2024-01-28_d79b277d4c6ac2630a1e852603a78804_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-28_d79b277d4c6ac2630a1e852603a78804_mafia
Size

1.7MB
MD5

d79b277d4c6ac2630a1e852603a78804
SHA1

4b3468dfa9b248510e7f698d59948dd463bf0fb2
SHA256

d3009e61e8ee40180b73cd952b270f6a9ab241d6478b4c772b12ee7d65b82107
SHA512

fc245d6ec8fd5b61b5a4cb7c0f4744095a3557201b3c0bc97d0d191689557fffbe043cbc7b851629e184d406b26af4bd2c33a754bbd801ccd54f75f4a8676473
SSDEEP

49152:1szpTmRNrlWZmKdkuu46Z0CV2CmB8Un93GoAj2DKEUAbwQRDX6q2E8Hy:kTmRNMZmKdkuOZsC2rn93GoAj2P9wwXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-28_d79b277d4c6ac2630a1e852603a78804_mafia

Files

2024-01-28_d79b277d4c6ac2630a1e852603a78804_mafia
.exe windows:5 windows x86 arch:x86

5f45f09a130e79c7762cb14eee842c1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

shlwapi

AssocQueryStringA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW

wininet

HttpQueryInfoA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetReadFile

kernel32

FreeResource
GlobalLock
lstrcmpW
LoadLibraryW
GlobalUnlock
GlobalFree
FreeLibrary
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
MulDiv
lstrcmpiA
CreateFileA
DeleteFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
lstrlenW
LocalFree
FormatMessageA
GlobalAlloc
GlobalSize
CopyFileA
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
InterlockedDecrement
GetCurrentProcessId
GetModuleHandleW
InterlockedExchange
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
SetThreadPriority
ResumeThread
WaitForSingleObject
GetPrivateProfileIntA
WritePrivateProfileStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalFlags
GetACP
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
SetErrorMode
GetFileAttributesExA
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetCurrentDirectoryA
GetWindowsDirectoryA
GetNumberFormatA
GetTempFileNameA
GetTempPathA
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
GetTickCount
GetProfileIntA
Sleep
SearchPathA
VirtualProtect
FindResourceExW
RtlUnwind
HeapFree
RaiseException
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitProcess
ExitThread
CreateThread
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsValidCodePage
LCMapStringW
IsProcessorFeaturePresent
HeapCreate
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetLocaleInfoW
GetStringTypeW
GetTimeZoneInformation
CompareStringW
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetModuleFileNameA
FindResourceA
GetCommandLineA
GetProcessHeap
lstrcpynA
UnmapViewOfFile
CloseHandle
CreateFileMappingA
MapViewOfFile
GetCurrentThreadId
GetPrivateProfileStringA
GetLocalTime
MultiByteToWideChar
lstrcmpA
lstrcatA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
GetProcAddress
LoadLibraryA
lstrcpyA
lstrlenA
GetModuleHandleA
CompareStringA

user32

GetWindowThreadProcessId
WindowFromPoint
GetCursorPos
ValidateRect
GetMessageA
SetCursor
ShowOwnedPopups
InflateRect
GetMenuItemInfoA
DestroyMenu
SystemParametersInfoA
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorA
IntersectRect
IsClipboardFormatAvailable
MessageBeep
SetRect
InvalidateRect
UnregisterClassA
DeleteMenu
SetTimer
KillTimer
SetRectEmpty
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadCursorW
ReleaseCapture
WaitMessage
DestroyIcon
GetMenuDefaultItem
CreatePopupMenu
IsRectEmpty
GetAsyncKeyState
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
OffsetRect
GetIconInfo
CopyImage
GetNextDlgGroupItem
DrawIconEx
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
LoadMenuW
DrawStateA
DrawEdge
DrawFrameControl
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
BringWindowToTop
LockWindowUpdate
InsertMenuItemA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
SetMenuDefaultItem
FrameRect
GetUpdateRect
RegisterClipboardFormatA
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
MapDialogRect
DestroyCursor
GetWindowRgn
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetMenuStringA
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
InsertMenuA
RemoveMenu
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
MoveWindow
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
ScrollWindow
TrackPopupMenu
GetKeyState
SetWindowTextA
IsDialogMessageA
PostThreadMessageA
RegisterWindowMessageA
LoadAcceleratorsA
GetClassLongA
SetClassLongA
TranslateAcceleratorA
GetMessagePos
MapWindowPoints
GetSystemMetrics
LoadIconW
SetCapture
RedrawWindow
IsWindowVisible
ScreenToClient
GetClientRect
GetWindowRect
GetSystemMenu
AppendMenuA
DrawIcon
PtInRect
EnumWindows
SetForegroundWindow
IsIconic
ShowWindow
PostQuitMessage
MessageBoxA
SendMessageTimeoutA
PeekMessageA
DispatchMessageA
TranslateMessage
GetSysColor
GetFocus
FillRect
CopyRect
SendMessageA
EnableWindow
LoadImageA
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
PostMessageA
EqualRect
SetDlgItemTextA
GetSubMenu
CreateMenu
GetMenuItemID
GetDlgItem

gdi32

GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetTextFaceA
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
Rectangle
LineTo
StretchBlt
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
SetTextAlign
DeleteObject
DeleteDC
SetBkColor
BitBlt
SetMapMode
GetMapMode
CreateCompatibleBitmap
CreateBitmap
DPtoLP
GetObjectA
SelectObject
CreateCompatibleDC
CreateFontIndirectA
IntersectClipRect
ExcludeClipRect
GetClipBox
SetROP2
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
CombineRgn
SetRectRgn
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
MoveToEx
SetPixel
GetTextMetricsA
GetTextExtentPoint32A
CreateDCA
CopyMetaFileA
PatBlt
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
CreatePen
GetDeviceCaps
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetTextColor
GetPixel
PtVisible
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyA
RegSetValueExA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueA

shell32

SHGetFileInfoA
ShellExecuteA
SHAppBarMessage
SHBrowseForFolderA
DragQueryFileA
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

ole32

OleLockRunning
DoDragDrop
IsAccelerator
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoInitialize
CoCreateInstance
IIDFromString
CoUninitialize
CoTaskMemFree
OleGetClipboard

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
SysAllocString
VarBstrFromDate
SysStringLen
VariantChangeType

msimg32

TransparentBlt
AlphaBlend

comctl32

ord17
ImageList_GetIconSize

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipDrawImageI
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapUnlockBits

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ropf
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f45f09a130e79c7762cb14eee842c1b

Headers

DLL Characteristics

File Characteristics

Imports

version

shlwapi

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msimg32

comctl32

oleacc

gdiplus

imm32

winmm

winspool.drv

comdlg32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 271KB - Virtual size: 270KB

.data Size: 24KB - Virtual size: 54KB

.rsrc Size: 28KB - Virtual size: 28KB

.reloc Size: 166KB - Virtual size: 165KB

.ropf Size: 84KB - Virtual size: 83KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 271KB - Virtual size: 270KB

.data
Size: 24KB - Virtual size: 54KB

.rsrc
Size: 28KB - Virtual size: 28KB

.reloc
Size: 166KB - Virtual size: 165KB

.ropf
Size: 84KB - Virtual size: 83KB