2024-02-03_8cfb5db767d156dad24e4c26fb0ebb6f_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-03_8cfb5db767d156dad24e4c26fb0ebb6f_mafia
Size

3.2MB
MD5

8cfb5db767d156dad24e4c26fb0ebb6f
SHA1

9921391bd790d5073db9b5c28d2dc7a5c4cf6622
SHA256

4a95ed35314b0de67ce40d1ccc70674446c99dabb28007227f725132fb56a1ba
SHA512

1bef823d8aa212ab261a87de4c00eb1b95d73c9ee96761b414f84fa4bfb43e046a55650e4402bc2dbc06cd3f6ee8ebe4672afb6a376e7e21deee2c4576f2f47e
SSDEEP

98304:3SGostIPWzD3lfv2yUWuZASgrzGVvEMtm0BvvunE3Xc:Czy1CLuU1tm0Bvm+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-03_8cfb5db767d156dad24e4c26fb0ebb6f_mafia

Files

2024-02-03_8cfb5db767d156dad24e4c26fb0ebb6f_mafia
.exe windows:5 windows x86 arch:x86

2fbfdab3b633e598e5a2d7a707008499

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r340\r340_00\drivers\ui\SedonaServers\WorkStationServer\NvGpuUtilization\NvGpuUtilization\Win32\Release\bin\NvGpuUtilization.pdb

Imports

kernel32

TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalGetAtomNameW
lstrlenA
GlobalFlags
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileW
GetVolumeInformationW
GetWindowsDirectoryW
GetNumberFormatW
lstrcpyW
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
GetTempFileNameW
GetTempPathW
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
GetUserDefaultLCID
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
DecodePointer
EncodePointer
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
ExitThread
HeapSize
HeapQueryInformation
ExitProcess
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
GetTimeZoneInformation
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
GlobalHandle
FormatMessageA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
SetThreadPriority
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
CopyFileW
GlobalSize
CreateThread
ResumeThread
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WriteFile
GetFileSizeEx
QueryPerformanceCounter
GetCurrentThreadId
InterlockedCompareExchange
GetFileAttributesW
MulDiv
WaitForSingleObject
GetLocaleInfoW
lstrcmpiW
GetSystemDefaultLCID
GetSystemTimeAsFileTime
InterlockedDecrement
InterlockedIncrement
LoadLibraryW
GetSystemInfo
GetCurrentProcess
GetVersionExW
lstrlenW
WideCharToMultiByte
TerminateProcess
FindResourceExW
FreeResource
FormatMessageW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentProcessId
ProcessIdToSessionId
GetUserDefaultUILanguage
RaiseException
LoadLibraryA
InterlockedExchange
GlobalReAlloc
TlsGetValue
GetFileTime
OutputDebugStringW
lstrcmpA
CreateFileW
CloseHandle
GetModuleFileNameW
VerSetConditionMask
VerifyVersionInfoW
GetFullPathNameW
ExpandEnvironmentStringsW
lstrcmpW
GetSystemDirectoryW
CreateProcessA
LocalAlloc
CreateProcessW
GetLastError
LoadLibraryExW
SetLastError
GetModuleHandleW
LocalFree
Sleep
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
FreeLibrary
InitializeCriticalSection

gdi32

SetBkMode
TextOutW
SetTextColor
SetBkColor
LineTo
Rectangle
SetDCPenColor
SetDCBrushColor
GetStockObject
DeleteObject
PolylineTo
MoveToEx
SelectObject
ExtCreatePen
CreateSolidBrush
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetDIBColorTable
StretchBlt
SetPixel
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
GetTextColor
Polyline
Ellipse
Polygon
GetSystemPaletteEntries
CreateFontW
GetTextFaceW
GetBoundsRect
FillRgn
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
CreateRoundRectRgn
PtInRegion
FrameRgn
SetPixelV
SetPaletteEntries
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
DPtoLP
PatBlt
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateHatchBrush
CreatePen
GetObjectType
SelectPalette
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
GetTextExtentPoint32W
GetDeviceCaps
GetTextMetricsW
CreateFontIndirectW
ExtFloodFill

oleaut32

VariantInit
VariantChangeType
SysFreeString
VariantClear
SysAllocStringLen
SysAllocString
VarBstrFromDate
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI
GdipCreateFromHDC

wtsapi32

WTSQueryUserToken

winmm

PlaySoundW

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathRemoveFileSpecW
PathFindExtensionW

comctl32

ImageList_GetIconSize

msimg32

TransparentBlt
AlphaBlend

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

comdlg32

GetFileTitleW

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RevertToSelf
ImpersonateLoggedOnUser
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW

ole32

CoInitialize
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleLockRunning
IsAccelerator
CoInitializeEx
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
OleTranslateAccelerator

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 454KB - Virtual size: 454KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 864KB - Virtual size: 868KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2fbfdab3b633e598e5a2d7a707008499

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

oleaut32

oleacc

gdiplus

wtsapi32

winmm

shlwapi

comctl32

msimg32

imm32

winspool.drv

comdlg32

advapi32

ole32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 291KB - Virtual size: 291KB

.data Size: 26KB - Virtual size: 74KB

.rsrc Size: 454KB - Virtual size: 454KB

.reloc Size: 864KB - Virtual size: 868KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 291KB - Virtual size: 291KB

.data
Size: 26KB - Virtual size: 74KB

.rsrc
Size: 454KB - Virtual size: 454KB

.reloc
Size: 864KB - Virtual size: 868KB