2024-02-04_9c0f3a45227901c01bd619164677d718_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-04_9c0f3a45227901c01bd619164677d718_mafia
Size

2.1MB
MD5

9c0f3a45227901c01bd619164677d718
SHA1

0adc1d8675cd8bde232f53eb90f58d96eef004ec
SHA256

20519eb948872eb8b69e541828abcc71b7c75f29b8d032470e6b2948dda7c40a
SHA512

d1b16baee26b95f97bb7867100091fc29e7d43d5fca93db023b0a6d518c5be37dcbbea987d49dec301bb7b20482b58f6d2d48ec4f9cc046ff0f0dbb0fc70d74d
SSDEEP

49152:8KfM/B9T4Mbw2LAyGaWosGs0FAsh3w1NO89fD/IXNHB0Ps0NpzlzwJrXxihyou:HM/B9UMbDAoWosd0F7h3w1NrENh0Ps0c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-04_9c0f3a45227901c01bd619164677d718_mafia

Files

2024-02-04_9c0f3a45227901c01bd619164677d718_mafia
.exe windows:5 windows x86 arch:x86

20af7bd179e3a7d1c2c499f725e26e19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImagePalette
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromStream
GdiplusShutdown
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipDrawImageI
GdiplusStartup
GdipGetImagePaletteSize

uxtheme

IsAppThemed
DrawThemeParentBackground

wininet

InternetCrackUrlA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA

kernel32

GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetStringTypeW
GetTimeZoneInformation
CreateFileA
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
HeapReAlloc
RtlUnwind
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateThread
ExitThread
CreateDirectoryW
EncodePointer
DecodePointer
ExitProcess
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetStartupInfoW
HeapSetInformation
GetCommandLineW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
SearchPathW
GetProfileIntW
GetFileAttributesW
GetNumberFormatW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
DeleteFileW
FindResourceExW
GetCurrentDirectoryW
GetThreadLocale
GlobalGetAtomNameW
TlsFree
GetConsoleMode
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
GlobalFlags
lstrcpyW
GetSystemDirectoryW
WritePrivateProfileStringW
ResumeThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GetLocaleInfoW
LoadLibraryExW
VirtualProtect
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
GetCurrentThreadId
WideCharToMultiByte
CopyFileW
GlobalSize
FormatMessageW
lstrlenW
MulDiv
GetCurrentProcessId
ActivateActCtx
DeactivateActCtx
FreeResource
RaiseException
InterlockedExchange
LocalFree
LocalAlloc
FreeLibrary
CreateFileW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCurrentProcess
CloseHandle
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
SetThreadPriority
GetModuleHandleW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersion
LoadLibraryExA
GetUserPreferredUILanguages
GetModuleFileNameA
GetModuleHandleA
WaitForSingleObject
CreateEventW
Sleep
GetProductInfo
GetProcAddress
GetModuleFileNameW
LoadLibraryA
SetEvent
OutputDebugStringW
MultiByteToWideChar
FileTimeToSystemTime
GetTickCount
GetLastError
lstrcatA
lstrlenA
lstrcmpA
SetLastError
GetComputerNameA
OutputDebugStringA
FindResourceW
LoadResource
LockResource
SizeofResource
GetConsoleCP
IsProcessorFeaturePresent
LocalReAlloc
QueryPerformanceCounter
GetFileType
CreateDirectoryA

