2024-02-17_3b7d8cefe66627a59471a4f4b7f821a6_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-17_3b7d8cefe66627a59471a4f4b7f821a6_mafia
Size

1.9MB
MD5

3b7d8cefe66627a59471a4f4b7f821a6
SHA1

73e6f362f597cf50f1fa76d7e878987e46438d2e
SHA256

39c4b8d53f4a0edd094bff06ad1f61da5d0b5914c2d2099f9e6ed49e48987b12
SHA512

f2da5260fd869efab7e5f7dcefd58eee9ac7b2f9ab2b1cbbd4c3ef63f46dbbeee29ee667f82c2774c28886e17b175ad036b098d77125d2e6ff79b6f4e9b3c077
SSDEEP

24576:J3n0BKMR3AGIQQTRmuCZYGfZwMKKfygBWM/8CequEx5HRtEDOfTtk+SqybTjNh7W:FnVRmLXfycgChum5dfTtBBsTUwzy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-17_3b7d8cefe66627a59471a4f4b7f821a6_mafia

Files

2024-02-17_3b7d8cefe66627a59471a4f4b7f821a6_mafia
.exe windows:5 windows x86 arch:x86

f0d6088cb4efcc8ef8a6d07ea42a4289

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetClipboardData
RegisterClipboardFormatW
GetMessagePos
GetSubMenu
CreateMenu
AppendMenuW
RemoveMenu
SetMenuItemInfoW
InsertMenuW
DestroyMenu
CreatePopupMenu
UnionRect
ModifyMenuW
CheckMenuRadioItem
CheckMenuItem
GetMenuState
TranslateAcceleratorW
CreateAcceleratorTableW
DestroyAcceleratorTable
DestroyCursor
GetMessageW
ValidateRect
GetUpdateRect
DrawIcon
SetMenu
DrawIconEx
EndPaint
BeginPaint
GetWindowDC
GetClassNameW
MapWindowPoints
PtInRect
ChildWindowFromPoint
HideCaret
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
keybd_event
GetWindowTextLengthW
SetTimer
KillTimer
DrawFocusRect
CreateIconIndirect
FlashWindow
SetWindowRgn
AdjustWindowRectEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetDesktopWindow
IsIconic
IsZoomed
BringWindowToTop
CreateDialogIndirectParamW
GetDlgItem
CreateDialogParamW
UnregisterHotKey
RegisterHotKey
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
GetActiveWindow
GetAsyncKeyState
GetMenuItemCount
GetMenuItemInfoW
SystemParametersInfoW
GetMessageTime
GetWindow
BeginDeferWindowPos
EndDeferWindowPos
GetUpdateRgn
SetWindowTextW
IsWindowEnabled
IsWindowVisible
IsDialogMessageW
DefFrameProcW
TranslateMessage
DispatchMessageW
PostQuitMessage
TrackPopupMenu
DeferWindowPos
MoveWindow
ClientToScreen
ScreenToClient
GetClientRect
GetWindowRect
UpdateWindow
RedrawWindow
SetParent
GetCursorPos
WindowFromPoint
GetParent
GetWindowLongW
SetWindowLongW
ScrollWindow
SetScrollInfo
GetScrollInfo
SetCursorPos
GetCapture
ReleaseCapture
SetCapture
SetWindowPos
ShowWindow
EnableWindow
GetFocus
SetFocus
GetDC
ReleaseDC
GetIconInfo
LoadIconW
LoadImageW
GetSystemMetrics
DestroyIcon
LoadBitmapW
SetCursor
InvalidateRect
IsWindow
GetForegroundWindow
GetKeyState
UnregisterClassW
LoadCursorW
DdeGetLastError
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeCreateDataHandle
DdePostAdvise
DdeGetData
DdeFreeDataHandle
DdeClientTransaction
DdeDisconnect
DdeConnect
DdeNameService
DdeUninitialize
DdeInitializeW
MessageBoxW
PeekMessageW
PostThreadMessageW
RegisterClassW
CreateWindowExW
MessageBeep
PostMessageW
GetWindowThreadProcessId
WaitForInputIdle
DestroyWindow
DefWindowProcW
DrawEdge
DrawFrameControl
FillRect
SendMessageW
OffsetRect
CopyRect
GetSysColor
InflateRect
DrawTextW
EnumWindows
TranslateMDISysAccel
DefMDIChildProcW
GetMenuStringW
DrawStateW
ChangeDisplaySettingsW
EnumDisplaySettingsW
ShowCursor
MessageBoxA
wvsprintfA
CallWindowProcW
wsprintfA
SetForegroundWindow
GetWindowTextW

