2024-02-18_ef3d3315061a1a40e363a660d1b0e7da_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-18_ef3d3315061a1a40e363a660d1b0e7da_mafia
Size

7.4MB
MD5

ef3d3315061a1a40e363a660d1b0e7da
SHA1

2f04efb8cdec082c42aa131f85966c642b994583
SHA256

069c7389cb1c597837fdd1966990123b13d19d5cc1e8bf7786f1e0a49babab8f
SHA512

27792b4ef3df1fc10c177f2984d8a579934a7f5af9366498c605625e9814713db476dd0478f53b3a30ce0011ac0fa21f2305a2efe931049f0d61023987f7e86e
SSDEEP

196608:7itDU0fn7gp5IYwnB/2/55kOPGU4fWWWWWWWWYLR1vqe:78DZnEpc+/LEWWWWWWWWYLu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-18_ef3d3315061a1a40e363a660d1b0e7da_mafia

Files

2024-02-18_ef3d3315061a1a40e363a660d1b0e7da_mafia
.exe windows:5 windows x86 arch:x86

4aee24ab0f233573b75d812a50f2af42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Works\Development\Emex3\_Release\Emex3.pdb

Imports

bugtrapu

BT_CallCppFilter
BT_SetPreErrHandler
BT_InstallSehFilter
BT_AddLogFile
BT_SetReportFilePath
BT_SetActivityType
BT_SetFlags
BT_SetSupportEMail
BT_SetAppName

kernel32

FindResourceW
WideCharToMultiByte
lstrlenW
GetLastError
ResetEvent
SetEvent
CloseHandle
OpenMutexW
CreateMutexW
ExitProcess
LoadLibraryW
FreeLibrary
FreeResource
FindFirstFileW
FindNextFileW
FindClose
MultiByteToWideChar
LoadResource
GetStringTypeExA
IsDBCSLeadByteEx
GetVersionExA
ExpandEnvironmentStringsA
GetExitCodeThread
TerminateThread
lstrcpynW
GetPrivateProfileSectionNamesW
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
GetModuleHandleA
GetSystemDirectoryW
SetErrorMode
FindResourceExW
LockResource
SizeofResource
RaiseException
TlsFree
LocalReAlloc
TlsSetValue
LCMapStringA
LeaveCriticalSection
GetNumberFormatW
GetProfileIntW
SearchPathW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
GetTimeFormatW
RtlUnwind
SetEnvironmentVariableW
ExitThread
SetStdHandle
GetFileType
HeapQueryInformation
HeapSize
VirtualQuery
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
WriteConsoleW
SetEnvironmentVariableA
InitializeCriticalSection
CreateEventA
GlobalLock
GlobalUnlock
CreateSemaphoreA
GetTickCount
CreateEventW
SystemTimeToFileTime
GetLocalTime
DeleteFileW
GetModuleFileNameW
CreateFileW
WriteFile
GetSystemTimeAsFileTime
WaitForSingleObject
ReleaseSemaphore
MulDiv
WaitForMultipleObjects
GetDateFormatW
InterlockedIncrement
InterlockedDecrement
GetProcAddress
SetLastError
DeactivateActCtx
GetModuleHandleW
ActivateActCtx
lstrlenA
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetFileSize
ReadFile
CopyFileW
GetCurrentThreadId
MoveFileW
GetStdHandle
ResumeThread
LoadLibraryExW
lstrcatW
WinExec
lstrcpyW
GetWindowsDirectoryW
GetLocaleInfoW
InterlockedExchange
Sleep
WaitForMultipleObjectsEx
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcpyA
HeapAlloc
GetProcessHeap
HeapFree
QueryPerformanceFrequency
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchangeAdd
VirtualFree
IsBadReadPtr
VirtualAlloc
LoadLibraryA
VirtualProtect
GlobalHandle
GlobalReAlloc
TlsGetValue
InitializeCriticalSectionAndSpinCount
GlobalFlags
EnterCriticalSection
DeleteCriticalSection
LocalFree
GetVolumeInformationW
CreateThread
GlobalFree
GlobalAlloc
GetFileAttributesW
SetFileAttributesW
GetShortPathNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTempPathW
GetFullPathNameW
GetCurrentProcess
HeapReAlloc
FormatMessageW
LocalAlloc
GetACP
GetSystemInfo
GetVersionExW
DisconnectNamedPipe
CreateNamedPipeW
TerminateProcess
GetExitCodeProcess
GetOverlappedResult
ConnectNamedPipe
GetCurrentProcessId
CreateDirectoryW
GetDriveTypeW
SetFilePointer
GetDiskFreeSpaceW
SetVolumeLabelW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
lstrcmpW
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GlobalSize
CreateActCtxW
ReleaseActCtx
GetStringTypeExW
GetThreadLocale
lstrcmpiW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
lstrcmpA
CompareStringA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
SetThreadPriority
SuspendThread
GlobalGetAtomNameW
GetUserDefaultLCID
ReplaceFileW
SetFileTime
GetFileTime
GetTempFileNameW
GetFileAttributesExW
LocalFileTimeToFileTime
GetFileSizeEx
TlsAlloc

