2024-02-12_e2b199f84a163cfb98a40450573956ae_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-12_e2b199f84a163cfb98a40450573956ae_mafia
Size

6.5MB
MD5

e2b199f84a163cfb98a40450573956ae
SHA1

97e2271f1a3be5cfb887f2e2694de94bf2d651b9
SHA256

62af9c86d9a8cb7aa581f76f538c1b94cf210d4635937bc0efbfac6e5530e6a0
SHA512

de1072b21b28dee8164ca4eb1d365ef72a6aaa666cb78751117154826666edeb1a22ad36abbbd7c554b423c1566a486ab652c3806cb3c6ba86f41a197cd3e16e
SSDEEP

196608:G9DgOuPIo9Pn2ssXBs7WH+C2COClCtdAD:G9DduPIo9P2ssXOY+xJeCnY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-12_e2b199f84a163cfb98a40450573956ae_mafia

Files

2024-02-12_e2b199f84a163cfb98a40450573956ae_mafia
.exe windows:5 windows x86 arch:x86

7b0186431291577ac39e74d46c8ca102

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\proj\imst\SecuDisk\xpdfviewer\obj-rel\XPDFVIEWER.pdb

Imports

pdfprint

?printSelectedPdfFile@@YAHPBDHABVrectangle@@@Z

advapi32

RegOpenKeyExW
RegEnumKeyW
RegCloseKey
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity

kernel32

LoadResource
SizeofResource
LockResource
HeapReAlloc
GetLocaleInfoA
HeapAlloc
SetUnhandledExceptionFilter
GetCurrentProcess
HeapFree
GetVersionExW
HeapDestroy
HeapCreate
TerminateProcess
GetEnvironmentVariableA
GlobalMemoryStatusEx
Module32FirstW
GetSystemInfo
CreateToolhelp32Snapshot
GetCurrentThreadId
OutputDebugStringA
Module32NextW
GetLogicalDrives
AllocConsole
CreateProcessW
VerSetConditionMask
SetConsoleScreenBufferSize
FormatMessageA
LoadLibraryW
GetModuleFileNameW
VerifyVersionInfoW
GetStdHandle
GetConsoleScreenBufferInfo
lstrcpyW
GetTempFileNameW
GetDriveTypeW
CreateDirectoryW
WriteFile
GetVolumePathNameW
ReadFile
CreateFileW
WritePrivateProfileStringW
GetTempPathW
GetPrivateProfileIntW
GetFileSizeEx
GetLongPathNameW
GetFileTime
GetFileAttributesExW
GetShortPathNameW
DeleteFileW
GetFileInformationByHandle
RaiseException
CompareFileTime
ReadDirectoryChangesW
FindResourceW
QueueUserAPC
CancelIo
WideCharToMultiByte
MultiByteToWideChar
GetThreadContext
VirtualQuery
GetCurrentThread
Thread32First
Thread32Next
OpenThread
GetModuleHandleA
SuspendThread
ResumeThread
GetEnvironmentVariableW
GetExitCodeProcess
TryEnterCriticalSection
GetACP
SetFilePointer
lstrcpynW
CompareStringW
WriteConsoleW
GetTimeZoneInformation
CreateProcessA
GetProcessHeap
SetEndOfFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetCurrentDirectoryW
CreateFileA
PeekNamedPipe
LCMapStringW
SetHandleCount
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetFileType
InitializeCriticalSectionAndSpinCount
SetStdHandle
FindFirstFileExW
SetConsoleCtrlHandler
GetStartupInfoW
HeapSetInformation
GetCommandLineA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
DuplicateHandle
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
MoveFileA
DecodePointer
EncodePointer
GetSystemTime
SetThreadExecutionState
SystemTimeToFileTime
CreateEventW
GetTimeFormatW
GetLocaleInfoW
GetDateFormatW
GetProcAddress
FindNextFileW
FindFirstFileW
GlobalAddAtomW
GlobalDeleteAtom
GetWindowsDirectoryW
GetSystemDirectoryW
CreateThread
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
FindClose
GetFileAttributesA
GetFullPathNameA
GetTickCount
GetModuleFileNameA
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
SetEvent
ResetEvent
LeaveCriticalSection
WaitForSingleObject
InterlockedExchange
InitializeCriticalSection
CreateEventA
EnterCriticalSection
SetFileAttributesW
LocalFree
GetCurrentProcessId
FileTimeToDosDateTime
CloseHandle
QueryPerformanceFrequency
CreateFileMappingW
GetLastError
MulDiv
GetFileAttributesW
FormatMessageW
CopyFileW
Sleep
GetSystemTimeAsFileTime
GetModuleHandleW
QueryPerformanceCounter
MoveFileExW
SetErrorMode
UnmapViewOfFile
MapViewOfFile
GetCommandLineW
ExitProcess
GetFullPathNameW
WaitForMultipleObjectsEx

user32

CheckRadioButton
SetDlgItemTextW
EnableWindow
GetWindow
IsCharAlphaNumericW
GetUpdateRect
ValidateRect
GetSystemMenu
GetWindowDC
TrackMouseEvent
InvalidateRgn
DrawEdge
GetMenuItemInfoW
OffsetRect
ReleaseDC
GetMenuItemCount
SetMenuDefaultItem
DrawFrameControl
RedrawWindow
GetMessagePos
GetWindowTextLengthW
ShowWindowAsync
ReuseDDElParam
SetForegroundWindow
MessageBeep
IsWindowUnicode
UnpackDDElParam
HideCaret
LoadImageW
CopyImage
ShowCaret
SetClassLongW
CallWindowProcW
PostMessageW
SetActiveWindow
DrawTextW
TrackPopupMenu
GetMenuItemID
CreateMenu
ModifyMenuW
GetMenu
CheckMenuRadioItem
AppendMenuW
EnableMenuItem
CreatePopupMenu
RemoveMenu
InsertMenuW
IsDlgButtonChecked
DialogBoxIndirectParamW
EndPaint
DestroyWindow
SetCursor
CloseClipboard
CheckDlgButton
SendDlgItemMessageW
EndDialog
RemovePropW
SetPropW
GetPropW
SetLayeredWindowAttributes
ClientToScreen
DdeInitializeW
ReleaseCapture
MessageBoxW
DeferWindowPos
OpenClipboard
GetCursor
CreateWindowExW
ShowScrollBar
FindWindowExW
IsWindow
LoadBitmapW
SetMenu
ShowWindow
SetWindowPos
GetSysColor
GetDesktopWindow
SetWindowLongW
EmptyClipboard
SystemParametersInfoW
GetAncestor
GetWindowLongW
InvalidateRect
GetScrollInfo
LoadIconW
RegisterClassExW
GetForegroundWindow
LoadAcceleratorsW
TranslateMessage
GetCapture
CharLowerW
IsCharUpperW
BeginPaint
SetFocus
GetClientRect
FindWindowW
SetParent
LoadCursorW
GetParent
GetFocus
GetKeyState
IsZoomed
KillTimer
SetCapture
EnumDisplayMonitors
DdeCreateStringHandleW
GetWindowInfo
DdeFreeStringHandle
DdeUninitialize
MonitorFromWindow
GetCursorPos
AdjustWindowRectEx
DdeClientTransaction
DdeConnect
SetMenuItemInfoW
SetClipboardData
DdeDisconnect
GetMonitorInfoW
DdeFreeDataHandle
MonitorFromRect
GetDC
MapWindowPoints
wsprintfA
GetSystemMetrics
IsWindowVisible
DialogBoxParamW
CheckMenuItem
GetDlgItem
FillRect
IsIconic
PostQuitMessage
GetMessageW
GetWindowRect
ScreenToClient
SetTimer
MapVirtualKeyW
TranslateAcceleratorW
AllowSetForegroundWindow
SendMessageW
UpdateWindow
DestroyMenu
EndDeferWindowPos
SetScrollInfo
GetScrollPos
DefWindowProcW
GetWindowThreadProcessId
MoveWindow
DispatchMessageW
BeginDeferWindowPos

