExtentPoint32A
GetTextMetricsA
GetStockObject
TextOutA
CreateCompatibleDC
DeleteDC
CreateDIBSection
SetBkColor

advapi32

GetUserNameA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

winmm

timeGetTime
timeBeginPeriod

imm32

ImmGetDefaultIMEWnd
ImmSetCandidateWindow
ImmGetCompositionStringA
ImmReleaseContext
ImmGetContext

d3dx9_33

D3DXMatrixInverse
D3DXMatrixRotationZ
D3DXPlaneNormalize
D3DXMatrixRotationX
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXPlaneFromPoints
D3DXMatrixScaling
D3DXQuaternionRotationYawPitchRoll
D3DXMatrixRotationQuaternion
D3DXQuaternionRotationAxis
D3DXQuaternionMultiply
D3DXVec3TransformNormal
D3DXMatrixRotationYawPitchRoll
D3DXVec2Normalize
D3DXVec3TransformNormalArray
D3DXVec3Normalize
D3DXQuaternionSlerp
D3DXQuaternionInverse
D3DXMatrixTransformation
D3DXQuaternionRotationMatrix
D3DXVec3Transform
D3DXQuaternionNormalize
D3DXMatrixTranslation
D3DXMatrixPerspectiveFovRH
D3DXVec3TransformCoord
D3DXCreateTexture
D3DXVec2TransformNormal
D3DXVec3TransformCoordArray
D3DXGetShaderSamplers
D3DXGetShaderInputSemantics
D3DXCreateEffect
D3DXCreateCubeTextureFromFileInMemory
D3DXAssembleShader
D3DXMatrixRotationY

d3d9

Direct3DCreate9

comdlg32

GetOpenFileNameA
GetSaveFileNameA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e883933da6776b44d44b3e04f7836daf

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

ole32

winmm

imm32

d3dx9_33

d3d9

comdlg32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 382KB - Virtual size: 381KB

.data Size: 107KB - Virtual size: 134KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 116KB - Virtual size: 115KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 382KB - Virtual size: 381KB

.data
Size: 107KB - Virtual size: 134KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 116KB - Virtual size: 115KB