2024-01-28_926310ea36fd8bcf27ab39de4facfdab_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-28_926310ea36fd8bcf27ab39de4facfdab_mafia
Size

908KB
MD5

926310ea36fd8bcf27ab39de4facfdab
SHA1

eda7722125e60bc2b2bed1fad2f2e03d360399cf
SHA256

5de630274fd4f1b712b5f389602737bb3a128fa0aebfcdc46e01d9012c0caad4
SHA512

2d86b4bfa0c8dc243ffa805b4ab6fcde0e9561e85450b1141ece09191310cae44466cf58de0bbeca6f4b672f8359c737321e1a932e6a91fac960bb95b27b0209
SSDEEP

12288:wW66JMBTNq4lm0Jc2/J3v8WtVd2vjaamAS9bVjAJ6e7z9g:wW64+TDc2/J3ztV2j5mAS5V8sen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-28_926310ea36fd8bcf27ab39de4facfdab_mafia

Files

2024-01-28_926310ea36fd8bcf27ab39de4facfdab_mafia
.exe windows:5 windows x86 arch:x86

06016f7f7ea7c92b0d62a3b6b0b986e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Chris\Documents\Visual Studio 2010\Projects\sas\Release\dsview.pdb

Imports

kernel32

CreateFileMappingW
GetCommandLineW
CreateDirectoryW
GetNativeSystemInfo
GetVersionExW
GlobalMemoryStatusEx
OutputDebugStringA
SetEndOfFile
CreateFileW
SetStdHandle
WriteConsoleW
LoadLibraryW
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapSize
FlushFileBuffers
ReadFile
SetFilePointer
GetConsoleMode
GetConsoleCP
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
FileTimeToSystemTime
TlsAlloc
UnmapViewOfFile
GetOEMCP
GetACP
HeapCreate
ExitProcess
GetModuleHandleW
GetProcAddress
GetLocaleInfoW
GetModuleFileNameW
GetStdHandle
WriteFile
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetSystemTimeAsFileTime
GetCPInfo
HeapFree
HeapAlloc
DecodePointer
EncodePointer
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStringTypeW
InterlockedExchange
InterlockedCompareExchange
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
InterlockedIncrement
Sleep
GetProcessHeap
MapViewOfFile
OpenFileMappingW
ReleaseMutex
WaitForSingleObject
CloseHandle
GetLastError
CreateMutexW
lstrlenA
OutputDebugStringW
InterlockedDecrement
IsValidCodePage
MultiByteToWideChar
GetTickCount
CreateThread
GetCurrentThread
SetThreadPriority
GlobalUnlock
GlobalLock
TlsGetValue
GlobalAlloc

user32

SetFocus
SetWindowLongW
DestroyWindow
GetWindowRect
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
MoveWindow
DeleteMenu
GetMenuItemCount
DispatchMessageW
GetDC
ReleaseDC
GetWindowLongW
BeginPaint
GetClientRect
EndPaint
SetWindowPos
SendMessageW
SetCapture
ReleaseCapture
CreatePopupMenu
AppendMenuW
TrackPopupMenu
DefWindowProcW
DestroyMenu
GetScrollInfo
ScreenToClient
GetWindowPlacement
ClientToScreen
LoadImageW
DialogBoxParamW
GetSystemMetrics
SetScrollInfo
SetCursor
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawTextW
GetCursorPos
CreateMenu
SetDlgItemTextW
GetDlgItem
EndDialog
SystemParametersInfoW
SetTimer
CreateMDIWindowW
ShowWindow
DefMDIChildProcW
DrawMenuBar
GetMenu
InvalidateRect
FindWindowW
TranslateMessage
TranslateAcceleratorW
TranslateMDISysAccel
GetMessageW
GetWindowThreadProcessId
AllowSetForegroundWindow
UpdateWindow
LoadAcceleratorsW
LoadMenuW
GetWindow
DefFrameProcW
PostQuitMessage
SetForegroundWindow
MessageBoxW
MessageBoxA
EnumChildWindows
IsWindow
SetMenuItemInfoW
GetSubMenu
GetParent

gdi32

CreateFontIndirectW
BitBlt
PatBlt
SelectObject
CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
DeleteDC

comdlg32

GetOpenFileNameW

advapi32

RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW

shell32

ShellExecuteW
DragQueryFileW
DragFinish
DragAcceptFiles
SHGetKnownFolderPath

ole32

CoUninitialize
CoInitializeEx

wininet

InternetOpenW
InternetReadFile
InternetConnectW
HttpOpenRequestW
HttpSendRequestA
InternetCloseHandle
InternetOpenUrlW

comctl32

ord413
ord410
InitCommonControlsEx

gdiplus

GdipCloneImage
GdipCreateBitmapFromHICON
GdipDrawRectangle
GdipFillRectangle
GdipDrawLineI
GdipDeletePen
GdipCreatePen1
GdipSetSolidFillColor
GdipDrawImageRect
GdipSetInterpolationMode
GdipDrawString
GdipDrawRectangleI
GdipFillRectangleI
GdipResetClip
GdipSetClipRegion
GdipDeleteRegion
GdipDisposeImage
GdipMeasureString
GdipDeleteFont
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteGraphics
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdiplusStartup
GdipCreateBitmapFromResource
GdiplusShutdown
GdipCreateRegionRectI

shlwapi

PathFileExistsW

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 602KB - Virtual size: 601KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06016f7f7ea7c92b0d62a3b6b0b986e0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

wininet

comctl32

gdiplus

shlwapi

Sections

.text Size: 232KB - Virtual size: 231KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 8KB - Virtual size: 18KB

.rsrc Size: 602KB - Virtual size: 601KB

.reloc Size: 18KB - Virtual size: 17KB

.text
Size: 232KB - Virtual size: 231KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 8KB - Virtual size: 18KB

.rsrc
Size: 602KB - Virtual size: 601KB

.reloc
Size: 18KB - Virtual size: 17KB