2024-01-08_2b525f86910c614572e6ea6c2a1d5c6f_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-08_2b525f86910c614572e6ea6c2a1d5c6f_mafia
Size

4.3MB
MD5

2b525f86910c614572e6ea6c2a1d5c6f
SHA1

b7b8e9f69ac2dfb8b65cc7c7ec40fa043614306a
SHA256

a4e66cb1c67d326f1825e4bd69959501bc684768f6f1debcaa5ffa176dd3b5e1
SHA512

ae5cd6add81f15df69a72aa95a1a16439954606fb9ec54da44c94e7e9e5bc64a8069651f8f3fede16d14daa366fb24306c15dac3805f1d0e86b9e3f64f6d3e7c
SSDEEP

98304:lmpbnRdNhHhlyEzpUZU+f5d6IgrWTlVTXG/7cFVdwDfoj9ghi1RebMIg9CbO/V8k:lOrRt3xCC6+/7cFVQojDIg9CbO/V8HuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-08_2b525f86910c614572e6ea6c2a1d5c6f_mafia

Files

2024-01-08_2b525f86910c614572e6ea6c2a1d5c6f_mafia
.exe windows:5 windows x86 arch:x86

23964e25f2c01416aa75d9cbce420990

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libcef

cef_string_multimap_alloc
cef_string_multimap_free
cef_string_list_copy
cef_string_utf16_set
cef_string_utf16_to_utf8
cef_string_utf8_clear
cef_string_utf16_clear
cef_string_utf8_to_utf16
cef_string_map_alloc
cef_string_map_free
cef_post_task
cef_string_utf16_cmp
cef_string_list_append
cef_string_map_append
cef_string_multimap_append
cef_string_list_value
cef_string_list_size
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_list_free
cef_string_list_alloc
cef_browser_host_create_browser
cef_string_userfree_utf16_free
cef_shutdown
cef_do_message_loop_work
cef_run_message_loop
cef_currently_on
cef_execute_process
cef_api_hash
cef_initialize

kernel32

GetStringTypeW
GetFileInformationByHandle
PeekNamedPipe
GetOEMCP
GetTimeZoneInformation
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetACP
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
VirtualQuery
GetSystemInfo
HeapSize
HeapQueryInformation
ExitProcess
GetFileType
SetStdHandle
CreateThread
ExitThread
RaiseException
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
FindFirstFileExW
GetDriveTypeW
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
HeapFree
EncodePointer
DecodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
GetUserDefaultLCID
Sleep
GetNumberFormatW
GetWindowsDirectoryW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GetFileAttributesExW
SetErrorMode
GetCurrentDirectoryW
GetSystemDirectoryW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
lstrcpyW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
CompareStringA
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
GetConsoleMode
ResumeThread
SetThreadPriority
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiW
GetThreadLocale
GlobalGetAtomNameW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
ActivateActCtx
DeactivateActCtx
lstrcmpW
lstrcmpA
SetLastError
IsBadHugeReadPtr
IsBadHugeWritePtr
GlobalFlags
lstrlenA
GetSystemDefaultUILanguage
GetFullPathNameW
GetCurrentProcessId
WaitForSingleObject
GetModuleHandleW
GetTempPathW
GetVersionExW
GetCurrentProcess
DeleteFileW
CopyFileW
lstrlenW
GetModuleFileNameW
FindClose
FindFirstFileW
WideCharToMultiByte
SearchPathW
GetProfileIntW
FreeLibrary
GetTickCount
MulDiv
VirtualAlloc
GetFileSize
GetProcAddress
WriteFile
GlobalSize
LocalFree
GetLastError
FormatMessageW
GlobalReAlloc
GlobalFree
CloseHandle
GlobalAlloc
ReadFile
SetFilePointer
CreateFileW
GlobalUnlock
GlobalLock
FreeResource
LoadLibraryW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetConsoleCP
LCMapStringW
IsValidCodePage