user32

CopyAcceleratorTableW
CharNextW
DeleteMenu
UnregisterClassW
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyImage
GetDialogBaseUnits
RealChildWindowFromPoint
GetMenuItemInfoW
InflateRect
WaitMessage
WindowFromPoint
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
CreatePopupMenu
IntersectRect
SetWindowRgn
DrawIcon
IsRectEmpty
GetAsyncKeyState
ShowOwnedPopups
TranslateAcceleratorW
TranslateMDISysAccel
BringWindowToTop
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
LoadAcceleratorsW
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
CharUpperW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuStringW
PostMessageW
LockWindowUpdate
RegisterWindowMessageW
LoadBitmapW
OpenClipboard
AppendMenuW
InsertMenuW
RemoveMenu
InvalidateRgn
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
ValidateRect
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetNextDlgGroupItem
IsZoomed
SetParent
GetSystemMenu
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
NotifyWinEvent
DrawIconEx
DestroyAcceleratorTable
SetClassLongW
DrawStateW
DrawFrameControl
ToUnicodeEx
GetKeyboardLayout
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
MoveWindow
SetWindowLongW
GetDlgCtrlID
IsDialogMessageW
GetKeyboardState
CreateAcceleratorTableW
SetCursorPos
MonitorFromPoint
UpdateLayeredWindow
IsMenu
GetDCEx
SetClipboardData
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
CreateMenu
IsClipboardFormatAvailable
GetUpdateRect
CharUpperBuffW
GetDoubleClickTime
SubtractRect
GetWindowRgn
GetWindowRect
EnableWindow
SetMenuItemBitmaps
SendMessageW
GetClipboardData
CloseClipboard
SetTimer
KillTimer
SetActiveWindow
GetParent
GetSystemMetrics
GetClientRect
AdjustWindowRectEx
IsWindow
MessageBeep
GetDesktopWindow
InvalidateRect
ReleaseCapture
SetCapture
RedrawWindow
UnionRect
PtInRect
GetDC
LoadStringA
DrawTextA
CallWindowProcA
RegisterClassExA
RegisterClassExW
PostMessageA
GetUpdateRgn
CreateWindowExA
SetCaretPos
RegisterClipboardFormatA
GetCaretBlinkTime
LoadCursorA
DestroyCaret
CreateCaret
UpdateWindow
UnregisterClassA
SystemParametersInfoA
AppendMenuA
SendMessageA
DefWindowProcA
GetTabbedTextExtentA
IsWindowUnicode
GetWindowLongA
SetWindowLongA
SendMessageTimeoutW
GetCursor
GetKeyboardLayoutList
wsprintfW
mouse_event
ShowCaret
LoadMenuIndirectW
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
DrawFocusRect
ReleaseDC
FillRect
DrawEdge
GetWindow
OffsetRect
GetSysColorBrush
LoadCursorW
GetIconInfo
GetSysColor
LoadIconW
DestroyIcon
IsWindowVisible
ShowWindow
GetKeyState
DefWindowProcW
SetForegroundWindow
LoadMenuW
GetSubMenu
SetMenuDefaultItem
GetCursorPos
SendDlgItemMessageW
CheckDlgButton
MapVirtualKeyW
GetKeyNameTextW
CopyRect
GetWindowTextLengthW
GetScrollPos
SetScrollPos
SetFocus
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
CharToOemBuffA
OemToCharBuffA
RegisterClipboardFormatW
EndDialog
SetWindowTextW
SetDlgItemTextW
SetWindowPos
GetMessageW
GetWindowTextW
MessageBoxW
PostQuitMessage
PostThreadMessageW
MsgWaitForMultipleObjects
DispatchMessageW
TranslateMessage
PeekMessageW
FrameRect
SetRectEmpty
SetCursor
LoadStringW
DestroyCursor
CopyIcon
CreateIconIndirect
SystemParametersInfoW
GetFocus
SetRect
GetMenu
IsIconic
ScreenToClient
LoadImageW

