2024-02-12_7add7af485d655f8e41e8a670701ccac_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-12_7add7af485d655f8e41e8a670701ccac_mafia
Size

3.5MB
MD5

7add7af485d655f8e41e8a670701ccac
SHA1

1af975c77fd1d51ba802c151acb7370229592e4d
SHA256

b270e52fd22ee931deca66034182d09f64079721d0bee4ac009f51a129a9f30d
SHA512

5bee16bab7c8794d99a41fad3ef036f4fb17e3277d67ebd45cf1108cd318351aa4044eda3bb7699570c1cd7173a014b65778c6019420a68ce51d1db603ab01a2
SSDEEP

98304:cLCjNeaGrFzolkT+LEl5CNvHTCfJf9slEQWDKxCeoj9ghi1RebMIg9Cbk/V8:cNaGnrChVSQWDKxCeojDIg9Cbk/V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-12_7add7af485d655f8e41e8a670701ccac_mafia

Files

2024-02-12_7add7af485d655f8e41e8a670701ccac_mafia
.exe windows:5 windows x86 arch:x86

5643bab20c1675436f1bb61a01189137

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Program\Solutech_Site_2015\케이비원경복\Program\BIN_SoluCVT\SoluCVT.pdb

Imports

kernel32

SetEnvironmentVariableA
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetDriveTypeW
GetConsoleMode
GetConsoleCP
GetStringTypeW
IsProcessorFeaturePresent
LCMapStringW
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapReAlloc
RaiseException
RtlUnwind
HeapFree
ExitProcess
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
HeapAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
SetErrorMode
SearchPathW
GetProfileIntW
GetNumberFormatW
GetWindowsDirectoryW
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
GetTempPathW
GetTickCount
GetShortPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileW
DeleteFileW
lstrcmpiW
GetStringTypeExW
lstrlenA
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
ReplaceFileW
GetUserDefaultLCID
SuspendThread
ResumeThread
SetThreadPriority
lstrcpyW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringA
SystemTimeToFileTime
GetThreadLocale
GlobalGetAtomNameW
ReleaseActCtx
CreateActCtxW
CreateFileW
GetFileSize
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GlobalReAlloc
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FindClose
CopyFileW
GlobalSize
FormatMessageW
LocalFree
MulDiv
lstrlenW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
GetModuleHandleW
CompareStringW
lstrcmpW
GetCurrentProcessId
GetModuleFileNameW
ActivateActCtx
DeactivateActCtx
SetLastError
SetEvent
WaitForSingleObject
CreateThread
TerminateThread
GetExitCodeThread
GlobalUnlock
GlobalCompact
GlobalLock
GetCurrentDirectoryW
CreateEventW
Process32NextW
GetExitCodeProcess
TerminateProcess
GetPriorityClass
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
CloseHandle
FreeLibrary
GetCurrentThread
GetLastError
GlobalFree
GlobalAlloc
GetProcAddress

