2024-01-26_6dc36142fc95edfa0f934ba5f6fadb77_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-26_6dc36142fc95edfa0f934ba5f6fadb77_mafia
Size

1.4MB
MD5

6dc36142fc95edfa0f934ba5f6fadb77
SHA1

8ba006e63d7ced66daa3e78c0acdde3c2423da6e
SHA256

31188788742ca1e66c725b2d95332e421ef2ee5655039b9ed23035da8000f833
SHA512

2d771ab6a49c89308020602510dd53fa23756cbdc7de635b27bebf9d4580ef311aebcea2f2e775e6a8782ec0afe204fa14e7b756c118ffc6f384b4f740e07c6b
SSDEEP

24576:t0fHrP2UtjFQ7Eu+zLhFNBU8mZ0RtkKQuaFgqUbdnQd8eO4b:QjBfM0Z8gqUbBVb4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-26_6dc36142fc95edfa0f934ba5f6fadb77_mafia

Files

2024-01-26_6dc36142fc95edfa0f934ba5f6fadb77_mafia
.exe windows:5 windows x86 arch:x86

727b3cbda130bcee0375fd8911c2b5d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
RtlUnwind
HeapFree
WriteConsoleW
GetTimeFormatW
GetDateFormatW
HeapReAlloc
SetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteFileW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetFullPathNameW
MoveFileW
HeapCreate
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetOEMCP
LCMapStringW
GetStringTypeW
GetLocaleInfoA
EnumSystemLocalesA
GetCurrentDirectoryW
GetDriveTypeW
SetEndOfFile
CompareStringW
RaiseException
WriteFile
ReadFile
ExpandEnvironmentStringsW
OutputDebugStringW
GetStdHandle
SetCurrentDirectoryW
CopyFileW
GetFileAttributesW
GetFileType
TerminateProcess
SetEnvironmentVariableW
IsValidCodePage
GetCPInfo
GetCurrentProcessId
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
ExitProcess
GetCurrentProcess
TlsAlloc
TlsSetValue
TlsFree
TlsGetValue
InterlockedDecrement
InterlockedIncrement
Sleep
GetThreadLocale
GetTimeZoneInformation
GetWindowsDirectoryW
FormatMessageW
CreateMutexW
GetTempFileNameW
FindFirstFileW
FindClose
GetTempPathW
SetEnvironmentVariableA
CloseHandle
CreateFileW
SetThreadLocale
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
GetACP
GetProcessHeap
HeapSize
GetLastError
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
InitializeCriticalSection
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LocalAlloc
LocalFree
GetCommandLineW
SetErrorMode
GetVersionExW
FreeLibrary
LoadLibraryW
GetCurrentThreadId
SetLastError
MultiByteToWideChar
GetSystemTimeAsFileTime
WideCharToMultiByte

user32

MessageBeep
PostThreadMessageW
SetTimer
KillTimer
GetMenuStringW
DefMDIChildProcW
TranslateMDISysAccel
DefFrameProcW
EnumDisplaySettingsW
ChangeDisplaySettingsW
ShowCursor
SetClipboardData
RegisterClipboardFormatW
DrawStateW
DrawEdge
GetUpdateRect
DrawIcon
SetMenu
GetMessagePos
ChildWindowFromPoint
InsertMenuItemW
GetSubMenu
CreateMenu
AppendMenuW
InsertMenuW
RemoveMenu
DestroyMenu
CreatePopupMenu
DdeQueryStringW
UnionRect
ModifyMenuW
CheckMenuRadioItem
CheckMenuItem
GetMenuState
ValidateRect
GetMessageW
BeginPaint
GetWindowDC
EndPaint
TranslateAcceleratorW
CreateAcceleratorTableW
DestroyAcceleratorTable
DrawIconEx
DrawFrameControl
DdeConnect
GetClassNameW
CreateIconIndirect
LoadImageW
DestroyIcon
GetIconInfo
LoadBitmapW
LoadIconW
DestroyCursor
PostMessageW
LoadCursorW
MessageBoxW
MapWindowPoints
GetClassInfoW
GetWindowTextLengthW
HideCaret
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
DdeUninitialize
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeGetLastError
DdeInitializeW
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleW
SetMenuItemInfoW
DdeNameService
keybd_event
SetForegroundWindow
GetForegroundWindow
CreateDialogIndirectParamW
RegisterClassW
UnregisterClassW
FlashWindow
SetWindowRgn
AdjustWindowRectEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetDesktopWindow
IsIconic
IsZoomed
BringWindowToTop
OffsetRect
DrawFocusRect
CopyRect
DrawTextW
GetDlgItem
CreateDialogParamW
SendMessageW
PostQuitMessage
TranslateMessage
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
VkKeyScanW
GetAsyncKeyState
GetSystemMetrics
GetKeyState
GetWindowRect
DdePostAdvise
GetWindowTextW
InflateRect
GetUpdateRgn
GetSysColor
CreateWindowExW
SetWindowsHookExW
IsDialogMessageW
TrackPopupMenu
IsWindow
PtInRect
SetCursor
GetCapture
DestroyWindow
UnhookWindowsHookEx
UnregisterHotKey
RegisterHotKey
CallNextHookEx
GetActiveWindow
GetClientRect
FillRect
GetWindowLongW
SetWindowLongW
SetWindowPos
SetFocus
EnableWindow
ShowWindow
SetCapture
ReleaseCapture
SetCursorPos
GetScrollInfo
SetScrollInfo
ScrollWindow
GetParent
WindowFromPoint
GetCursorPos
SetParent
RedrawWindow
UpdateWindow
ScreenToClient
ClientToScreen
MoveWindow
DeferWindowPos
DefWindowProcW
CallWindowProcW
IsWindowVisible
IsWindowEnabled
GetFocus
GetMenuItemCount
GetMenuItemInfoW
SystemParametersInfoW
GetMessageTime
GetWindow
BeginDeferWindowPos
EndDeferWindowPos
InvalidateRect
SetWindowTextW
DdeFreeStringHandle

