2024-06-25_f7ee146de05ebc05d2f231aa9f828426_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-25_f7ee146de05ebc05d2f231aa9f828426_mafia
Size

8.4MB
MD5

f7ee146de05ebc05d2f231aa9f828426
SHA1

0ab2952ac4f8ec30b56aa2d3f71801cde7f6b64d
SHA256

0bc03d63d55754a889f087e9072adeab527c2c06b06c1e217ce048b61694fd50
SHA512

3c11ee0b5145d423609b295f006ea20a7b0f7b385cca5d0a7c51ed570747ede59d94f3b6f81dd4a673980eabab8d4687cec0ba395d0793eef64f85d2e47fccf5
SSDEEP

196608:eES0qIw0T4vOB6Z4SWQbxM57oZ4je8DWtKV8IRYbMipmCsDCIusL5edW:eEpqITT4vlbxMBz2kYbMipbsDlus0d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-25_f7ee146de05ebc05d2f231aa9f828426_mafia

Files

2024-06-25_f7ee146de05ebc05d2f231aa9f828426_mafia
.exe windows:5 windows x86 arch:x86

782bf5f96bab69ab08f4afda8f0c80dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Montana Fragments\HoCJP\Release\Crownpc.pdb

Imports

d3dx9_43

D3DXGetShaderConstantTable
D3DXCreateTextureFromFileW

steam_api

SteamAPI_Init
SteamAPI_RunCallbacks
SteamInternal_CreateInterface
SteamAPI_GetHSteamPipe
SteamInternal_ContextInit
SteamAPI_RegisterCallback
SteamAPI_GetHSteamUser
SteamAPI_UnregisterCallback

kernel32

WaitForSingleObject
InterlockedCompareExchange
SleepEx
TlsSetValue
TerminateThread
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
GetProcessHeap
HeapAlloc
CreateEventA
HeapFree
SetEvent
GetSystemTimeAsFileTime
LeaveCriticalSection
VerifyVersionInfoA
InterlockedExchange
GetLastError
SetLastError
QueueUserAPC
InterlockedDecrement
InterlockedExchangeAdd
CreateEventW
PostQueuedCompletionStatus
WaitForMultipleObjects
CreateIoCompletionPort
DeleteCriticalSection
ReleaseMutex
TlsAlloc
CloseHandle
GetCurrentProcessId
CreateWaitableTimerA
TlsFree
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
GetVersion
GetFileType
GetStdHandle
FreeLibrary
LoadLibraryA
GetTickCount
QueryPerformanceCounter
GlobalMemoryStatus
GetVersionExA
FlushConsoleInputBuffer
VerSetConditionMask
GetQueuedCompletionStatus
InterlockedIncrement
SetWaitableTimer
TlsGetValue
CreateMutexW
lstrlenA
FindNextFileA
FindClose
FindFirstFileA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
CopyFileA
GetPrivateProfileIntA
Sleep
GlobalUnlock
MultiByteToWideChar
WideCharToMultiByte
GlobalLock
lstrcpynA
GetFileAttributesA
OutputDebugStringA
GetDriveTypeA
FindFirstFileExA
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
EnterCriticalSection
EnumSystemLocalesA
OpenEventA
FormatMessageA
LocalFree
LCMapStringA
GetStringTypeExA
GetProcessTimes
ReleaseSemaphore
CreateSemaphoreA
lstrcpynW
MulDiv
lstrcpyW
lstrcmpW
GetThreadPriority
lstrlenW
VirtualAlloc
VirtualQuery
VirtualFree
FindNextFileW
FindFirstFileW
GetFileSize
GetExitCodeThread
GetTempFileNameW
EncodePointer
DecodePointer
InitializeCriticalSection
GetModuleHandleW
ExitProcess
SetConsoleCtrlHandler
ExitThread
CreateThread
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapReAlloc
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetTimeZoneInformation
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
WriteFile
GetModuleFileNameW
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
GetCurrentThread
HeapCreate
GetUserDefaultLCID
GetLocaleInfoA
GetDriveTypeW
IsValidLocale
GetStringTypeW
SetHandleCount
HeapSize
LoadLibraryW
ReadFile
GetConsoleCP
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
FlushFileBuffers
SetStdHandle
SetFilePointer
CreateFileW
CreateFileA
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetLocalTime
QueryPerformanceFrequency
ResetEvent
DeleteFileW
GetTempPathW
GlobalSize
GlobalFree
GlobalAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetVersionExW
GetSystemInfo
OutputDebugStringW
ResumeThread
SetThreadPriority
SuspendThread
GetCurrentDirectoryW
SetCurrentDirectoryW