gdi32

SetMapMode
CreateDCW
GetDeviceCaps
StartPage
EndPage
TextOutW
SetBkMode
SetLayout
DeleteDC
GetClipBox
CreateRectRgn
ExcludeClipRect
SetViewportOrgEx
BitBlt
GetObjectA
IntersectClipRect
SetWorldTransform
SetBkColor
SetStretchBltMode
GetObjectW
GetDIBColorTable
SetDIBits
CreateCompatibleBitmap
SetDIBColorTable
GetDIBits
CreateDIBSection
LineTo
SetGraphicsMode
MoveToEx
ExtTextOutW
SetROP2
CreatePatternBrush
CreateBitmap
SetBrushOrgEx
PatBlt
SelectClipRgn
StartDocW
EndDoc
AbortDoc
CreateFontIndirectW
SetTextColor
StretchBlt
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
CreatePen
GetStockObject
ExtSelectClipRgn
GetTextExtentPoint32W
CreateSolidBrush

comdlg32

PrintDlgExW
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

shell32

SHAddToRecentDocs
SHGetFileInfoW
DragAcceptFiles
DragQueryFileW
DragFinish
SHGetDesktopFolder
ShellExecuteExW
SHGetFolderPathW
SHBindToParent
SHChangeNotify

gdiplus

GdipFillRectangle
GdipDeleteMatrix
GdipCreateLineBrushFromRect
GdipDeleteFontFamily
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipCreateBitmapFromGraphics
GdipDrawRectangleI
GdipAddPathLine
GdipGetImageHorizontalResolution
GdipDrawImageRectRect
GdipDrawRectangle
GdipDrawLine
GdipGetFamilyName
GdipSetPenDashArray
GdipSetWorldTransform
GdipGetFamily
GdipTransformMatrixPoints
GdipInvertMatrix
GdipSetPenDashOffset
GdipSetImageAttributesWrapMode
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipGetFontCollectionFamilyList
GdipSetImageAttributesColorMatrix
GdipGetEmHeight
GdipAddPathPath
GdipFillPolygon
GdipPrivateAddFontFile
GdipSetClipRect
GdipDrawImagePointsRect
GdipSetPageScale
GdipGetDpiY
GdipGetFontCollectionFamilyCount
GdipGetMatrixElements
GdipTransformRegion
GdipClonePath
GdipCreateRegionRectI
GdipSetPenLineCap197819
GdipWidenPath
GdipIsStyleAvailable
GdipSaveGraphics
GdipCreateMatrix2
GdipSetImagePalette
GdipNewPrivateFontCollection
GdipGetWorldTransform
GdipMeasureCharacterRanges
GdipSetPenTransform
GdipGetCellAscent
GdipRestoreGraphics
GdipCloneFontFamily
GdipSetPixelOffsetMode
GdipSetPenLineJoin
GdipGetClipBounds
GdipBitmapUnlockBits
GdipGetRegionBounds
GdipBitmapSetResolution
GdipCreateBitmapFromStream
GdipMeasureString
GdipGetStringFormatFlags
GdipScaleMatrix
GdipCloneBitmapAreaI
GdipFillEllipseI
GdipCreateRegion
GdipSetClipRectI
GdipGetClip
GdipSetClipRegion
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDrawImageRectRectI
GdipCreateFontFromDC
GdipCreateFromHWND
GdipDeleteStringFormat
GdipSetStringFormatTrimming
GdipGetPathData
GdipTransformPath
GdipSetPenMiterLimit
GdipGetPathWorldBoundsI
GdipSetPenMode
GdipCreateMatrix
GdipGetFontHeight
GdipCreateStringFormat
GdipDrawImageI
GdipCreateBitmapFromGdiDib
GdipSetPropertyItem
GdipReleaseDC
GdipGetDC
GdipGetLogFontW
GdipBitmapLockBits
GdipStringFormatGetGenericTypographic
GdipGraphicsClear
GdipGetImageEncoders
GdipSetCompositingQuality
GdipSetSolidFillColor
GdipTranslateWorldTransform
GdipSetCompositingMode
GdipCloneStringFormat
GdipDrawString
GdipTransformPointsI
GdipDeleteRegion
GdipSetPageUnit
GdipResetWorldTransform
GdipCreateRegionPath
GdipSetPenWidth
GdipSetPenColor
GdipDeletePathIter
GdipPathIterNextMarkerPath
GdipAddPathArcI
GdipCreatePen2
GdipCreatePathIter
GdipAddPathLineI
GdipClosePathFigure
GdipTranslateMatrix
GdipSetStringFormatMeasurableCharacterRanges
GdipDeletePrivateFontCollection
GdipGetImageEncodersSize
GdipSetSmoothingMode
GdipAddPathEllipseI
GdipDeleteFont
GdipSetTextRenderingHint
GdipSetPathMarker
GdipIsVisiblePathPointI
GdipStartPathFigure
GdipSetStringFormatLineAlign
GdipStringFormatGetGenericDefault
GdipCreatePath2
GdipGetRegionHRgn
GdipPathIterRewind
GdipCreateFontFromLogfontA
GdipIsVisibleRectI
GdipGetPointCount
GdipSetStringFormatFlags
GdipDrawLineI
GdipFillRectangleI
GdipCreatePen1
GdipCreatePath
GdipFillPath
GdipCreateFromHDC
GdipDeletePath
GdipCreateSolidFill
GdipDeleteGraphics
GdipDrawPath
GdipWindingModeOutline
GdipAddPathRectangleI
GdipCloneBrush
GdipDeletePen
GdipDeleteBrush
GdipGetImageWidth
GdipCloneImage
GdipSaveImageToFile
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipAlloc
GdipGetImageHeight
GdipFree
GdiplusStartup
GdiplusShutdown
GdipRotateMatrix

