2024-12-31_041bff40cf772c28086f2136218489f2_mafia

General

Target
2024-12-31_041bff40cf772c28086f2136218489f2_mafia
Size 11.3MB
Sample241231-xjdqdswngr
SHA256 b0bdf6212ea9483d04f5ad47a0d4af05f379eeddbee38b13627ad921af336bf3
MD5 041bff40cf772c28086f2136218489f2
SHA1 a933c80b433a90b7985599f6d7b4a498cf2c75d7
SHA512 77c8cf466a70b5ff5545d2fe997b48c84f090f3e63c48ed9df087c5bbf76d00f2132a3173fd792caee7c12621adafd08fddb72631d11025edcc2204d15cf39c5
SSDEEP 3072:RLBgXOXcdW8tar7vGdq8c7YMl2b8anmMXnb58XuDP9het3Zv1oSW1za2E+w5C2/Y:UOMdRQr7OB0ypmMXnl8XEPM3noSWOC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-31_041bff40cf772c28086f2136218489f2_mafia

File Explorer

2024-12-31_041bff40cf772c28086f2136218489f2_mafia

.exe 11.3MB

2024-12-31_041bff40cf772c28086f2136218489f2_mafia

IMPHASH eed351385158b7f7a0075368d27716ed
SHA256 b0bdf6212ea9483d04f5ad47a0d4af05f379eeddbee38b13627ad921af336bf3
MD5 041bff40cf772c28086f2136218489f2
SHA1 a933c80b433a90b7985599f6d7b4a498cf2c75d7
SHA512 77c8cf466a70b5ff5545d2fe997b48c84f090f3e63c48ed9df087c5bbf76d00f2132a3173fd792caee7c12621adafd08fddb72631d11025edcc2204d15cf39c5
SSDEEP 3072:RLBgXOXcdW8tar7vGdq8c7YMl2b8anmMXnb58XuDP9het3Zv1oSW1za2E+w5C2/Y:UOMdRQr7OB0ypmMXnl8XEPM3noSWOC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileExW SleepEx BackupSeek SetTapeParameters GetConsoleAliasesA GetUserDefaultLangID SetCommState GetCommandLineA GetSystemTimes GetDriveTypeA GetProcessTimes GetCurrencyFormatW GlobalAlloc SetFileShortNameW SizeofResource GetFileAttributesA lstrlenW FindNextVolumeMountPointW WritePrivateProfileStringW GetStringTypeExA GetNamedPipeHandleStateW GetLargestConsoleWindowSize GetHandleInformation IsDBCSLeadByteEx VirtualAlloc ReadFileEx RemoveDirectoryA AddConsoleAliasW VirtualProtectEx GetPrivateProfileStringA OpenWaitableTimerA GetAtomNameA LoadLibraryA RegisterWaitForSingleObject CreateFileMappingA LocalAlloc QueryDosDeviceW HeapLock GetTapeParameters LoadLibraryExA DebugBreakProcess FatalExit GetPrivateProfileSectionA VirtualProtect GetConsoleCursorInfo SetProcessShutdownParameters LocalSize GlobalAddAtomW GetTempPathA OpenFileMappingA InterlockedPushEntrySList EnumSystemLocalesW SuspendThread GlobalLock GlobalSize SetConsoleActiveScreenBuffer InterlockedDecrement ReadConsoleA WriteTapemark HeapAlloc LocalCompact FindResourceW FileTimeToDosDateTime GetProcessIoCounters GlobalCompact UnmapViewOfFile GetLocaleInfoA PeekNamedPipe FindFirstFileW SearchPathW GlobalMemoryStatus CreateFileA SetComputerNameA InterlockedIncrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent HeapSize FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc SetConsoleCtrlHandler FreeLibrary LoadLibraryW GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile CloseHandle WriteConsoleW SetFilePointer SetStdHandle CreateFileW

advapi32

DeregisterEventSource SetSecurityDescriptorSacl AddAccessDeniedAceEx RegLoadKeyA GetServiceDisplayNameW AllocateAndInitializeSid RegDeleteValueW LookupPrivilegeValueA NotifyChangeEventLog RegSaveKeyW EqualPrefixSid GetSidSubAuthorityCount OpenServiceW MapGenericMask SetServiceObjectSecurity AccessCheckAndAuditAlarmW RegRestoreKeyW GetSidSubAuthority GetCurrentHwProfileA

Sharing

General

Malware Config

Signatures

File Explorer

2024-12-31_041bff40cf772c28086f2136218489f2_mafia

kernel32

advapi32

generic