2024-02-19_fdf1fa4443242bd58987298c00156e17_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-19_fdf1fa4443242bd58987298c00156e17_mafia
Size

969KB
MD5

fdf1fa4443242bd58987298c00156e17
SHA1

06a8ce1baee22dff0476a692edb95d60ce9590de
SHA256

56b26116e1ff0a83840c6f11b5183bd8b63a0c090bf1255757d6704da4f7ab19
SHA512

b6fe8c9cdc2f24431c523e7baca61c79d92e3d23e7673e7f652d4563919e30bc515ec788ce09630ab95cd6935f89ef8976709f2263362af500f1308d9af8f6f8
SSDEEP

24576:ArvhUkAhG+/zD33lpbrUFCWVFCfNXNT+uP:2Uht/zD3/UEW7C7Tl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-19_fdf1fa4443242bd58987298c00156e17_mafia

Files

2024-02-19_fdf1fa4443242bd58987298c00156e17_mafia
.exe windows:5 windows x86 arch:x86

eeef8350653adddbc4ce58dadca3a6c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ord17

winmm

timeGetTime
midiOutReset
midiInUnprepareHeader
midiInStop
midiInReset
midiOutShortMsg
midiOutClose
midiInClose
midiInAddBuffer
midiInPrepareHeader
midiInStart
midiOutUnprepareHeader
midiOutLongMsg
midiOutPrepareHeader
midiInOpen
midiOutGetNumDevs
midiInGetNumDevs
midiInGetDevCapsA
midiOutGetDevCapsA
midiOutOpen

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

msimg32

TransparentBlt
AlphaBlend

portaudio_x86

ord16
ord17
ord21
ord5
ord8
ord15
ord12
ord3
ord4
ord52
ord55
ord2
ord26
ord28
ord50
ord19
ord51
ord54

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetCurrentThreadId
GetCommandLineW
LoadLibraryW
LoadResource
FindResourceW
GetModuleHandleW
FindResourceA
GetLastError
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency
SetPriorityClass
GetPriorityClass
GetCurrentProcess
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
DeleteFileW
CopyFileW
GetModuleFileNameW
CreateDirectoryW
GetTempPathW
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileTime
CreateFileW
GlobalMemoryStatusEx
GetProcessHeaps
GetSystemInfo
GetSystemTimeAdjustment
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
SetEvent
GetVersionExA
CloseHandle
InitializeCriticalSection
CreateMutexA
WaitForSingleObject
ReleaseMutex
CreateEventA
ResetEvent
WaitForMultipleObjectsEx
SetThreadPriority
CreateThread
GetOEMCP
SetProcessWorkingSetSize
GetProcessWorkingSetSize
GetProcessAffinityMask
SetErrorMode
GetVersionExW
HeapCreate
WriteFile
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
HeapSetInformation
GetCommandLineA
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
EncodePointer
ReadFile
RaiseException
DecodePointer
ExitProcess
HeapFree
HeapAlloc
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
InterlockedExchange
GetLocaleInfoW
InterlockedCompareExchange
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
HeapSize
HeapQueryInformation
HeapReAlloc
GetTimeZoneInformation
GetFullPathNameW
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
LCMapStringW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualQuery
GetTickCount
GetCurrentProcessId
SetStdHandle
CreateFileA
WriteConsoleW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableW
SetEnvironmentVariableA
DeleteCriticalSection

user32

UnregisterClassW
LoadCursorW
RegisterClassW
InvalidateRect
GetUpdateRect
BeginPaint
EndPaint
GetMessageW
GetSystemMetrics
DefWindowProcW
LoadIconA
RegisterClassExW
DrawTextExW
GetForegroundWindow
GetDesktopWindow
CreateWindowExW
ShowWindow
DestroyWindow
UpdateWindow
TranslateMessage
PeekMessageW
DispatchMessageW
MessageBoxW
LoadIconW
CreateMenu
IsWindowEnabled
SetMenuItemInfoW
DestroyMenu
GetMenuItemInfoW
CreatePopupMenu
TrackPopupMenu
FillRect
GetActiveWindow
SetWindowLongA
AppendMenuW
SetMenu
SetFocus
PostQuitMessage
GetWindowTextW
GetParent
CallWindowProcW
PostMessageW
SetForegroundWindow
DialogBoxIndirectParamA
KillTimer
SetWindowTextW
EnableWindow
DialogBoxIndirectParamW
GetWindowLongW
EndDialog
SetWindowLongW
SendMessageW
GetDlgItem
MessageBoxA
GetClientRect
GetWindowRect
MoveWindow
SetTimer
SetActiveWindow
GetWindowLongA
DefWindowProcA
LoadCursorA

gdi32

EndPath
StrokePath
FillPath
LineTo
AngleArc
Polyline
Arc
Ellipse
DeleteObject
BeginPath
SetBkMode
SetTextColor
GetTextExtentPoint32W
CreateFontIndirectW
CreateBitmap
SetBkColor
CreatePen
CreateBrushIndirect
GetStockObject
MoveToEx
CreateDIBSection
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetBitmapBits
GetBitmapBits
DPtoLP
GetObjectA
SetDCPenColor
Rectangle
SetDCBrushColor

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
RegQueryValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
GetUserNameW

shell32

ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW
SHGetFolderPathW

ole32

OleInitialize
CoTaskMemFree
OleUninitialize

Exports

Exports

_FreeAPI@0
_InitAPI@0
_MplMidiGetAPIVersion@0
_MplMidiGetIoPairInput@4
_MplMidiInClose@4
_MplMidiInGetDevCaps@12
_MplMidiInGetNumDevs@0
_MplMidiInOpen@12
_MplMidiInReset@4
_MplMidiInStart@4
_MplMidiInStop@4
_MplMidiMidMessage@20
_MplMidiModMessage@20
_MplMidiOutClose@4
_MplMidiOutGetDevCaps@12
_MplMidiOutGetNumDevs@0
_MplMidiOutOpen@4
_MplMidiOutReset@4
_MplMidiOutShortMsg@8
_MplMidiSetIoPair@8
engineOpcode

Sections

.text
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eeef8350653adddbc4ce58dadca3a6c4

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

winmm

version

msimg32

portaudio_x86

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 698KB - Virtual size: 698KB

.rdata Size: 130KB - Virtual size: 130KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 87KB - Virtual size: 86KB

.reloc Size: 39KB - Virtual size: 39KB

.text
Size: 698KB - Virtual size: 698KB

.rdata
Size: 130KB - Virtual size: 130KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 87KB - Virtual size: 86KB

.reloc
Size: 39KB - Virtual size: 39KB