2024-01-29_2f379e88f4290eafe95c13b5c2b66529_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-29_2f379e88f4290eafe95c13b5c2b66529_mafia
Size

1.9MB
MD5

2f379e88f4290eafe95c13b5c2b66529
SHA1

20518ca6ab25c071ffb3da70c3590f75a1becbca
SHA256

9f0b9ad90febee4f16b2320a393ce57719ccedfffdade1f5276cf08cd52dfc66
SHA512

8012c251be6b15c037da13020639d5ce015ce1a237bbbf261ad78f3356bf11187230b674267c7042ae551cfc34cf9a1b6df3a98e9558995f6997781b58de851e
SSDEEP

49152:0axvIuMIMb1GtgSmgpghoyGmHYquI+m6vwo0rRSM5ld4/cUUtWMz36a8:DmzIMb1G6SkhDGqYFm6vwonQld4zUtWz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-29_2f379e88f4290eafe95c13b5c2b66529_mafia

Files

2024-01-29_2f379e88f4290eafe95c13b5c2b66529_mafia
.exe windows:5 windows x86 arch:x86

1766f62b1f62c33d2df5457e7a127273

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
IsValidLocale
EnumSystemLocalesA
SetEnvironmentVariableA
GetLocaleInfoA
LCMapStringW
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
FindResourceW
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
CreateThread
ExitThread
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetTickCount
SetErrorMode
GetFileTime
GetFileSizeEx
lstrlenA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalGetAtomNameW
GlobalFlags
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
CreateEventW
SuspendThread
SetEvent
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
RaiseException
GetCurrentProcessId
GlobalSize
GlobalLock
GlobalUnlock
FormatMessageW
MulDiv
ReleaseActCtx
CreateActCtxW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GlobalFree
GlobalAlloc
LocalFileTimeToFileTime
GetCurrentDirectoryW
WideCharToMultiByte
WriteFile
SetFileTime
SystemTimeToFileTime
SetFilePointer
GetVolumeInformationW
LocalFree
LocalAlloc
lstrlenW
GetCurrentThread
GetComputerNameW
GetCurrentProcess
GetExitCodeProcess
CreateProcessW
GetModuleFileNameW
OutputDebugStringW
CloseHandle
GetFileAttributesExW
FindNextFileW
FindNextFileA
FindClose
FindFirstFileA
CreateFileW
ReadFile
CreateDirectoryW
FindFirstFileW
GetFullPathNameA
ExpandEnvironmentStringsW
RemoveDirectoryW
GetSystemTimeAsFileTime
GetModuleHandleW
GetTempPathW
GetTempFileNameW
ResumeThread
DeleteFileW
GetExitCodeThread
ResetEvent
GetFileAttributesW
CopyFileW
Sleep
WaitForSingleObject
InterlockedDecrement
lstrcpyW
GetProcAddress
GetVersionExW
LoadLibraryW
GetSystemDirectoryW
FreeLibrary
LockResource
SetLastError
GetLastError
DeactivateActCtx
MultiByteToWideChar
SizeofResource
ActivateActCtx
LoadResource
GetProcessHeap

advapi32

FreeSid
RegOpenKeyExW
RegCloseKey
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
OpenProcessToken
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
GetLengthSid
IsValidSecurityDescriptor
RegQueryValueExW
AddAccessAllowedAce
SetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeAcl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
DuplicateToken
RegCreateKeyExW
AccessCheck
SetSecurityDescriptorGroup
GetUserNameW
OpenThreadToken

comctl32

InitCommonControlsEx
ImageList_GetIconSize

comdlg32

GetFileTitleW

gdi32

SetPixel
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
ExtFloodFill
CreatePalette
GetPaletteEntries
SetPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetNearestPaletteIndex
GetSystemPaletteEntries
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
StretchBlt
SetPixelV
GetTextFaceW
GetPixel
GetWindowExtEx
RealizePalette
SetDIBColorTable
OffsetRgn
CreateDIBSection
CreateRoundRectRgn
GetTextColor
GetBkColor
GetRgnBox
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
PatBlt
GetTextExtentPoint32W
CreateHatchBrush
GetObjectType
SelectPalette
CreateBitmap
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
EnumFontFamiliesExW
GetDeviceCaps
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
SetBkColor
SetTextColor
Rectangle
CreateRectRgn
PaintRgn
EnumFontFamiliesW
BitBlt
GetTextMetricsW
CreateFontIndirectW
CreateSolidBrush
GetStockObject
CreateDIBitmap
CreatePen
CreatePatternBrush
GetObjectW
CreateCompatibleBitmap
CreateRectRgnIndirect
CreateCompatibleDC
DeleteObject
GetTextCharsetInfo
PtVisible

