2024-01-09_fbdeeee9b890ae3db759f25096fcb5d1_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-09_fbdeeee9b890ae3db759f25096fcb5d1_mafia
Size

3.3MB
MD5

fbdeeee9b890ae3db759f25096fcb5d1
SHA1

21e24428fe0de239670303ea48812ea82096fb18
SHA256

c1922afb716090d27c5a975a4de1c347bb0e915f424778cd252a8a9002161027
SHA512

404ff81c377457ee2ca9a8cd05a23ab2231c129caaddcfdf1e719a1b82cd4f22344161e9d55b3dceec2e12d9379e508142e6b484ef89603d21aca28bf0d9a485
SSDEEP

98304:l2WH/OkuhJgdfTNev5Q2oPbulxAvya365H/QPqbFQeoj9ghi1RebMIg9Cbk/V8o5:r7dC5QdbuLSmH/QPqblojDIg9Cbk/V8o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-09_fbdeeee9b890ae3db759f25096fcb5d1_mafia

Files

2024-01-09_fbdeeee9b890ae3db759f25096fcb5d1_mafia
.exe windows:5 windows x86 arch:x86

eb6040b2e81843fb1835dc8f4a315d88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libcef

cef_string_map_free
cef_string_map_alloc
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_list_copy
cef_string_multimap_size
cef_v8value_create_string
cef_string_utf16_clear
cef_string_utf8_clear
cef_string_multimap_key
cef_string_multimap_value
cef_string_map_size
cef_string_map_key
cef_string_map_value
cef_string_list_size
cef_string_list_value
cef_string_multimap_append
cef_string_map_append
cef_string_list_append
cef_string_utf16_cmp
cef_log
cef_execute_process
cef_api_hash
cef_initialize
cef_post_task
cef_string_list_free
cef_string_list_alloc
cef_browser_host_create_browser
cef_string_utf16_to_utf8
cef_string_wide_set
cef_string_utf8_to_utf16
cef_string_utf16_set
cef_string_userfree_utf16_free
cef_shutdown
cef_quit_message_loop

kernel32

GetTimeZoneInformation
GetOEMCP
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
GetACP
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
HeapReAlloc
HeapAlloc
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
SetErrorMode
GetNumberFormatW
GetWindowsDirectoryW
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
VirtualProtect
GetShortPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
MoveFileW
DeleteFileW
lstrcmpiW
GetStringTypeExW
GetTempPathW
SetFilePointer
GlobalFlags
SearchPathW
Sleep
GetProfileIntW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
LocalAlloc
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
ReplaceFileW
SystemTimeToFileTime
GetUserDefaultLCID
GetTickCount
WaitForSingleObject
ResumeThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringA
CreateFileW
GetFileSize
CloseHandle
GetFileAttributesW
GlobalReAlloc
InterlockedExchange
ReleaseActCtx
CreateActCtxW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
FreeLibrary
CompareStringW
GetCurrentProcessId
GetProcAddress
LoadLibraryW
GlobalGetAtomNameW
GlobalAddAtomW
ActivateActCtx
DeactivateActCtx
lstrcmpW
FreeResource
GetCurrentThreadId
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
GetModuleFileNameW
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
lstrcpyW
lstrlenW
GetSystemDefaultLangID
lstrcatW
GetCurrentDirectoryW
GetModuleHandleW
LockResource
SizeofResource
LoadResource
FindResourceW
LCMapStringW
GetStringTypeW
TlsGetValue
IsValidCodePage
GetConsoleCP