user32

GetCursorPos
CharUpperW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IsMenu
GetAsyncKeyState
MonitorFromPoint
SystemParametersInfoW
WindowFromPoint
IsZoomed
GetSystemMenu
DeleteMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
LoadImageW
DestroyIcon
SetCursor
LoadAcceleratorsW
InvalidateRect
IsIconic
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorW
DestroyAcceleratorTable
NotifyWinEvent
SetWindowRgn
IntersectRect
InflateRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
FillRect
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
LoadCursorW
ShowScrollBar
RedrawWindow
ValidateRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
TranslateMessage
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
CopyRect
PtInRect
GetWindowTextLengthW
GetWindowTextW
GetFocus
GetParent
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CheckDlgButton
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetMenuItemInfoW
RealChildWindowFromPoint
CopyImage
GetActiveWindow
MessageBoxW
EnumDisplayMonitors
SetLayeredWindowAttributes
IsRectEmpty
DrawEdge
UpdateWindow
SetWindowPos
GetKeyState
SetRect
GetDesktopWindow
SetActiveWindow
ReleaseCapture
SetFocus
SetCapture
OffsetRect
GetWindowRect
GetClientRect
DrawTextW
EnableWindow
GetWindow
LoadIconW
IsWindowVisible
IsWindow
MapVirtualKeyExW
IsCharLowerW
DestroyCursor
GetWindowRgn
DrawIcon
CreateMenu
SubtractRect
GetUpdateRect
FrameRect
GetDoubleClickTime
CopyIcon
DrawFrameControl
HideCaret
SetClipboardData
MessageBeep
EqualRect
GetSystemMetrics
ReleaseDC
GetDC
SetRectEmpty
SendMessageW
InvertRect
GetMessageW
PostQuitMessage
RegisterClipboardFormatW
MapDialogRect
SetWindowContextHelpId
GetSysColorBrush
DrawStateW
DeferWindowPos
ShowOwnedPopups
GetIconInfo
GetNextDlgGroupItem
InvalidateRgn
CharNextW
EmptyClipboard
CloseClipboard
OpenClipboard
EnumChildWindows
PostThreadMessageW
SetCursorPos
CharUpperBuffW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
GetMenuDefaultItem
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
SetClassLongW
MapVirtualKeyW
GetKeyNameTextW
UnregisterClassW
UpdateLayeredWindow
EnableScrollBar
UnionRect
CopyAcceleratorTableW
WaitMessage
IsClipboardFormatAvailable
SetMenuDefaultItem
SetParent
LockWindowUpdate
KillTimer
SetTimer
DrawIconEx
DrawFocusRect
SetForegroundWindow

gdi32

CombineRgn
SetBitmapBits
CopyMetaFileW
CreateDCW
SetTextColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectW
CreateRectRgnIndirect
SetRectRgn
GetMapMode
DPtoLP
CreateRoundRectRgn
GetTextExtentPoint32W
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
OffsetRgn
GetRgnBox
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
GetTextColor
Polyline
Ellipse
Polygon
SetDIBColorTable
SetPixel
Rectangle
GetNearestPaletteIndex
GetWindowOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
GetDIBits
GetStockObject
GetPaletteEntries
DeleteDC
SetBkColor
CreateBitmap
GetObjectW
GetSystemPaletteEntries
PatBlt
StretchBlt
CreateDIBitmap
CreateDIBSection
CreatePalette
RealizePalette
SelectPalette
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
SelectObject
GetObjectType
SelectClipRgn
GetDeviceCaps

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW

shell32

DragQueryFileW
DragFinish
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteW
SHAppBarMessage

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW

ole32

CoRegisterMessageFilter
CreateStreamOnHGlobal
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoInitializeEx
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
StgCreateDocfileOnILockBytes
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleLockRunning
CoUninitialize
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
VariantCopy
VariantInit
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromHBITMAP
GdipGetImagePalette
GdipGetImagePaletteSize
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipDrawImageI
GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageRectI
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipSetInterpolationMode
GdipGetImageHeight
GdipGetImageWidth

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Exports

Exports

_ConvertBitmapBits@24
_ConvertBitmapImage@16
_CreateAnimationMaskImage@28
_CreateGIFButtonFromBitmaps@28
_CreateGIFFromBitmap@20
_CreateJPEGFromBitmap@16
_CreateRotatedImage@16
_ImageConvertWebImage@16
_ImageCountGIFFrames@8
_ImageLoadCleanup@8
_ImageLoadFile@24
_ImageLoadFileTransIndex@28
_ImageLoadGIFAnimation@28
_ImageLoadResource@24
_ImageLoadResourceTransIndex@28
_ImageSplitWebImage@16
_ImageWriteAnimGifFile@20
_ImageWriteGifFile@20
_ImageWriteJpegFile@20
_ImageWritePngFile@20
_SerialImageCleanup@8
_SerialImageFileFirst@24
_SerialImageNext@16
_SerialImagePercentComplete@8
_SerialImageResourceFirst@24
_SetImagePalette@8
_ValidImageFile@4

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23964e25f2c01416aa75d9cbce420990

Headers

DLL Characteristics

File Characteristics

Imports

libcef

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 329KB - Virtual size: 329KB

.data Size: 32KB - Virtual size: 67KB

.rsrc Size: 2.3MB - Virtual size: 2.3MB

.reloc Size: 203KB - Virtual size: 203KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 329KB - Virtual size: 329KB

.data
Size: 32KB - Virtual size: 67KB

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

.reloc
Size: 203KB - Virtual size: 203KB