user32

GetWindowRect
OpenClipboard
GetDesktopWindow
IsClipboardFormatAvailable
CloseClipboard
GetWindowLongW
GetProcessWindowStation
MessageBoxA
GetClipboardData
LoadStringA
MsgWaitForMultipleObjects
RegisterWindowMessageA
GetQueueStatus
PostThreadMessageA
GetKeyboardState
UnhookWindowsHookEx
GetUserObjectInformationW
AttachThreadInput
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
IsDialogMessageW
PeekMessageW
ClipCursor
GetCursorPos
DestroyWindow
FindWindowW
UnregisterClassW
ReleaseDC
GetDC
ChangeDisplaySettingsA
KillTimer
GetMonitorInfoW
EnumDisplaySettingsW
EnumDisplayMonitors
GetClientRect
SetMenu
SetWindowTextW
SetClassLongW
LoadIconW
SystemParametersInfoW
UpdateWindow
ShowWindow
SetClipboardData
EmptyClipboard
SetWindowRgn
SendMessageW
GetMenuItemInfoW
GetMenuItemCount
PostMessageW
ShowCursor
MessageBoxW
FillRect
SetWindowPos
SetForegroundWindow
LoadCursorW
GetWindowThreadProcessId
GetForegroundWindow
SetActiveWindow
AdjustWindowRectEx
SetWindowLongW
ClientToScreen
DrawMenuBar
MoveWindow
DefWindowProcW
SetCursor
PostQuitMessage
EndPaint
BeginPaint
DestroyMenu
BringWindowToTop
RegisterClassExW
GetMonitorInfoA

gdi32

SetDIBitsToDevice
StretchDIBits
EnumFontFamiliesExW
GetTextExtentPoint32W
TextOutW
GetCharacterPlacementW
SetTextColor
SetBkColor
CreateDIBSection
CreateCompatibleDC
GetDeviceCaps
SelectObject
GetObjectA
DeleteObject
DeleteDC
AddFontMemResourceEx
Rectangle
GetStockObject
CombineRgn
CreateRectRgn
CreateSolidBrush
GetGlyphOutlineW
GetTextMetricsA
GetObjectW
CreateFontW
SetBkMode
CreateDCW

advapi32

ReportEventA
RegisterEventSourceA
DeregisterEventSource

shell32

DragQueryFileA
DragQueryFileW
DragFinish
DragAcceptFiles
ShellExecuteA

ole32

CoCreateInstance

oleaut32

SysAllocString
SysFreeString

ws2_32

getsockopt
closesocket
WSASetLastError
freeaddrinfo
WSACleanup
setsockopt
WSAGetLastError
shutdown
select
WSASend
WSASocketW
WSARecv
getaddrinfo
WSAStartup
connect
ioctlsocket
send
gethostbyname
gethostbyaddr
socket
inet_addr
htons
recv

winmm

timeBeginPeriod
timeEndPeriod

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 952KB - Virtual size: 952KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

782bf5f96bab69ab08f4afda8f0c80dc

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3dx9_43

steam_api

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

ws2_32

winmm

Sections

.text Size: 5.3MB - Virtual size: 5.3MB

.rdata Size: 952KB - Virtual size: 952KB

.data Size: 1.8MB - Virtual size: 7.0MB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 21KB - Virtual size: 21KB

.reloc Size: 265KB - Virtual size: 264KB

.text
Size: 5.3MB - Virtual size: 5.3MB

.rdata
Size: 952KB - Virtual size: 952KB

.data
Size: 1.8MB - Virtual size: 7.0MB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 21KB - Virtual size: 21KB

.reloc
Size: 265KB - Virtual size: 264KB