user32

TranslateAcceleratorW
FrameRect
RegisterClipboardFormatW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
LoadImageW
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFocusRect
DrawFrameControl
DrawEdge
SetClassLongW
DestroyAcceleratorTable
SetParent
DestroyIcon
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
CharNextW
WaitMessage
UnregisterClassW
GetMenuDefaultItem
SetMenuDefaultItem
GetMenuItemInfoW
IsMenu
EnableScrollBar
UnionRect
IsRectEmpty
CharUpperW
IsZoomed
NotifyWinEvent
MessageBeep
ReleaseCapture
WindowFromPoint
SetWindowRgn
GetSystemMenu
DeleteMenu
IntersectRect
InflateRect
RealChildWindowFromPoint
GetSysColorBrush
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
SetRectEmpty
ShowOwnedPopups
SetWindowContextHelpId
PostQuitMessage
MapVirtualKeyW
GetKeyNameTextW
MapDialogRect
GetAsyncKeyState
LoadMenuW
MoveWindow
IsDialogMessageW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
ValidateRect
CreateWindowExW
GetClassInfoExW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
GetMenu
CopyRect
GetWindowTextLengthW
GetScrollPos
SetScrollPos
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetSysColor
GrayStringW
DrawTextExW
TabbedTextOutW
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
GetLastActivePopup
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetClassNameW
LoadBitmapW
DrawStateW
SetTimer
KillTimer
DrawIcon
MonitorFromPoint
DrawTextA
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
GetWindow
CreateWindowExA
DestroyWindow
SetWindowPos
RedrawWindow
RegisterClassW
DefWindowProcW
SetForegroundWindow
IsIconic
FindWindowA
MessageBoxW
IsWindow
RegisterWindowMessageW
PostMessageW
RegisterWindowMessageA
CopyImage
GetKeyState
OffsetRect
GetDC
UpdateWindow
GetMonitorInfoW
MonitorFromWindow
SetWindowTextW
LoadStringW
ShowWindow
IsWindowVisible
UpdateLayeredWindow
GetDesktopWindow
GetWindowTextA
MapWindowPoints
LoadIconW
SetWindowTextA
ReleaseDC
GetWindowRect
GetWindowDC
DestroyMenu
TrackPopupMenu
ClientToScreen
AppendMenuW
CreatePopupMenu
SetCursor
LoadCursorW
ScreenToClient
EndPaint
IsWindowEnabled
GetCursorPos
BeginPaint
SendMessageA
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MessageBoxA
wsprintfA
GetSystemMetrics
DrawIconEx
GetFocus
GetWindowTextW
GetParent
GetWindowLongW
SetCapture
PtInRect
PostThreadMessageW
CharUpperBuffW
CopyIcon
UnpackDDElParam
ReuseDDElParam
GetClassInfoW
InsertMenuItemW
GetPropW
SetFocus
InvalidateRect
RemovePropA
CallWindowProcW
GetPropA
DrawTextW
EnableWindow
FillRect
GetClientRect
SetWindowLongW
SetPropA
SendMessageW
GetDlgItem
SetPropW

gdi32

CreateHatchBrush
CreateRectRgnIndirect
PatBlt
CreateDIBitmap
CreateFontIndirectW
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextExtentPoint32W
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateRoundRectRgn
EnumFontFamiliesExW
GetBkColor
GetRgnBox
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
OffsetRgn
SetDIBColorTable
SetPixel
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetObjectType
GetTextFaceW
SetPixelV
SetLayout
GetLayout
SelectPalette
CreateBitmap
SetTextAlign
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
MoveToEx
CreateFontW
SetBkColor
GetTextColor
GetTextMetricsW
GetDeviceCaps
CreatePen
StretchBlt
ExtSelectClipRgn
GetClipRgn
SelectClipRgn
CreateRectRgn
Rectangle
SetDCBrushColor
SetDCPenColor
CreateFontA
GetCurrentObject
SetStretchBltMode
GetObjectW
DeleteDC
BitBlt
DeleteObject
CreateSolidBrush
CreatePatternBrush
SetTextColor
SelectObject
CreateCompatibleDC
SetBkMode
GetPixel
GetWindowExtEx
GetViewportExtEx
GetSystemPaletteEntries
GetStockObject
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
CreateDIBSection
LineTo

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

OpenProcessToken
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyW
RegQueryValueExW
RegCreateKeyW
RegEnumValueW
LookupAccountNameA
RegEnumKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCreateKeyExA
GetTokenInformation
RegOpenKeyA
RegDeleteValueW
RegSetValueExW
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
CryptReleaseContext
CryptDestroyHash
CryptVerifySignatureW
CryptHashData
CryptCreateHash
CryptImportKey
CryptAcquireContextA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid

shell32

ShellExecuteW
SHGetFolderPathA
ShellExecuteA
SHGetKnownFolderPath
SHGetMalloc
SHBrowseForFolderW
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoW
SHGetPathFromIDListW

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFileExistsW
PathIsUNCW

ole32

ReleaseStgMedium
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData

oleaut32

SysStringLen
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysFreeString

oledlg

OleUIBusyW

crypt32

CryptStringToBinaryA
CryptStringToBinaryW
CryptVerifyMessageSignature
CertGetNameStringA
CertFreeCertificateContext
CryptBinaryToStringW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

timeSetEvent
PlaySoundW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 306KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20af7bd179e3a7d1c2c499f725e26e19

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

uxtheme

wininet

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

crypt32

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 306KB - Virtual size: 306KB

.data Size: 26KB - Virtual size: 121KB

.rsrc Size: 377KB - Virtual size: 376KB

.reloc Size: 179KB - Virtual size: 179KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 306KB - Virtual size: 306KB

.data
Size: 26KB - Virtual size: 121KB

.rsrc
Size: 377KB - Virtual size: 376KB

.reloc
Size: 179KB - Virtual size: 179KB