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

msimg32

TransparentBlt
AlphaBlend

ole32

CoRegisterMessageFilter
RevokeDragDrop
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoTaskMemFree
CoInitialize
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRevokeClassObject
CoLockObjectExternal
OleGetClipboard
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleLockRunning
RegisterDragDrop
CoCreateInstance

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

oleaut32

SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantChangeType
VariantInit
VariantCopy
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
VariantClear
SafeArrayDestroy
OleCreateFontIndirect
SysStringLen
SysAllocString
SysFreeString

oledlg

OleUIBusyW

shell32

SHBrowseForFolderW
SHOpenFolderAndSelectItems
ord155
SHGetSpecialFolderPathW
ShellExecuteW
Shell_NotifyIconW
SHAppBarMessage
DragQueryFileW
DragFinish
ord190
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
UrlUnescapeW
PathFindExtensionW

urlmon

URLDownloadToFileW
IsValidURL

user32

DestroyAcceleratorTable
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
RegisterClipboardFormatW
SetParent
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
GetAsyncKeyState
NotifyWinEvent
SetWindowRgn
MessageBeep
GetNextDlgGroupItem
WaitMessage
WindowFromPoint
KillTimer
SetTimer
DeleteMenu
CharNextW
SetCapture
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
UnregisterClassW
UnpackDDElParam
ReuseDDElParam
LoadImageW
DestroyIcon
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
IntersectRect
OffsetRect
RealChildWindowFromPoint
DrawStateW
MapVirtualKeyW
GetKeyNameTextW
CharUpperW
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
DestroyMenu
GetMenuItemInfoW
InflateRect
LoadMenuW
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetMessageW
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
SetClassLongW
SetCursor
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetMenuState
GetMenuStringW
InsertMenuW
RemoveMenu
RegisterWindowMessageW
SendDlgItemMessageW
GetWindow
DefWindowProcW
SendMessageW
GetClassNameW
GetClassInfoW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
SetCursorPos
FrameRect
CopyIcon
LockWindowUpdate
CharUpperBuffW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
PostThreadMessageW
GetIconInfo
GetDoubleClickTime
IsClipboardFormatAvailable
DestroyCursor
CreateMenu
GetUpdateRect
GetScrollPos
ShowScrollBar
UpdateWindow
MessageBoxW
GetClassInfoExW
RegisterClassW
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetWindowRgn
ShowOwnedPopups
CopyRect
GetMonitorInfoW
MapWindowPoints
GetSystemMetrics
GetSysColorBrush
SetLayeredWindowAttributes
GetSysColor
SystemParametersInfoW
SetRectEmpty
GetClientRect
LoadCursorW
GetParent
EnumDisplayMonitors
EnableWindow
IsWindowVisible
ShowWindow
SetWindowPos
RedrawWindow
SetWindowLongW
AppendMenuW
GetWindowLongW
BringWindowToTop
InvalidateRect
LoadIconW
DrawIcon
SetForegroundWindow
PostMessageW
IsIconic
GetWindowRect
GetSystemMenu
IsWindow
GetCursorPos
wsprintfW
DefFrameProcW
TranslateMDISysAccel
AdjustWindowRectEx
CreateWindowExW
GetMenuItemCount
GetActiveWindow
DrawMenuBar
DefMDIChildProcW
GetMenu
GetSubMenu
GetMenuItemID
TranslateAcceleratorW
CallWindowProcW
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
PtInRect

wininet

InternetOpenW
InternetOpenUrlW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryDataAvailable
InternetSetOptionExW
InternetQueryOptionW
DeleteUrlCacheEntryW

winmm

PlaySoundW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1766f62b1f62c33d2df5457e7a127273

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

comctl32

comdlg32

gdi32

gdiplus

imm32

msimg32

ole32

oleacc

oleaut32

oledlg

shell32

shlwapi

urlmon

user32

wininet

winmm

winspool.drv

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 366KB - Virtual size: 366KB

.data Size: 27KB - Virtual size: 57KB

.rsrc Size: 26KB - Virtual size: 27KB

.reloc Size: 512B - Virtual size: 174KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 366KB - Virtual size: 366KB

.data
Size: 27KB - Virtual size: 57KB

.rsrc
Size: 26KB - Virtual size: 27KB

.reloc
Size: 512B - Virtual size: 174KB