2024-08-24_63d66b240cbbdc28d2518e126c1453a0_mafia

General

Target

2024-08-24_63d66b240cbbdc28d2518e126c1453a0_mafia
Size

1.3MB
MD5

63d66b240cbbdc28d2518e126c1453a0
SHA1

eeb81456f6651a451fbe6d3c1d914b34018e6a27
SHA256

90428dd9406168a345b2735e9b0c004f14f9ac08a45006432c407491248f076b
SHA512

7dc81a22eaca4a669faf474d36f96a44f469ae57ff87f1f7be9b5b255061b72a16d822a37aa28d6b672e89286319752f1430400397e85ae4980ae1c262194598
SSDEEP

12288:4dzmcl7W763CO43+pCzLbxhYmQFcute+e773wJTZgP:qBWYl43+pCzLDYVCuc+VBZgP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-24_63d66b240cbbdc28d2518e126c1453a0_mafia

Files

2024-08-24_63d66b240cbbdc28d2518e126c1453a0_mafia
.exe windows:5 windows x86 arch:x86

d87d36100793b2cf857875ddb88da5ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
GetLastError
HeapFree
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
IsProcessorFeaturePresent
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
WriteConsoleW
SetStdHandle
CreateFileW

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d87d36100793b2cf857875ddb88da5ea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 82KB - Virtual size: 82KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 13KB

.reloc Size: 1.2MB - Virtual size: 1.8MB

.text
Size: 82KB - Virtual size: 82KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 13KB

.reloc
Size: 1.2MB - Virtual size: 1.8MB