2024-01-18_ee1385a949079cdc3271676b40d3d81d_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-18_ee1385a949079cdc3271676b40d3d81d_mafia
Size

2.3MB
MD5

ee1385a949079cdc3271676b40d3d81d
SHA1

e6288314dbea6f5ae966515263cc551507741adb
SHA256

9b4aa6e7cd0c25de73975b355b5bf56ffda6117fe92f5cb6451d5448d5ffd5f4
SHA512

b2659b669aa1ec44844a458c484cbc943b44f410f5041fb57df13c15ef858f633bdc497c58c5dc4f1f1dcf5f370057cbcb15f828b0af91cf87d5d35b9b866633
SSDEEP

49152:l18i+H77cMWSwYXDDmc+5gNAS8gvGGkPoumkDjftL36htFcw0pTOzwRnO1T1lBI6:l18i+HPiSwYXDDC5gNAS8ZnoumkDjftL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-18_ee1385a949079cdc3271676b40d3d81d_mafia

Files

2024-01-18_ee1385a949079cdc3271676b40d3d81d_mafia
.exe windows:5 windows x86 arch:x86

c3c25007041c13ad4b803098369d11ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetStringTypeW
IsProcessorFeaturePresent
GetConsoleCP
GetCPInfo
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
IsDebuggerPresent
UnhandledExceptionFilter
QueryPerformanceCounter
HeapCreate
GetEnvironmentStringsW
SetHandleCount
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
ExitProcess
RaiseException
RtlUnwind
CreateThread
ExitThread
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetTempFileNameW
GetNumberFormatW
SetErrorMode
GetCurrentDirectoryW
GlobalFlags
LocalReAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
GlobalGetAtomNameW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
UnlockFile
LockFile
lstrcmpiW
GetThreadLocale
lstrlenA
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
ReleaseActCtx
CreateActCtxW
SuspendThread
SetThreadPriority
GetPrivateProfileIntW
lstrcpyW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
LoadLibraryExW
GetCurrentProcessId
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
ActivateActCtx
DeactivateActCtx
lstrcmpW
GlobalSize
GetFileType
GetFileAttributesW
GetFileSize
FreeLibrary
ResumeThread
GetTimeZoneInformation
SetFileAttributesW
TlsFree
TlsAlloc
GetVersionExW
GetLocaleInfoW
LoadLibraryW
TlsSetValue
GetDriveTypeW
TlsGetValue
SetEvent
InterlockedDecrement
InterlockedIncrement
MoveFileW
SetLastError
FlushFileBuffers
lstrlenW
CopyFileW
GetTickCount
CreateDirectoryW
MoveFileExW
SetEndOfFile
InterlockedExchange
VerifyVersionInfoW
GetTempPathW
WritePrivateProfileStringW
FormatMessageW
GetPrivateProfileStringW
VerSetConditionMask
SetFilePointer
CreateFileA
GetVersion
GetWindowsDirectoryW
GetFileTime
CreateToolhelp32Snapshot
FindNextFileW
Process32NextW
CreateEventW
LocalAlloc
Process32FirstW
FindClose
GetProcAddress
ReadFile
FileTimeToSystemTime
TerminateProcess
GetSystemDirectoryW
OpenProcess
GetModuleHandleW
OutputDebugStringW
FindFirstFileW
GlobalUnlock
GetModuleFileNameW
GlobalFree
GlobalAlloc
GlobalLock
GetCurrentThreadId
GetLocalTime
MulDiv
GetExitCodeProcess
WaitForSingleObject
CloseHandle
WriteFile
CreateFileW
DeleteFileW
GetLastError
GetCurrentProcess
Sleep
LocalFree
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
GetConsoleMode
SizeofResource