gdi32

StrokePath
StrokeAndFillPath
EndPath
CloseFigure
BeginPath
TranslateCharsetInfo
ExtTextOutA
GetTextMetricsA
GetObjectA
CreateFontIndirectA
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPoint32A
ExtCreateRegion
GetBitmapBits
FillPath
SetPixelV
GetTextFaceW
GetTextAlign
GetNearestColor
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
RoundRect
OffsetRgn
Rectangle
SetPixel
GetDIBits
SetDIBColorTable
Polygon
Polyline
CreatePolygonRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
StretchDIBits
GetCharWidthW
EnumFontFamiliesExW
GetCurrentObject
GetRgnBox
GetTextColor
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetMapMode
CombineRgn
SetRectRgn
Ellipse
LPtoDP
DPtoLP
CreateEllipticRgn
CreateHatchBrush
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
PolyBezierTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
GetClipRgn
SetLayout
GetLayout
SetTextAlign
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
PatBlt
CreateRectRgnIndirect
FrameRgn
SelectClipRgn
CreateRoundRectRgn
GetStockObject
GetDeviceCaps
TextOutW
SetTextJustification
GetTextMetricsW
SetBkColor
SetBkMode
CreateFontIndirectW
LineTo
MoveToEx
SetTextColor
CreateSolidBrush
StretchBlt
CreateBitmap
SelectObject
CreateDIBSection
DeleteDC
CreatePen
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetPixel
GetObjectW
DeleteObject
GetTextExtentPoint32W
CreateFontW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

GetFileSecurityW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegQueryValueExA
RegSetValueW
RegEnumKeyW
SetFileSecurityW
RegOpenCurrentUser
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW

shell32

Shell_NotifyIconW
ShellExecuteExW
SHCreateDirectoryExW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW
SHGetMalloc
SHBrowseForFolderW
SHGetFileInfoW
DragFinish
DragQueryFileW
SHAddToRecentDocs
ExtractIconW
SHGetDesktopFolder
SHAppBarMessage
ShellExecuteW

comctl32

InitCommonControlsEx
ord17
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Create
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetIconSize
ImageList_Destroy
ImageList_DrawEx
ImageList_Draw

shlwapi

StrChrW
StrStrW
StrCpyNW
StrCmpNIW
StrCmpW
StrToIntW
StrCpyW
StrCmpIW
PathCreateFromUrlW
StrCatW
StrToIntExW
StrChrA
StrPBrkW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
StrStrIW

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
StgCreateDocfileOnILockBytes
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRun
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CoInitialize
CreateStreamOnHGlobal
OleDraw
CoDisconnectObject
CLSIDFromString
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleDuplicateData
StringFromCLSID
ReleaseStgMedium
CLSIDFromProgID
StringFromGUID2
CreateBindCtx
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitializeEx

oleaut32

SysAllocStringByteLen
SysStringByteLen
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreate
SafeArrayDestroy
SafeArrayLock
SafeArrayUnlock
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
VarUdateFromDate
VariantCopy
LoadRegTypeLi
LoadTypeLi
SetErrorInfo
VariantChangeType
SafeArrayUnaccessData
SysAllocStringLen
SafeArrayGetElemsize
SafeArrayGetDim
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
SafeArrayCreateVector
VariantClear
SysAllocString
SysFreeString
SafeArrayAccessData
OleLoadPicturePath
VariantChangeTypeEx

oledlg

OleUIBusyW
OleUIAddVerbMenuW

urlmon

CreateURLMonikerEx
CoInternetCombineUrl
UrlMkSetSessionOption
RegisterBindStatusCallback

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

InternetCrackUrlW

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmSetCompositionFontA
ImmNotifyIME
ImmGetOpenStatus

ws2_32

inet_addr

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream

winmm

PlaySoundW

Exports

Exports

_Scintilla_DirectFunction@16

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 923KB - Virtual size: 923KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4aee24ab0f233573b75d812a50f2af42

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

bugtrapu

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

version

wininet

imm32

ws2_32

oleacc

gdiplus

winmm

Exports

Exports

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rdata Size: 923KB - Virtual size: 923KB

.data Size: 188KB - Virtual size: 230KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 427KB - Virtual size: 426KB

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 923KB - Virtual size: 923KB

.data
Size: 188KB - Virtual size: 230KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 427KB - Virtual size: 426KB