Z:\b\HTE\QDART\QDART_MFG\BSP_Storage\QSaharaServer\Release\QSaharaServer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-11_b12cee209774d385be3ae497e7c63e11_mafia_wapomi.exe
Resource
win7-20240708-en
General
-
Target
2024-11-11_b12cee209774d385be3ae497e7c63e11_mafia_wapomi
-
Size
188KB
-
MD5
b12cee209774d385be3ae497e7c63e11
-
SHA1
5f064ad90e5e4144e2e9b856414680f21798907e
-
SHA256
ce35342f5478d4d93db3abf616fad729cef7d1de7034a30f418e7a98240f0c2b
-
SHA512
acb432f388ad10f61cba32c055d2abe666b57dd3a69d900d525aa196d47b97eadde6220f9182796fa31010951bd460ec4ba547259fa4a26cabdab3fdc5fc0f0f
-
SSDEEP
3072:Djaz/kdH1QuA3rGuYt/ie+0T1ddxWTXOvXjfaz4WUSXpltz7GUd+w3wieCzp8GCH:LdHeuAbGuYVie+0T1ddxWTXOvXjfaz4u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-11-11_b12cee209774d385be3ae497e7c63e11_mafia_wapomi
Files
-
2024-11-11_b12cee209774d385be3ae497e7c63e11_mafia_wapomi.exe windows:5 windows x86 arch:x86
ba6e7d1028cd73d291b266f23866459e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CloseHandle
SetCommTimeouts
CreateFileA
WriteFile
ReadFile
Sleep
GetTickCount
GetSystemInfo
GetSystemTimeAsFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetLastError
GetFileType
FindClose
GetDriveTypeA
FindFirstFileExA
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
SetFilePointer
GetCommandLineA
HeapSetInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
IsProcessorFeaturePresent
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetStartupInfoW
DeleteCriticalSection
GetFullPathNameA
HeapFree
GetCurrentDirectoryW
SetCurrentDirectoryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
GetConsoleCP
GetConsoleMode
SetEndOfFile
HeapAlloc
GetProcessHeap
MultiByteToWideChar
InterlockedExchange
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
GetModuleFileNameW
HeapSize
HeapQueryInformation
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
RtlUnwind
GetDriveTypeW
LCMapStringW
WriteConsoleW
FlushFileBuffers
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileW
CompareStringW
SetEnvironmentVariableA
CreateDirectoryA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
��q��uI Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE