2024-01-19_1fe8aedcb710f9f0c77c52fb0a61818e_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-19_1fe8aedcb710f9f0c77c52fb0a61818e_mafia
Size

15.9MB
MD5

1fe8aedcb710f9f0c77c52fb0a61818e
SHA1

d67011a1db7da09962da9dcb9e2563413f09e7bd
SHA256

963710b9454193cc5dd9fe9c78f7218da5a591752f9ca722ca2876c69332097d
SHA512

62f8eea2b4fb835a4425eb698a774334c6d0b759458024f19073d3e56d4ebfa7f12b1683c54e62c7bb3cf78fb2b636e706f8d98b502d89cf22f9a50baeaf3237
SSDEEP

393216:OEGpKd8iZADGQTt3AzP2gVv7rE0bBeVk2VkZ3:spKbZMQzP2gVv1EVXV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-19_1fe8aedcb710f9f0c77c52fb0a61818e_mafia

Files

2024-01-19_1fe8aedcb710f9f0c77c52fb0a61818e_mafia
.exe windows:5 windows x86 arch:x86

93a2c2a0d7b8bdfea0f7b19be49b5008

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_EndDrag
ImageList_Destroy
ord6
ImageList_GetImageCount
ImageList_Draw
ImageList_GetIconSize
ord16
ord17

kernel32

EnumSystemLocalesA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentDirectoryW
GetOEMCP
HeapDestroy
GetStringTypeW
IsProcessorFeaturePresent
GetLocaleInfoW
GetModuleFileNameW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
GetModuleHandleW
MoveFileA
GetDriveTypeW
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetStartupInfoW
HeapSetInformation
CreateDirectoryA
GetTimeFormatA
HeapReAlloc
HeapFree
HeapAlloc
RtlUnwind
DecodePointer
EncodePointer
InterlockedExchange
WriteConsoleW
GetDateFormatA
RaiseException
OutputDebugStringA
GetStdHandle
ExpandEnvironmentStringsA
TlsAlloc
TlsSetValue
TlsFree
TlsGetValue
InterlockedDecrement
InterlockedIncrement
IsValidLocale
GetUserDefaultLCID
GetACP
ExitProcess
CreateMutexA
DuplicateHandle
CreateProcessA
CreateThread
ResumeThread
SetNamedPipeHandleState
PeekNamedPipe
CreatePipe
GetWindowsDirectoryA
SetCurrentDirectoryA
CopyFileA
GetFileType
GetTempFileNameA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
GetCurrentProcess
SetEnvironmentVariableA
GetModuleHandleA
GetComputerNameA
IsValidCodePage
GetCPInfo
GetEnvironmentVariableA
GetThreadLocale
GetLocaleInfoA
GetTimeZoneInformation
LocalAlloc
SetErrorMode
GetCommandLineA
GetProcessHeap
HeapSize
GlobalSize
SetLastError
CreateFileW
GetDiskFreeSpaceW
GetFullPathNameW
GetFullPathNameA
FormatMessageW
FormatMessageA
LocalFree
GetTempPathW
GetTempPathA
LockFileEx
GetSystemTimeAsFileTime
GetSystemTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LoadLibraryW
DeleteFileW
GetFileAttributesW
DeleteFileA
LockFile
UnlockFile
GetFileSize
CompareStringW
GetLastError
AreFileApisANSI
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
InitializeCriticalSection
Sleep
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
GetProcAddress
LoadLibraryA
GlobalFree
MulDiv
FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
GetDiskFreeSpaceA
FlushFileBuffers
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
CloseHandle
CreateFileA
GetProfileStringA
lstrlenA
GetModuleFileNameA
lstrcatA
lstrcmpA
lstrcpyA
LoadResource
LockResource
SizeofResource
FindResourceA
HeapCreate

user32

DrawEdge
SetClipboardData
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetMenuStringA
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
GetMessagePos
ChildWindowFromPoint
UnionRect
ValidateRect
GetMessageA
DestroyCursor
LoadCursorA
KillTimer
SetTimer
InsertMenuItemA
CreateMenu
InsertMenuA
RemoveMenu
DestroyMenu
CreatePopupMenu
SetMenuItemInfoA
CheckMenuRadioItem
CheckMenuItem
GetMenuState
GetWindowTextA
GetClassNameA
RegisterClipboardFormatA
GetWindowTextLengthA
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
keybd_event
MapWindowPoints
GetClassInfoA
CreateIconIndirect
LoadImageA
GetIconInfo
LoadBitmapA
LoadIconA
SetCaretPos
HideCaret
ShowCaret
DestroyCaret
CreateCaret
DestroyIcon
GetUpdateRect
DrawIcon
SetMenu
PostMessageA
BeginPaint
GetWindowDC
EndPaint
DrawIconEx
DrawStateA
SetForegroundWindow
GetForegroundWindow
CreateDialogIndirectParamA
RegisterClassA
UnregisterClassA
DdeGetLastError
SetWindowRgn
AdjustWindowRectEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
IsIconic
IsZoomed
BringWindowToTop
TranslateAcceleratorA
CreateAcceleratorTableA
DestroyAcceleratorTable
OffsetRect
DrawFocusRect
CopyRect
DrawTextA
GetDlgItem
CreateDialogParamA
InflateRect
GetUpdateRgn
GetSysColor
CreateWindowExA
IsDialogMessageA
TrackPopupMenu
IsWindow
PtInRect
SetCursor
CharNextA
DdeInitializeA
AppendMenuA
GetSubMenu
GetCapture
DestroyWindow
UnregisterHotKey
RegisterHotKey
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetMenuItemCount
GetMenuItemInfoA
GetMessageTime
GetWindow
BeginDeferWindowPos
EndDeferWindowPos
InvalidateRect
GetFocus
IsWindowEnabled
IsWindowVisible
CallWindowProcA
DefWindowProcA
DeferWindowPos
MoveWindow
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
ShowCursor
MessageBeep
WaitForInputIdle
PostThreadMessageA
DdeQueryStringA
DdeFreeDataHandle
DdePostAdvise
DrawFrameControl
DdeNameService
GetMenu
ModifyMenuA
DdeUninitialize
GetActiveWindow
EnableWindow
SetRect
FrameRect
SendMessageA
DdeFreeStringHandle
DdeDisconnect
DdeClientTransaction
DdeConnect
DdeCreateDataHandle
FlashWindow
DdeGetData
GetCursorPos
WindowFromPoint
GetParent
ScrollWindow
DdeCreateStringHandleA
SetWindowTextA
GetDC
MessageBoxA
GetAsyncKeyState
GetSystemMetrics
SystemParametersInfoA
GetDesktopWindow
PostQuitMessage
TranslateMessage
DispatchMessageA
PeekMessageA
ReleaseDC
VkKeyScanA
GetKeyState
GetWindowRect
GetClientRect
FillRect
GetWindowLongA
SetWindowLongA
SetWindowPos
SetFocus
ShowWindow
SetCapture
ReleaseCapture
SetCursorPos
GetScrollInfo
SetScrollInfo
RegisterWindowMessageA

gdi32

GetBkMode
PlayEnhMetaFile
GdiFlush
RealizePalette
SelectPalette
CreateRectRgn
ExcludeClipRect
SetBkColor
SetTextColor
CreatePen
CreateSolidBrush
OffsetRgn
ExtCreateRegion
GetRegionData
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
GetObjectA
CreateCompatibleDC
SetStretchBltMode
GetClipBox
ExtSelectClipRgn
ExtFloodFill
GetPixel
SetPixel
Polyline
PolyBezier
ScaleViewportExtEx
GetCharABCWidthsA
GetTextExtentExPointA
SetWindowOrgEx
GetBkColor
GetTextColor
SelectClipRgn
Arc
Pie
Polygon
SetPolyFillMode
SetBkMode
Rectangle
RoundRect
Ellipse
SetBrushOrgEx
CreateCompatibleBitmap
BitBlt
MaskBlt
StretchBlt
StretchDIBits
GetPaletteEntries
CreateBitmap
GetRgnBox
EqualRgn
PtInRegion
RectInRegion
CombineRgn
GetNearestPaletteIndex
CreatePalette
CreateRectRgnIndirect
SetTextAlign
PatBlt
EnumFontFamiliesExA
CreateDIBSection
GetDIBits
CreateDIBitmap
GetDIBColorTable
GetSystemPaletteEntries
GetEnhMetaFileA
CopyEnhMetaFileA
SetAbortProc
CreateDCA
TextOutA
GetTextExtentPoint32A
GetStockObject
LineTo
SetMetaFileBitsEx
SaveDC
SetMapMode
SetWindowExtEx
PolyPolygon
SetViewportExtEx
SetViewportOrgEx
PlayMetaFile
RestoreDC
MoveToEx
CloseEnhMetaFile
EndPage
CreateEnhMetaFileA
StartPage
EndDoc
GetDeviceCaps
CreateFontIndirectA
SelectObject
GetTextMetricsA
DeleteEnhMetaFile
DeleteMetaFile
DeleteObject
StartDocA
CreateICA
GetTextFaceA
SetROP2
DeleteDC

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

ChooseColorA
ReplaceTextA
CommDlgExtendedError
FindTextA
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
PageSetupDlgA

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
GetUserNameA
RegCreateKeyA
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA

shell32

ShellExecuteExA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ExtractIconExA
ExtractIconA
DragQueryFileA
DragQueryPoint
DragFinish
DragAcceptFiles
ShellExecuteA
SHGetSpecialFolderLocation

ole32

OleSetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleInitialize
OleUninitialize
ReleaseStgMedium
OleFlushClipboard
OleGetClipboard
CoCreateInstance
OleIsCurrentClipboard

bestview

bvInitA
ord8
ord22

wsock32

connect
WSAGetLastError
ntohs
ntohl
gethostbyaddr
getservbyname
htons
htonl
ioctlsocket
gethostbyname
send
recvfrom
select
__WSAFDIsSet
getsockopt
socket
inet_ntoa
setsockopt
bind
getsockname
listen
shutdown
closesocket
WSACleanup
sendto
WSAStartup
accept
recv

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 347KB - Virtual size: 654KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 409KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93a2c2a0d7b8bdfea0f7b19be49b5008

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

bestview

wsock32

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 347KB - Virtual size: 654KB

.rsrc Size: 10.6MB - Virtual size: 10.6MB

.reloc Size: 409KB - Virtual size: 409KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 347KB - Virtual size: 654KB

.rsrc
Size: 10.6MB - Virtual size: 10.6MB

.reloc
Size: 409KB - Virtual size: 409KB