2024-07-03_c95e16b62b945436fd01c76d6f2acb5b_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-03_c95e16b62b945436fd01c76d6f2acb5b_mafia
Size

330KB
MD5

c95e16b62b945436fd01c76d6f2acb5b
SHA1

b07e836742118cd66213e4b0d1bf1be3974713ec
SHA256

e21152ed9da76a09e9d9cbd6394e19bb46247c2fe0ec47a5c320d1c3ea182f52
SHA512

0b764da48445f64d8b722bb93949729d43a7e942a936ae986369220e6cf5195279b86f313fd49d9fab0bc26d58d375378af1912f453ef6f9208f9a60eebbf23f
SSDEEP

6144:+uw2C1Ch6jZJdgEdSBPbowI5OGd7ebr4Ea/c2ytT/g/:w9sheDrdikwI8Gd7F/2tTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-03_c95e16b62b945436fd01c76d6f2acb5b_mafia

Files

2024-07-03_c95e16b62b945436fd01c76d6f2acb5b_mafia
.exe windows:5 windows x86 arch:x86

342cc6c69f15bafdbb5d557f1c39aaf4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\iCafeSafeGuard\I8_Release\MBin\KHLauncher.pdb

Imports

kernel32

FindResourceA
FreeLibrary
LoadResource
GetWindowsDirectoryA
SizeofResource
GetFileAttributesA
CreateProcessA
GetSystemDirectoryA
CreateDirectoryA
GetLastError
GetPrivateProfileStringA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
ReleaseMutex
CloseHandle
LocalAlloc
GetProcAddress
InterlockedExchange
RaiseException
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
IsProcessorFeaturePresent
HeapCreate
ExitProcess
WriteFile
GetModuleFileNameW
GetTimeZoneInformation
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetLocaleInfoW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
SetStdHandle
WriteConsoleW
CreateFileA
CreateFileW
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

342cc6c69f15bafdbb5d557f1c39aaf4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 192KB - Virtual size: 192KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 192KB - Virtual size: 192KB

.reloc
Size: 9KB - Virtual size: 8KB