ole32

CreateStreamOnHGlobal
OleInitialize
ReleaseStgMedium
CoGetMalloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoCreateInstance

comctl32

ord410
ord413
InitCommonControlsEx
CreatePropertySheetPageW
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord412

msimg32

GradientFill

winspool.drv

OpenPrinterW
DocumentPropertiesW
GetPrinterW
ClosePrinter
DeviceCapabilitiesW
ord203

wininet

HttpSendRequestA
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
InternetConnectW
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle

urlmon

CoInternetGetSession

oleaut32

SysAllocString
SafeArrayPutElement
VariantInit
VariantClear
SysFreeString
SafeArrayCreateVector

shlwapi

PathIsNetworkPathW
SHSetValueW
PathAppendW
SHDeleteKeyW
SHGetValueW
StrRStrIW
StrStrW
PathIsRelativeW
ord219
StrStrIW
SHDeleteValueW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 159KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 513KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b0186431291577ac39e74d46c8ca102

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

pdfprint

advapi32

kernel32

user32

gdi32

comdlg32

shell32

gdiplus

ole32

comctl32

msimg32

winspool.drv

wininet

urlmon

oleaut32

shlwapi

version

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 3.2MB - Virtual size: 3.2MB

.data Size: 159KB - Virtual size: 216KB

.rsrc Size: 513KB - Virtual size: 513KB

.reloc Size: 135KB - Virtual size: 135KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 3.2MB - Virtual size: 3.2MB

.data
Size: 159KB - Virtual size: 216KB

.rsrc
Size: 513KB - Virtual size: 513KB

.reloc
Size: 135KB - Virtual size: 135KB