2024-01-23_022dc0678a50a92944a72988c4c88288_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-23_022dc0678a50a92944a72988c4c88288_mafia
Size

1.9MB
MD5

022dc0678a50a92944a72988c4c88288
SHA1

2f248a99ddd92f45d2876e5714d58e114a5cfb9b
SHA256

df37f4c3eeb249bc73aca2599d00936e447e5432973436edf9c5786f040e375b
SHA512

47f281150c43ef7aabbef2cc879ef30de5c93691a70185bac16dc4d30e2bac7455bd89ca4450db733e1374419873594e491473a32bc1fee858183a4c599f3517
SSDEEP

49152:OU2SQ2FGLIGJLMTFNsN21FykR1FO1vA2IWQTzRy3yIppmriKJXAaAW:ob2FGLIGJLgNV1FrR1FO1vA2I87pmrig

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-23_022dc0678a50a92944a72988c4c88288_mafia

Files

2024-01-23_022dc0678a50a92944a72988c4c88288_mafia
.exe windows:5 windows x86 arch:x86

e2159050cbbd03127675c8f9def506ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
GetProcessHeap
GetTimeZoneInformation
CompareStringW
GetStringTypeW
GetConsoleMode
SetEnvironmentVariableA
GetConsoleCP
IsProcessorFeaturePresent
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
HeapCreate
LCMapStringW
IsValidCodePage
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
FindResourceA
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
CreateThread
ExitThread
RaiseException
HeapReAlloc
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
EncodePointer
HeapAlloc
HeapFree
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTickCount
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
GetACP
lstrcpyA
GetSystemDirectoryW
GetOEMCP
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
FileTimeToSystemTime
GlobalFlags
InitializeCriticalSection
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
CreateFileA
GetThreadLocale
WritePrivateProfileStringA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
GetModuleHandleW
InterlockedExchange
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
GetCurrentThreadId
ResumeThread
SetThreadPriority
CloseHandle
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcessId
GetModuleFileNameA
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentDirectoryA
GetPrivateProfileStringA
Sleep
GetPrivateProfileIntA
InterlockedDecrement
InterlockedIncrement
FreeLibrary
FreeResource
GetVersion
GetVersionExA
GetModuleHandleA
LockResource
LoadLibraryA
GetProcAddress
lstrcmpiA
SetLastError
GetLastError
DeactivateActCtx
lstrlenW
MultiByteToWideChar
SizeofResource
WideCharToMultiByte
ActivateActCtx
LoadResource
FindResourceW
GetCPInfo
lstrlenA
CreateFileW

user32

RegisterClipboardFormatA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
HideCaret
InvertRect
SetCursorPos
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
SetClassLongA
DestroyAcceleratorTable
LockWindowUpdate
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
WaitMessage
GetMenuDefaultItem
SetMenuDefaultItem
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
SetCapture
SetWindowRgn
LoadMenuW
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyImage
UnregisterClassA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
SetParent
IsRectEmpty
LoadCursorA
RealChildWindowFromPoint
CharUpperA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
EndDialog
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
CopyIcon
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcA
GetMenu
SetWindowPos
GetWindow
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
PeekMessageA
ValidateRect
UnhookWindowsHookEx
IntersectRect
EndPaint
BeginPaint
GetWindowDC
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetWindowLongA
CopyRect
ModifyMenuA
DestroyIcon
EnableWindow
InsertMenuA
SetRectEmpty
PtInRect
GetMenuStringA
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
IsWindow
DefWindowProcA
GetDlgCtrlID
GetKeyState
GetCursorPos
IsChild
GetCapture
KillTimer
SetTimer
ScreenToClient
CharUpperBuffA
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
GetWindowRgn
SubtractRect
DeferWindowPos
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
EnableMenuItem
CheckMenuItem
GetSystemMenu
IsIconic
DrawIcon
LoadIconW
SetForegroundWindow
FindWindowA
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
SetActiveWindow
GetSystemMetrics
SystemParametersInfoA
RemoveMenu
GetMenuItemCount
AppendMenuA
LoadBitmapW
GetSysColorBrush
CreatePopupMenu
GetMenuItemInfoA
GetSysColor
GetDesktopWindow
TabbedTextOutA
GetMenuState
ReleaseDC
SetRect
GetDC
DrawTextExA
DrawEdge
GrayStringA
CreateMenu
DeleteMenu
DrawIconEx
GetSubMenu
DrawTextA
GetMenuItemID
FillRect
LoadImageA
PostMessageA
GetActiveWindow
FrameRect
DestroyCursor
GetWindowLongA
InvalidateRect
OffsetRect
DrawStateA
InflateRect
DrawFocusRect
GetIconInfo
CreateIconIndirect
SendMessageA
GetClientRect
WindowFromPoint
GetParent
IsMenu
GetWindowRect
SetCursor
ClientToScreen
GetNextDlgTabItem
CreateAcceleratorTableA

gdi32

SelectPalette
GetObjectType
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CopyMetaFileA
CreateDCA
CreateDIBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetTextColor
GetRgnBox
CreatePolygonRgn
CreateEllipticRgn
Polyline
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
CreatePatternBrush
StretchBlt
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
SetTextAlign
MoveToEx
LineTo
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
TextOutA
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetBkColor
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
BitBlt
GetTextExtentPoint32W
PatBlt
GetTextExtentPoint32A
CreateHatchBrush
GetBkMode
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateFontIndirectA
SetPixel
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
Ellipse
PtVisible
Escape
CreatePen
RectVisible
GetPixel
GetObjectA
ExtTextOutA
CreateSolidBrush

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHGetFileInfoA
SHAppBarMessage
DragQueryFileA
DragFinish
ShellExecuteExA

comctl32

ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA

ole32

OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CoRevokeClassObject
StgOpenStorageOnILockBytes
RevokeDragDrop

oleaut32

VariantClear
VariantChangeType
VariantInit
VariantCopy
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SysFreeString
SysAllocStringByteLen
GetErrorInfo
SystemTimeToVariantTime

oledlg

ord8

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

winmm

PlaySoundA

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2159050cbbd03127675c8f9def506ab

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

winmm

oleacc

imm32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 281KB - Virtual size: 280KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 244KB - Virtual size: 244KB

.reloc Size: 172KB - Virtual size: 171KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 281KB - Virtual size: 280KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 244KB - Virtual size: 244KB

.reloc
Size: 172KB - Virtual size: 171KB