user32

GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
MonitorFromPoint
SystemParametersInfoW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
DestroyAcceleratorTable
SetRect
GetSysColorBrush
DrawFocusRect
DrawEdge
FillRect
DrawStateW
SendDlgItemMessageW
SendDlgItemMessageA
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetClassNameW
GetSysColor
UnpackDDElParam
ReuseDDElParam
WinHelpW
SetWindowPos
LoadImageW
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
GetDlgItem
SetWindowLongW
GetDlgCtrlID
PeekMessageW
LoadAcceleratorsW
SetActiveWindow
InsertMenuItemW
ReleaseDC
GetMenu
GetLastActivePopup
SetMenu
GetDesktopWindow
TranslateAcceleratorW
ShowWindow
SetParent
LockWindowUpdate
ValidateRect
BringWindowToTop
CreatePopupMenu
BeginPaint
GetKeyState
DestroyMenu
IsMenu
GetClassLongW
GetWindowLongW
GetMenuItemInfoW
DrawFrameControl
CopyImage
GetIconInfo
DestroyIcon
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
RegisterWindowMessageW
CharUpperW
SetFocus
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
IsIconic
GetAsyncKeyState
NotifyWinEvent
GetCursorPos
SetCursor
MessageBeep
ReleaseCapture
LoadCursorW
WindowFromPoint
GetParent
SetCapture
GetCapture
KillTimer
SetTimer
ScreenToClient
LoadMenuW
EnableMenuItem
CheckMenuItem
DeleteMenu
IsWindow
GetFocus
IsChild
EqualRect
InflateRect
SetRectEmpty
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
IsClipboardFormatAvailable
GetDoubleClickTime
GetKeyNameTextW
GetMenuItemCount
GetSubMenu
SubtractRect
GetUpdateRect
TranslateMDISysAccel
DrawMenuBar
GetClassInfoW
RemoveMenu
GetSystemMenu
PostMessageW
IsZoomed
DrawIconEx
PtInRect
IntersectRect
GetSystemMetrics
IsRectEmpty
SetWindowTextW
ClientToScreen
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
UpdateWindow
EndPaint
CharUpperBuffW
GetTabbedTextExtentW
GetWindowRgn
HideCaret
InvertRect
MapVirtualKeyExW
IsCharLowerW
CreateMenu
DrawIcon
EnableWindow
SetWindowRgn
GetWindowRect
GetClientRect
LoadIconW
OffsetRect
RedrawWindow
SendMessageW
InvalidateRect
CopyRect
GetWindowDC
DefMDIChildProcW
InvalidateRgn
CharNextW
EnumChildWindows
DestroyCursor
GetNextDlgGroupItem
UnregisterClassW
GetWindow
DefFrameProcW
RealChildWindowFromPoint
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
CopyIcon
FrameRect
SetCursorPos
SetClassLongW
SetMenuDefaultItem
GetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetLayeredWindowAttributes
EnumDisplayMonitors
WaitMessage
PostThreadMessageW
RegisterClipboardFormatW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetMessageW
TranslateMessage
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
MoveWindow
IsDialogMessageW
SetDlgItemTextW
IsWindowVisible
CheckDlgButton

gdi32

Polyline
Ellipse
Polygon
ExtTextOutW
CreatePatternBrush
Rectangle
RoundRect
DeleteDC
SetDIBColorTable
GetDIBits
RealizePalette
SelectPalette
GetStockObject
StretchBlt
GetPixel
SetPixel
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
StartDocW
PtVisible
RectVisible
TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
GetTextColor
CreateEllipticRgn
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
GetObjectType
DPtoLP
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
OffsetRgn
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
GetMapMode
GetCharWidthW
CreatePalette
GetPaletteEntries
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
GetNearestPaletteIndex
GetSystemPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
EnumFontFamiliesExW
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
SetPixelV
SetWindowExtEx
CreateDIBSection
GetBkColor
CombineRgn
CreatePolygonRgn
CreateRectRgnIndirect
CreateRectRgn
CreateFontIndirectW
CreateSolidBrush
SetBkColor
SetTextColor
GetObjectW
DeleteObject
GetTextMetricsW
GetTextExtentPoint32W
PatBlt
SelectObject
CreateBitmap
CreatePen
CreateDCW
CopyMetaFileW
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
OffsetWindowOrgEx
CreateHatchBrush
CreateRoundRectRgn

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
GetJobW
DocumentPropertiesW

advapi32

RegEnumKeyExW
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
SetFileSecurityW
RegEnumValueW
RegCloseKey
GetFileSecurityW

shell32

SHAddToRecentDocs
DragQueryFileW
SHAppBarMessage
ShellExecuteW
SHGetFileInfoW
SHGetDesktopFolder
SHGetSpecialFolderLocation
ExtractIconW
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_DrawEx
ImageList_Create
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Destroy

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathRemoveFileSpecW

ole32

StgCreateDocfileOnILockBytes
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
CoInitializeEx
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleLockRunning
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoInitialize
CoUninitialize
CoCreateInstance
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CreateStreamOnHGlobal
OleDuplicateData
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium

oleaut32

VariantCopy
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
VariantInit
VariantChangeType
SysAllocStringLen
VariantClear
SafeArrayDestroy
SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdiplusStartup
GdipCloneImage
GdipCreateBitmapFromFile
GdipDisposeImage
GdiplusShutdown
GdipCreateFromHDC
GdipCreateFontFromLogfontW
GdipDeleteGraphics
GdipDrawImagePointRectI
GdipDeleteStringFormat
GdipGetImageWidth
GdipCreateStringFormat
GdipSetSolidFillColor
GdipCreateFontFamilyFromName
GdipDrawString
GdipCreateFont
GdipAlloc
GdipCreateSolidFill
GdipDeleteFontFamily
GdipDrawImage
GdipSetStringFormatAlign
GdipDeleteFont
GdipSetStringFormatLineAlign
GdipGetImageHeight
GdipFree
GdipDeleteBrush
GdipDrawImageRectRect
GdipSetStringFormatFlags
GdipDrawImageRectI

sensapi

IsNetworkAlive

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb6040b2e81843fb1835dc8f4a315d88

Headers

DLL Characteristics

File Characteristics

Imports

libcef

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

sensapi

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 347KB - Virtual size: 347KB

.data Size: 29KB - Virtual size: 60KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 187KB - Virtual size: 186KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 347KB - Virtual size: 347KB

.data
Size: 29KB - Virtual size: 60KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 187KB - Virtual size: 186KB