gdi32

CreateSolidBrush
SetTextColor
SetBkMode
CreatePen
SelectObject
DeleteObject
CreateFontIndirectW
CreateICW
EndPage
StartPage
EndDoc
StartDocW
CreateDCW
SetAbortProc
DeleteEnhMetaFile
CopyEnhMetaFileW
GetEnhMetaFileW
EnumFontFamiliesExW
GetSystemPaletteEntries
GetObjectW
PatBlt
SetTextAlign
CreateRectRgnIndirect
RectInRegion
PtInRegion
EqualRgn
GetRgnBox
CombineRgn
CreateDIBitmap
GetDIBColorTable
GetDIBits
CreateDIBSection
GetNearestPaletteIndex
CreatePalette
ExtCreatePen
CreateHatchBrush
SetStretchBltMode
StretchDIBits
StretchBlt
GetTextExtentExPointW
GetCharABCWidthsW
SetROP2
TextOutW
MaskBlt
GetStockObject
PolyBezier
Ellipse
RoundRect
Rectangle
Polyline
PolyPolygon
SetPolyFillMode
Polygon
SetPixel
Pie
Arc
GetPixel
ExtFloodFill
SetMapMode
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
SelectClipRgn
ExtSelectClipRgn
GetClipBox
GetTextColor
GetBkColor
RestoreDC
SaveDC
MoveToEx
LineTo
SetBrushOrgEx
CreatePatternBrush
GetPaletteEntries
SetBkColor
CreateCompatibleDC
BitBlt
DeleteDC
CreateCompatibleBitmap
CreateBitmap
GetRegionData
ExtCreateRegion
OffsetRgn
CreateRectRgn
SelectPalette
RealizePalette
GetTextExtentPoint32W
GetTextMetricsW
GdiFlush
GetDeviceCaps

kernel32

InterlockedIncrement
GetFullPathNameW
SetEnvironmentVariableA
CompareStringW
VirtualQuery
EnumSystemLocalesA
GetLocaleInfoA
GetTimeZoneInformation
WriteConsoleW
SetEndOfFile
GetDriveTypeW
GetCurrentDirectoryW
LCMapStringW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsProcessorFeaturePresent
SetHandleCount
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetOEMCP
GetModuleFileNameA
GetDateFormatW
GetTimeFormatW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
CopyFileW
SetCurrentDirectoryW
GetWindowsDirectoryW
CloseHandle
CreateFileW
GetFileType
WideCharToMultiByte
MultiByteToWideChar
GetVersionExW
GetLastError
PeekNamedPipe
ReadFile
SetNamedPipeHandleState
WriteFile
Sleep
ResumeThread
CreateThread
CreateProcessW
DuplicateHandle
GetCurrentProcess
CreatePipe
GetExitCodeProcess
WaitForSingleObject
GetLocaleInfoW
GetThreadLocale
GetUserDefaultLCID
GetACP
IsValidLocale
GetTempFileNameW
GetTempPathW
FindClose
FindFirstFileW
GetEnvironmentVariableW
GetProcAddress
GetModuleHandleW
SetEnvironmentVariableW
TerminateProcess
OpenProcess
GetCurrentProcessId
GetCPInfo
IsValidCodePage
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
ExitProcess
InterlockedDecrement
TlsGetValue
GetCurrentThreadId
LoadLibraryW
TlsFree
TlsAlloc
LocalFree
FormatMessageW
GetStdHandle
OutputDebugStringW
FreeLibrary
RaiseException
SetErrorMode
GetCommandLineW
SetLastError
LocalAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GlobalSize
HeapSize
GetProcessHeap
SetFilePointer
CreateFileA
lstrlenA
RtlUnwind
EncodePointer
DecodePointer
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapReAlloc
GetStringTypeW
MoveFileW
DeleteFileW
SetStdHandle

comdlg32

PageSetupDlgW
PrintDlgW
ChooseFontW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

comctl32

CreateStatusWindowW
ImageList_Create
ImageList_Destroy
ImageList_Add
ord17
ImageList_GetImageCount
ImageList_Draw
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_SetDragCursorImage
ImageList_ReplaceIcon
ImageList_GetIconSize

shell32

DragFinish
DragQueryPoint
DragAcceptFiles
ExtractIconExW
ExtractIconW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
DragQueryFileW

ole32

OleUninitialize
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
OleGetClipboard
CoCreateInstance
OleInitialize

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 345KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0d6088cb4efcc8ef8a6d07ea42a4289

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

kernel32

comdlg32

comctl32

shell32

ole32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 345KB - Virtual size: 344KB

.data Size: 149KB - Virtual size: 322KB

.rsrc Size: 70KB - Virtual size: 70KB

.reloc Size: 158KB - Virtual size: 157KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 345KB - Virtual size: 344KB

.data
Size: 149KB - Virtual size: 322KB

.rsrc
Size: 70KB - Virtual size: 70KB

.reloc
Size: 158KB - Virtual size: 157KB