gdi32

SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
SetMapMode
GetBkColor
GetTextColor
SelectClipRgn
Arc
Pie
Polygon
SetPolyFillMode
PolyPolygon
Rectangle
RoundRect
Ellipse
MaskBlt
StretchBlt
StretchDIBits
GetRgnBox
EqualRgn
PtInRegion
RectInRegion
CombineRgn
RestoreDC
SaveDC
CreateRectRgnIndirect
SetWindowOrgEx
PatBlt
CreateICW
CreateDIBSection
GetDIBits
CreateDIBitmap
GetDIBColorTable
EnumFontFamiliesExW
GetEnhMetaFileW
CopyEnhMetaFileW
DeleteEnhMetaFile
SetAbortProc
EndDoc
StartPage
EndPage
StartDocW
CreateDCW
GetSystemPaletteEntries
GetTextExtentExPointW
GetCharABCWidthsW
SetROP2
TextOutW
PolyBezier
Polyline
GetPixel
SetPixel
ExtFloodFill
ExtSelectClipRgn
GetClipBox
SetStretchBltMode
CreatePalette
GetNearestPaletteIndex
CreateHatchBrush
MoveToEx
LineTo
GetStockObject
ExtCreatePen
CreateBitmap
BitBlt
GetPaletteEntries
GetObjectW
CreatePatternBrush
CreateCompatibleBitmap
GetTextMetricsW
SelectObject
GdiFlush
SelectPalette
RealizePalette
GetTextExtentPoint32W
CreateRectRgn
ExcludeClipRect
CreateFontIndirectW
DeleteObject
GetDeviceCaps
SetBkColor
SetTextColor
SetBkMode
CreatePen
CreateSolidBrush
OffsetRgn
ExtCreateRegion
GetRegionData
CreateCompatibleDC
SetTextAlign
SetBrushOrgEx
DeleteDC

comdlg32

GetOpenFileNameW
CommDlgExtendedError
PageSetupDlgW
PrintDlgW
ChooseFontW
ChooseColorW
GetSaveFileNameW

shell32

SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExW
ExtractIconExW
ExtractIconW
DragQueryFileW
DragQueryPoint
DragFinish
DragAcceptFiles
SHGetSpecialFolderLocation

comctl32

ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_EndDrag
ImageList_Destroy
CreateStatusWindowW
ImageList_GetImageCount
ImageList_Draw
ImageList_GetIconSize
ord16
ord17

ole32

CoCreateInstance
OleGetClipboard
ReleaseStgMedium
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleInitialize
OleUninitialize

advapi32

RegQueryValueExW
RegOpenKeyExW
GetUserNameW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

wsock32

WSAStartup
ntohs
ntohl
gethostbyaddr
getservbyname
htonl
WSACleanup
gethostbyname
htons
ioctlsocket
socket
closesocket
recv
send
inet_ntoa
connect
select
setsockopt
WSAGetLastError

Sections

.text
Size: 961KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

727b3cbda130bcee0375fd8911c2b5d7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

comctl32

ole32

advapi32

wsock32

Sections

.text Size: 961KB - Virtual size: 960KB

.rdata Size: 292KB - Virtual size: 292KB

.data Size: 39KB - Virtual size: 194KB

.rsrc Size: 32KB - Virtual size: 32KB

.reloc Size: 137KB - Virtual size: 137KB

.text
Size: 961KB - Virtual size: 960KB

.rdata
Size: 292KB - Virtual size: 292KB

.data
Size: 39KB - Virtual size: 194KB

.rsrc
Size: 32KB - Virtual size: 32KB

.reloc
Size: 137KB - Virtual size: 137KB