user32

GetUpdateRect
CopyIcon
SetCursorPos
UnregisterClassW
RegisterClipboardFormatW
EnumChildWindows
GetMenuDefaultItem
GetKeyNameTextW
SetClassLongW
GetIconInfo
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
GetDoubleClickTime
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyAcceleratorTableW
CharUpperW
RealChildWindowFromPoint
DrawIcon
ShowOwnedPopups
GetMessageW
TranslateMessage
WaitMessage
PostThreadMessageW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
MonitorFromPoint
WindowFromPoint
SetCapture
UnpackDDElParam
ReuseDDElParam
GetActiveWindow
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
GetDesktopWindow
TranslateAcceleratorW
SetParent
LockWindowUpdate
ValidateRect
BringWindowToTop
IsIconic
SetRect
GetSysColorBrush
DrawFrameControl
DrawEdge
SystemParametersInfoW
MessageBeep
DestroyMenu
DrawIconEx
DestroyIcon
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
DrawStateW
IsClipboardFormatAvailable
GetAsyncKeyState
IsMenu
GetMenuItemInfoW
FrameRect
SetCursor
LoadCursorW
KillTimer
SetTimer
InvalidateRect
IsZoomed
GetSystemMenu
SetMenuDefaultItem
DeleteMenu
CreatePopupMenu
IntersectRect
OffsetRect
InflateRect
SetRectEmpty
DestroyAcceleratorTable
NotifyWinEvent
SetWindowRgn
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
EnableWindow
FillRect
GetSysColor
DrawFocusRect
CopyRect
GetSystemMetrics
SetWindowTextW
IsDialogMessageW
CheckDlgButton
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
SubtractRect
DefFrameProcW
DrawMenuBar
TranslateMDISysAccel
CharUpperBuffW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
InvertRect
HideCaret
CreateMenu
GetWindowRgn
DestroyCursor
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
IsCharLowerW
MapVirtualKeyExW
GetCursorPos
SendMessageW
RedrawWindow
wsprintfW
IsRectEmpty
FindWindowW
UpdateWindow
RegisterWindowMessageW
ClientToScreen
MessageBoxW
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
GetWindowThreadProcessId
GetSubMenu
LoadMenuW
GetWindowRect
GetWindow
SetWindowPos
SetWindowLongW
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
PtInRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
GetMenuItemCount
GetMenuItemID
PostMessageW
GetClientRect
IsWindowVisible
ShowScrollBar
SetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
SetMenu
GetKeyState
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
PeekMessageW
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
SetActiveWindow
DefMDIChildProcW

gdi32

OffsetRgn
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
GetMapMode
SetRectRgn
LPtoDP
DPtoLP
CreateFontIndirectW
CreateRoundRectRgn
RoundRect
Rectangle
Polygon
Ellipse
Polyline
GetTextColor
GetBkColor
CreatePolygonRgn
CreateEllipticRgn
CreateDIBSection
SetPixel
StretchBlt
CombineRgn
CreateCompatibleBitmap
RealizePalette
GetDIBits
PatBlt
SetDIBColorTable
GetTextExtentPoint32W
GetTextMetricsW
CreateRectRgnIndirect
CreateDCW
CopyMetaFileW
CreateHatchBrush
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetBkColor
CreateSolidBrush
CreatePen
GetDeviceCaps
GetObjectType
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
SetROP2
GetObjectW
CreateBitmap
SaveDC
SetPolyFillMode
SetBkMode
RestoreDC

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegSetValueW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
RegEnumKeyExW
GetFileSecurityW
SetFileSecurityW

shell32

SHBrowseForFolderW
DragFinish
DragQueryFileW
SHAppBarMessage
SHGetFileInfoW
SHGetDesktopFolder
ExtractIconW
SHAddToRecentDocs
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW
PathFindExtensionW

ole32

DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleLockRunning
CoCreateGuid
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromString
CreateStreamOnHGlobal
OleDuplicateData
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoRegisterMessageFilter
CLSIDFromProgID
OleRun
CoCreateInstance
CoUninitialize
CoInitialize
CoRevokeClassObject
CoInitializeEx

oleaut32

VariantCopy
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
SysStringLen
SysAllocStringLen
SysFreeString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
VariantInit
VariantClear
GetErrorInfo

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

biautoprint

BIAPGetErrorStringW
BIAPStartPrintingW
BIAPInitialize
BIAPGetLastError
BIAPEndPrinting
BIAPUnInitialize

blicectr

ord5
ord3

bipdf

?GetLastPDFErrorText@CCreatePDF@@QAEHPAD@Z
??1CCreatePDF@@QAE@XZ
?PDF_GetLastError@CCreatePDF@@QAEKXZ
?SaveDIBAsColorPDFPageW@CCreatePDF@@QAEHPAXPB_WKH@Z
?CreatePDFW@CCreatePDF@@QAEHPB_W@Z
??0CCreatePDF@@QAE@XZ
?FinishPDF@CCreatePDF@@QAEHXZ

bitiff

ord296
ord286

bijpeg

ord29

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 375KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5643bab20c1675436f1bb61a01189137

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

biautoprint

blicectr

bipdf

bitiff

bijpeg

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 375KB - Virtual size: 374KB

.data Size: 30KB - Virtual size: 60KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 176KB - Virtual size: 176KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 375KB - Virtual size: 374KB

.data
Size: 30KB - Virtual size: 60KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 176KB - Virtual size: 176KB