user32

CreateDialogIndirectParamW
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
IsWindowVisible
ValidateRect
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
GetScrollPos
SetScrollPos
GetWindowTextLengthW
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CheckDlgButton
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
CloseClipboard
EmptyClipboard
OpenClipboard
SetClipboardData
EndPaint
SetFocus
BringWindowToTop
GetWindowTextW
SetWindowPos
GetDesktopWindow
GetNextDlgTabItem
GetSubMenu
DrawFocusRect
OffsetRect
TrackPopupMenuEx
LoadMenuW
DrawStateW
DestroyCursor
FrameRect
GetActiveWindow
DestroyMenu
FillRect
LoadImageW
SetCapture
DrawIconEx
WindowFromPoint
GetIconInfo
GetCursorPos
GetSysColorBrush
ReleaseCapture
GetMenuItemInfoW
SystemParametersInfoW
IntersectRect
MapWindowPoints
DestroyIcon
EnableWindow
SendMessageW
GetClientRect
LoadIconW
GetKeyNameTextW
MessageBoxW
EqualRect
RedrawWindow
SetTimer
KillTimer
GetKeyState
GetFocus
SetParent
GetWindowLongW
SetWindowLongW
GetClassLongW
InflateRect
SetClassLongW
IsWindow
InvalidateRect
GetWindow
ClientToScreen
ScreenToClient
GetWindowRect
DrawTextW
TabbedTextOutW
SetForegroundWindow
GetParent
AttachThreadInput
DrawTextExW
PtInRect
GetDC
GetForegroundWindow
ReleaseDC
GrayStringW
MapVirtualKeyW
IsClipboardFormatAvailable
CharUpperW
RealChildWindowFromPoint
CopyImage
SetRectEmpty
EnumDisplayMonitors
SetLayeredWindowAttributes
InvalidateRgn
WaitMessage
DeleteMenu
CharNextW
CopyAcceleratorTableW
GetWindowRgn
GetSysColor
DrawFrameControl
CopyRect
GetWindowThreadProcessId
IsRectEmpty
LoadCursorW
SetCursor
ExitWindowsEx
DrawIcon
GetSystemMetrics
IsIconic
PostMessageW
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
TranslateMessage
GetMessageW
ShowOwnedPopups
GetWindowDC
BeginPaint
SubtractRect
FindWindowW
GetSystemMenu
AppendMenuW
GetDoubleClickTime
GetUpdateRect
CreateMenu
SetRect
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MapVirtualKeyExW
IsCharLowerW
PostThreadMessageW
CharUpperBuffW
CopyIcon
RegisterClipboardFormatW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawEdge
DestroyAcceleratorTable
HideCaret
InvertRect
UnregisterClassW
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
GetAsyncKeyState
NotifyWinEvent
SetWindowRgn
MessageBeep
GetNextDlgGroupItem
SetActiveWindow
TranslateMDISysAccel

gdi32

SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
CreateRoundRectRgn
CreateDIBSection
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
OffsetRgn
SetDIBColorTable
StretchBlt
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
GetTextFaceW
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
SetTextColor
DeleteDC
SetBkColor
CreateBitmap
DeleteObject
CreateRectRgn
LPtoDP
GetWindowExtEx
CreateFontIndirectW
DPtoLP
GetMapMode
GetBkColor
GetViewportExtEx
BitBlt
GetTextExtentPoint32W
GetDeviceCaps
SetPixel
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
ExtTextOutW
PtVisible
CreateFontW
GetObjectW
Escape
CreatePen
GetClipBox
RectVisible
GetPixel
TextOutW
GetTextMetricsW
CreateSolidBrush
GetStockObject

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

LookupPrivilegeValueW
AdjustTokenPrivileges
CloseServiceHandle
OpenSCManagerW
OpenServiceW
GetTokenInformation
QueryServiceStatus
RegEnumValueW
RegQueryValueW
RegEnumKeyW
OpenProcessToken
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW

shell32

SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetSpecialFolderPathW
SHFileOperationW
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
DragFinish
SHAppBarMessage
DragQueryFileW
SHGetMalloc

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
SHGetValueW
PathRemoveFileSpecW

ole32

OleTranslateAccelerator
ReleaseStgMedium
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
OleGetClipboard
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleCreateMenuDescriptor
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
OleDestroyMenuDescriptor
IsAccelerator
OleLockRunning
CoRevokeClassObject
CoRegisterMessageFilter
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoInitialize
CLSIDFromString
CoUninitialize
CoCreateInstance
StringFromGUID2
CreateStreamOnHGlobal

oleaut32

VariantChangeType
VariantInit
SysAllocString
VariantCopy
VariantClear
SafeArrayDestroy
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
SysAllocStringLen
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipImageGetFrameCount
GdipGetImageWidth
GdipCloneImage
GdipImageGetFrameDimensionsCount
GdipCreateFromHDC
GdipGetPropertyItemSize
GdipCreateImageAttributes
GdipDisposeImage
GdipAlloc
GdipDisposeImageAttributes
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipSetImageAttributesRemapTable
GdipImageGetFrameDimensionsList
GdipLoadImageFromFile
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromStream
GdipFree
GdipGetImageHeight
GdipDrawImageRectRectI
GdipDeleteGraphics

wininet

DeleteUrlCacheEntryW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

ws2_32

ntohl
ntohs

iphlpapi

GetAdaptersAddresses

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3c25007041c13ad4b803098369d11ad

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

wininet

version

ws2_32

iphlpapi

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 382KB - Virtual size: 381KB

.data Size: 32KB - Virtual size: 72KB

.rsrc Size: 63KB - Virtual size: 63KB

.reloc Size: 211KB - Virtual size: 211KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 382KB - Virtual size: 381KB

.data
Size: 32KB - Virtual size: 72KB

.rsrc
Size: 63KB - Virtual size: 63KB

.reloc
Size: 211KB - Virtual size: 211KB