D:\2014\02.Codes\ACR\20141020_ACR 최종 소스코드_로컬ACR_Final\20140210_FinalCode_PCA_NEON\20141120_Final_VD_Release\20141105_FPExtractor\Release\VFPFromFolder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-27_90fd7c20c951d9016cb9c7987e3128e7_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-27_90fd7c20c951d9016cb9c7987e3128e7_mafia.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-27_90fd7c20c951d9016cb9c7987e3128e7_mafia
-
Size
2.8MB
-
MD5
90fd7c20c951d9016cb9c7987e3128e7
-
SHA1
2b9fe80b65e24a6837d12b17bb48257703725530
-
SHA256
770d4b5ba40575808d83bdec8589f08a18112fa3ec85eb47375be97cfa9f2109
-
SHA512
44d3a8cf2a41d1f81d35869c4e04d5a6e92b86de3b6760ebdca98377781f47ca07f10de263e7592816c738012c9aed9a041379c3fc0ca2b21086d23795d118cc
-
SSDEEP
49152:MaFYDXFwYy6yLnQore/2BJ/WwFLHDOuUvh1rMLaT7zt/pRBTuCE3fpLOFVX23xfb:TqXFwYy6yLnQD/cQWLHSuUvh1rMLYpRa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-27_90fd7c20c951d9016cb9c7987e3128e7_mafia
Files
-
2024-01-27_90fd7c20c951d9016cb9c7987e3128e7_mafia.exe windows:5 windows x86 arch:x86
ee652852891ed349d4e0b670a43baf08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
opencv_core245
cvSplit
cvReleaseImage
cvCreateImage
opencv_highgui245
cvQueryFrame
cvReleaseCapture
cvGetCaptureProperty
cvCreateFileCapture
cvSaveImage
cvSetCaptureProperty
opencv_imgproc245
cvCvtColor
cvResize
kernel32
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
GetTimeZoneInformation
GetDriveTypeW
CompareStringW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
IsValidCodePage
LCMapStringW
FindResourceW
LoadResource
WideCharToMultiByte
GetStdHandle
SizeofResource
LockResource
InterlockedIncrement
InterlockedDecrement
CreateDirectoryA
MultiByteToWideChar
lstrlenA
MulDiv
lstrlenW
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CopyFileA
GlobalFree
SetLastError
GetLastError
DeactivateActCtx
ActivateActCtx
GlobalAddAtomA
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
CreateThread
ExitThread
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
RtlUnwind
HeapReAlloc
HeapAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
DecodePointer
EncodePointer
GlobalGetAtomNameA
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetCurrentProcessId
FindResourceExW
lstrcmpW
FreeLibrary
LoadLibraryW
VirtualProtect
SearchPathA
Sleep
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetCurrentDirectoryA
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
SetErrorMode
GetACP
GetOEMCP
GetCPInfo
lstrcpyA
GetSystemDirectoryW
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
ReleaseActCtx
CreateActCtxW
GetModuleFileNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
ReplaceFileA
SystemTimeToFileTime
GetFileAttributesA
WaitForSingleObject
ResumeThread
SetThreadPriority
GetTickCount
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
GetModuleHandleW
InterlockedExchange
GetShortPathNameA
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
InitializeCriticalSectionAndSpinCount
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
DeleteFileA
CreateFileA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
FindResourceA
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
user32
DestroyCursor
GetWindowRgn
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongA
DestroyAcceleratorTable
UnregisterClassA
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
GetAsyncKeyState
NotifyWinEvent
LoadMenuW
LoadAcceleratorsW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
CopyImage
WindowFromPoint
SetRect
UnionRect
SetParent
GetSystemMenu
DeleteMenu
SetLayeredWindowAttributes
EnumDisplayMonitors
GetMenuItemInfoA
InflateRect
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
LoadCursorW
SetCapture
SetWindowRgn
DrawIcon
SystemParametersInfoA
IsRectEmpty
MapVirtualKeyA
GetKeyNameTextA
ShowOwnedPopups
GetMessageA
TranslateMessage
GetCursorPos
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
FillRect
DrawStateA
MapDialogRect
RegisterClipboardFormatA
PostQuitMessage
CharUpperA
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
SubtractRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
ValidateRect
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
PtInRect
IsZoomed
GetSystemMetrics
GetClassNameA
GetSysColor
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
WinHelpA
SetWindowPos
LoadImageA
DestroyIcon
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
EqualRect
GetDlgItem
SetWindowLongA
GetDlgCtrlID
GetKeyState
LoadIconW
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
WaitMessage
CharUpperBuffA
CopyIcon
GetParent
SetActiveWindow
IsWindowVisible
InvalidateRect
IsIconic
InsertMenuItemA
CreatePopupMenu
GetClassInfoA
IntersectRect
OffsetRect
SetRectEmpty
FrameRect
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CheckDlgButton
OpenClipboard
CopyRect
GetMenu
GetLastActivePopup
BringWindowToTop
PostMessageA
SetMenu
GetDesktopWindow
GetWindow
ShowWindow
GetWindowLongA
IsWindow
TranslateAcceleratorA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
ReleaseDC
GetDC
KillTimer
SetTimer
MessageBoxA
GetWindowRect
SendMessageA
GetClientRect
EnableWindow
UpdateWindow
SetWindowContextHelpId
SetCursorPos
gdi32
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateFontIndirectA
CreateRectRgnIndirect
PatBlt
CreateEllipticRgn
DPtoLP
LPtoDP
Ellipse
IntersectClipRect
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateRoundRectRgn
CreatePolygonRgn
Polyline
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
GetClipBox
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetStockObject
CreateSolidBrush
DeleteObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetTextExtentPoint32A
GetTextMetricsA
SelectObject
CreateDCA
CopyMetaFileA
GetDeviceCaps
BitBlt
SetBitmapBits
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
GetFileSecurityA
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
SetFileSecurityA
RegQueryValueA
shell32
ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAppBarMessage
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs
comctl32
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW
ole32
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
CoInitializeEx
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
oleaut32
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VarBstrFromDate
VariantCopy
OleCreateFontIndirect
SysAllocString
VariantClear
SysAllocStringLen
VariantInit
VariantChangeType
SysAllocStringByteLen
SysFreeString
oledlg
ord8
gdiplus
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipDrawImageI
GdipGetImageHeight
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