2024-12-25_085c0df426a67559b07390c7e519fa04_mafia

General

Target
2024-12-25_085c0df426a67559b07390c7e519fa04_mafia
Size 13.4MB
Sample241225-w15d1a1rfv
SHA256 b598f6bd5a40129cc3e11e473dc774d3ad4c5c0ae45850ae4b2a282de7051af3
MD5 085c0df426a67559b07390c7e519fa04
SHA1 f7461925cf572b1a4e6185878699a1709d5afa90
SHA512 52643632a7adecadcebeaf57e0334da1dc0a61aec3da1b8a95153b63e9edc49a86a3f341a16069e4e79d505f58876bcda9e722e30e4471ce96f2d48b93c67086
SSDEEP 3072:aLBgXOXcdW8tar7vGdq8c7YMl2b8anmMXnb58XuDP9het3Zv1oSW1za2E+w5C2/Y:DOMdRQr7OB0ypmMXnl8XEPM3noSWOC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-25_085c0df426a67559b07390c7e519fa04_mafia

File Explorer

2024-12-25_085c0df426a67559b07390c7e519fa04_mafia

.exe 13.4MB

2024-12-25_085c0df426a67559b07390c7e519fa04_mafia

IMPHASH eed351385158b7f7a0075368d27716ed
SHA256 b598f6bd5a40129cc3e11e473dc774d3ad4c5c0ae45850ae4b2a282de7051af3
MD5 085c0df426a67559b07390c7e519fa04
SHA1 f7461925cf572b1a4e6185878699a1709d5afa90
SHA512 52643632a7adecadcebeaf57e0334da1dc0a61aec3da1b8a95153b63e9edc49a86a3f341a16069e4e79d505f58876bcda9e722e30e4471ce96f2d48b93c67086
SSDEEP 3072:aLBgXOXcdW8tar7vGdq8c7YMl2b8anmMXnb58XuDP9het3Zv1oSW1za2E+w5C2/Y:DOMdRQr7OB0ypmMXnl8XEPM3noSWOC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileExW SleepEx BackupSeek SetTapeParameters GetConsoleAliasesA GetUserDefaultLangID SetCommState GetCommandLineA GetSystemTimes GetDriveTypeA GetProcessTimes GetCurrencyFormatW GlobalAlloc SetFileShortNameW SizeofResource GetFileAttributesA lstrlenW FindNextVolumeMountPointW WritePrivateProfileStringW GetStringTypeExA GetNamedPipeHandleStateW GetLargestConsoleWindowSize GetHandleInformation IsDBCSLeadByteEx VirtualAlloc ReadFileEx RemoveDirectoryA AddConsoleAliasW VirtualProtectEx GetPrivateProfileStringA OpenWaitableTimerA GetAtomNameA LoadLibraryA RegisterWaitForSingleObject CreateFileMappingA LocalAlloc QueryDosDeviceW HeapLock GetTapeParameters LoadLibraryExA DebugBreakProcess FatalExit GetPrivateProfileSectionA VirtualProtect GetConsoleCursorInfo SetProcessShutdownParameters LocalSize GlobalAddAtomW GetTempPathA OpenFileMappingA InterlockedPushEntrySList EnumSystemLocalesW SuspendThread GlobalLock GlobalSize SetConsoleActiveScreenBuffer InterlockedDecrement ReadConsoleA WriteTapemark HeapAlloc LocalCompact FindResourceW FileTimeToDosDateTime GetProcessIoCounters GlobalCompact UnmapViewOfFile GetLocaleInfoA PeekNamedPipe FindFirstFileW SearchPathW GlobalMemoryStatus CreateFileA SetComputerNameA InterlockedIncrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent HeapSize FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc SetConsoleCtrlHandler FreeLibrary LoadLibraryW GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile CloseHandle WriteConsoleW SetFilePointer SetStdHandle CreateFileW

advapi32

DeregisterEventSource SetSecurityDescriptorSacl AddAccessDeniedAceEx RegLoadKeyA GetServiceDisplayNameW AllocateAndInitializeSid RegDeleteValueW LookupPrivilegeValueA NotifyChangeEventLog RegSaveKeyW EqualPrefixSid GetSidSubAuthorityCount OpenServiceW MapGenericMask SetServiceObjectSecurity AccessCheckAndAuditAlarmW RegRestoreKeyW GetSidSubAuthority GetCurrentHwProfileA

Sharing

General

Malware Config

Signatures

File Explorer

2024-12-25_085c0df426a67559b07390c7e519fa04_mafia

kernel32

advapi32

generic