2024-02-12_60e87abf0adec9ebdb17e3dd8918cdd6_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-12_60e87abf0adec9ebdb17e3dd8918cdd6_mafia
Size

3.5MB
MD5

60e87abf0adec9ebdb17e3dd8918cdd6
SHA1

3dbd1b2605adb768bf7981bc336b9af752820645
SHA256

aed84bb25de6ca44e54d00765d7d7bdcdd17a8ae884b490aa8b4d7bb388760a0
SHA512

caec63b8f4d89d3a9b1bf61ce726f876e3845a10961b9bb87a7c55198030cbb25e95cad209a2c7afad65693eee29fb47aa83191fa9bc99bad8a0e18e2b5445ad
SSDEEP

98304:Z+ZtINL11wFVfQnTdUK/nsLbK3y795EwuGrboj9ghi1RebMIg9Cbk/V8l:cW1IlKP4EwuGrbojDIg9Cbk/V8l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-12_60e87abf0adec9ebdb17e3dd8918cdd6_mafia

Files

2024-02-12_60e87abf0adec9ebdb17e3dd8918cdd6_mafia
.exe windows:5 windows x86 arch:x86

feae62e40f8875be9359cb08fcc58cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Program\Solution\02. FaxSolution\Program\BIN_SoluCVT\SoluCVT.pdb

Imports

kernel32

GlobalFree
GlobalAlloc
GetProcAddress
GetLastError
GetCurrentThread
SetEnvironmentVariableA
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetDriveTypeW
GetConsoleMode
GetConsoleCP
GetStringTypeW
IsProcessorFeaturePresent
LCMapStringW
GetTimeZoneInformation
IsValidCodePage
FreeLibrary
CloseHandle
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
SetUnhandledExceptionFilter
SizeofResource
LockResource
LoadResource
FindResourceW
Sleep
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
GetPriorityClass
TerminateProcess
GetExitCodeProcess
Process32NextW
CreateEventW
GetCurrentDirectoryW
GlobalLock
GlobalCompact
GlobalUnlock
GetExitCodeThread
TerminateThread
CreateThread
WaitForSingleObject
SetEvent
SetLastError
DeactivateActCtx
ActivateActCtx
GetModuleFileNameW
GetCurrentProcessId
lstrcmpW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
HeapSize
HeapQueryInformation
ExitThread
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapReAlloc
RaiseException
RtlUnwind
HeapFree
ExitProcess
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
HeapAlloc
GetStartupInfoW
CompareStringW
GetModuleHandleW
GetVersionExW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
SetErrorMode
SearchPathW
GetProfileIntW
GetNumberFormatW
GetWindowsDirectoryW
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
GetTempPathW
GetTickCount
GetShortPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileW
DeleteFileW
lstrcmpiW
GetStringTypeExW
GetSystemDirectoryW
lstrlenA
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
ReplaceFileW
GetUserDefaultLCID
SuspendThread
ResumeThread
SetThreadPriority
lstrcpyW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GetLocaleInfoW
LoadLibraryExW
SystemTimeToFileTime
GetThreadLocale
GlobalGetAtomNameW
ReleaseActCtx
CreateActCtxW
CreateFileW
GetFileSize
GetFileAttributesW
GlobalReAlloc
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FindClose
CopyFileW
GlobalSize
FormatMessageW
LocalFree
MulDiv
lstrlenW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW

user32

GetUpdateRect
CopyIcon
SetCursorPos
UnregisterClassW
RegisterClipboardFormatW
EnumChildWindows
GetMenuDefaultItem
GetKeyNameTextW
SetClassLongW
GetIconInfo
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
GetDoubleClickTime
UpdateLayeredWindow
EnableScrollBar
UnionRect
CopyAcceleratorTableW
CharUpperW
SetLayeredWindowAttributes
EnumDisplayMonitors
RealChildWindowFromPoint
DrawIcon
ShowOwnedPopups
GetMessageW
TranslateMessage
WaitMessage
PostThreadMessageW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
MonitorFromPoint
WindowFromPoint
SetCapture
UnpackDDElParam
ReuseDDElParam
GetActiveWindow
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
GetDesktopWindow
TranslateAcceleratorW
SetParent
LockWindowUpdate
BringWindowToTop
IsIconic
SetRect
GetSysColorBrush
DrawFrameControl
DrawEdge
SystemParametersInfoW
MessageBeep
DestroyMenu
DrawIconEx
DestroyIcon
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
DrawStateW
IsClipboardFormatAvailable
GetAsyncKeyState
IsMenu
FrameRect
GetCursorPos
SetCursor
LoadCursorW
KillTimer
SetTimer
InvalidateRect
IsZoomed
GetSystemMenu
SetMenuDefaultItem
DeleteMenu
CreatePopupMenu
IntersectRect
OffsetRect
InflateRect
SetRectEmpty
DestroyAcceleratorTable
NotifyWinEvent
SetWindowRgn
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
EnableWindow
FillRect
GetSysColor
DrawFocusRect
CopyRect
GetSystemMetrics
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SubtractRect
DefFrameProcW
DrawMenuBar
TranslateMDISysAccel
CharUpperBuffW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
InvertRect
HideCaret
CreateMenu
GetWindowRgn
DestroyCursor
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
IsCharLowerW
MapVirtualKeyExW
GetMenuItemInfoW
DefMDIChildProcW
SendMessageW
RedrawWindow
wsprintfW
IsRectEmpty
FindWindowW
UpdateWindow
RegisterWindowMessageW
ClientToScreen
MessageBoxW
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
GetWindowThreadProcessId
GetSubMenu
LoadMenuW
GetWindowRect
GetWindow
PtInRect
SetWindowPos
SetWindowLongW
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
GetMenuItemCount
GetMenuItemID
PostMessageW
GetClientRect
ValidateRect
IsWindowVisible
ShowScrollBar
SetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
SetMenu
GetKeyState
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
PeekMessageW
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
SetActiveWindow
GetForegroundWindow
GetWindowTextW

gdi32

ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
GetDeviceCaps
CreatePen
CreateSolidBrush
CreateHatchBrush
CopyMetaFileW
CreateDCW
CreateRectRgnIndirect
GetTextMetricsW
GetTextExtentPoint32W
SetDIBColorTable
PatBlt
GetDIBits
RealizePalette
CreateCompatibleBitmap
CombineRgn
StretchBlt
SetPixel
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
GetTextColor
Polyline
Ellipse
Polygon
Rectangle
RoundRect
RectVisible
DPtoLP
LPtoDP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
GetMapMode
SetWindowExtEx
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
CreateRoundRectRgn
ScaleWindowExtEx
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
OffsetRgn
TextOutW
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetBkColor
GetObjectW
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
CreateFontIndirectW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegSetValueW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyExW
RegEnumValueW

shell32

SHBrowseForFolderW
DragFinish
DragQueryFileW
SHAppBarMessage
SHGetFileInfoW
SHGetDesktopFolder
ExtractIconW
SHAddToRecentDocs
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW

ole32

DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoInitializeEx
OleLockRunning
CoCreateGuid
CLSIDFromString
CreateStreamOnHGlobal
OleDuplicateData
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoRegisterMessageFilter
CLSIDFromProgID
OleRun
CoCreateInstance
CoUninitialize
CoRevokeClassObject
CoInitialize

oleaut32

SysStringByteLen
SysAllocStringByteLen
VariantChangeType
SysStringLen
SysAllocStringLen
VariantClear
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
GetErrorInfo
SysFreeString
SysAllocString
VariantInit

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCreateBitmapFromScan0
GdiplusStartup
GdipGetImageHeight

biautoprint

BIAPEndPrinting
BIAPGetLastError
BIAPGetErrorStringW
BIAPInitialize
BIAPUnInitialize
BIAPStartPrintingW

blicectr

ord3
ord5

bipdf

?SaveDIBAsColorPDFPageW@CCreatePDF@@QAEHPAXPB_WKH@Z
??0CCreatePDF@@QAE@XZ
??1CCreatePDF@@QAE@XZ
?FinishPDF@CCreatePDF@@QAEHXZ
?GetLastPDFErrorText@CCreatePDF@@QAEHPAD@Z
?PDF_GetLastError@CCreatePDF@@QAEKXZ
?CreatePDFW@CCreatePDF@@QAEHPB_W@Z

bitiff

ord286
ord296

bijpeg

ord29

bugslayerutil

GetRegisterString
GetFaultReason

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

feae62e40f8875be9359cb08fcc58cf8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

biautoprint

blicectr

bipdf

bitiff

bijpeg

bugslayerutil

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 377KB - Virtual size: 376KB

.data Size: 30KB - Virtual size: 60KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 178KB - Virtual size: 177KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 377KB - Virtual size: 376KB

.data
Size: 30KB - Virtual size: 60KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 178KB - Virtual size: 177KB