Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_7044d1911d33e56499c9b399c7599404_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_7044d1911d33e56499c9b399c7599404_mafia.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-19_7044d1911d33e56499c9b399c7599404_mafia
-
Size
2.1MB
-
MD5
7044d1911d33e56499c9b399c7599404
-
SHA1
259c483b02289b9fa3f8849793cdac5c75c3cb23
-
SHA256
0da19c35a48f4e3f595979cb01a3146edf7a045fc3f9d53a89321815f9ab59e3
-
SHA512
14b2b672fbbea9cc5bb53770930857034c1568d0086c7ae0ef7ea7fb32b38fd3beb1def878847024a368b7288225ed0e77bc7e3333aeab64f4383fc0b39f6be5
-
SSDEEP
49152:2JygI2dyMhqD7lXKJoyVimUaa0sujWVnDi5RJt+u0e4ssGYHoHEK9t:t2dyMhq7lXdyVimUAsujWVnDi5bI5ssy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-19_7044d1911d33e56499c9b399c7599404_mafia
Files
-
2024-02-19_7044d1911d33e56499c9b399c7599404_mafia.exe windows:5 windows x86 arch:x86
a7c0451fbbd8720cf09738a91bfda31c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
IsProcessorFeaturePresent
SetHandleCount
IsValidCodePage
GetTimeZoneInformation
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
GetDriveTypeW
CompareStringW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
WriteConsoleW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
CloseHandle
GetOverlappedResult
GetLastError
DeviceIoControl
CreateEventA
CreateFileA
WaitForSingleObject
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
GetCurrentDirectoryA
CreateDirectoryA
QueryPerformanceCounter
GetVersionExA
GetProcAddress
GetModuleHandleA
GetPrivateProfileStructA
WritePrivateProfileStringA
WritePrivateProfileStructA
GetPrivateProfileStringA
GlobalFree
lstrcpyA
GlobalLock
GetFileType
GlobalAlloc
GetLocalTime
WinExec
MultiByteToWideChar
LoadLibraryA
FreeLibrary
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetLastError
DeactivateActCtx
ActivateActCtx
IsDebuggerPresent
lstrcpynA
ExitProcess
Sleep
SetThreadPriority
GetVolumeInformationA
lstrlenA
MulDiv
lstrlenW
LocalFree
FormatMessageA
GlobalSize
CopyFileA
FreeResource
FindResourceA
lstrcmpW
LoadLibraryW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetModuleFileNameA
GetCurrentProcessId
lstrcmpA
GetThreadLocale
lstrcmpiA
DeleteFileA
ReadFile
WriteFile
SetFilePointer
GlobalUnlock
HeapCreate
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
SetUnhandledExceptionFilter
SetStdHandle
HeapSize
HeapQueryInformation
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
CreateThread
ExitThread
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
RtlUnwind
EncodePointer
DecodePointer
RaiseException
HeapAlloc
HeapFree
LocalLock
LocalUnlock
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
UnhandledExceptionFilter
GetTickCount
TerminateProcess
MoveFileExA
GetSystemDirectoryA
GetTempPathA
GetTempFileNameA
GetFileSize
DuplicateHandle
GetCurrentProcess
GetNumberFormatA
GetWindowsDirectoryA
SetErrorMode
GetSystemDirectoryW
GetOEMCP
GetCPInfo
GetACP
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
InterlockedIncrement
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetFileAttributesExA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetPrivateProfileIntA
ResumeThread
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
GetModuleHandleW
InterlockedExchange
GlobalReAlloc
GetFullPathNameA
FindFirstFileA
FindClose
user32
LoadImageW
RegisterClipboardFormatA
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawEdge
SetClassLongA
DestroyAcceleratorTable
DrawIconEx
GetIconInfo
HideCaret
DrawFocusRect
InvertRect
SetParent
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
GetAsyncKeyState
NotifyWinEvent
SetWindowRgn
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
DestroyIcon
WaitMessage
DeleteMenu
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyImage
RealChildWindowFromPoint
GetSysColorBrush
IntersectRect
WindowFromPoint
SetRect
DrawStateA
IsZoomed
SetRectEmpty
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SystemParametersInfoA
FrameRect
GetMenuItemInfoA
InflateRect
SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
PostQuitMessage
CharUpperA
GetWindowThreadProcessId
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemInt
GetDlgItemInt
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetForegroundWindow
CopyIcon
CharUpperBuffA
PostThreadMessageA
IsCharLowerA
MapVirtualKeyExA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
IsClipboardFormatAvailable
GetUpdateRect
ShowScrollBar
RedrawWindow
ValidateRect
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
GetDoubleClickTime
SubtractRect
DestroyCursor
GetWindowRgn
DestroyMenu
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
CopyRect
PtInRect
GetWindowTextLengthA
GetWindowTextA
GetWindow
SetFocus
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringA
InsertMenuA
RemoveMenu
GetCursorPos
GetDlgCtrlID
SetWindowPos
ReleaseCapture
LoadCursorA
SetCursor
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetCapture
ShowOwnedPopups
ScreenToClient
ClientToScreen
LoadMenuW
GetSubMenu
GetMenuItemID
GetMenuItemCount
CheckMenuItem
CreatePopupMenu
LoadBitmapW
EmptyClipboard
SetClipboardData
CloseClipboard
SendNotifyMessageA
OpenClipboard
GetWindowLongA
SetWindowLongA
PostMessageA
EnumChildWindows
GetSystemMetrics
LoadIconW
GetParent
GetDesktopWindow
IsWindowVisible
InvalidateRect
GetWindowRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
IsRectEmpty
ShowWindow
GetDlgItem
SetWindowTextA
GetDC
FillRect
KillTimer
SetTimer
GetClientRect
EnableWindow
MessageBoxA
RegisterDeviceNotificationA
UnregisterDeviceNotification
OffsetRect
wsprintfA
gdi32
SetTextAlign
GetLayout
SetLayout
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
GetCharWidthA
CreateFontA
CreateCompatibleBitmap
GetTextMetricsA
GetBkColor
SetRectRgn
CombineRgn
GetMapMode
MoveToEx
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetTextColor
GetRgnBox
CreateRoundRectRgn
CreateDIBSection
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateFontIndirectA
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
GetTextFaceA
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
DeleteDC
StretchDIBits
SetStretchBltMode
CreateSolidBrush
GetStockObject
GetDeviceCaps
CopyMetaFileA
CreateDCA
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
CreateRectRgnIndirect
CreateCompatibleDC
BitBlt
ExtTextOutA
GetTextExtentPoint32A
DPtoLP
SaveDC
PatBlt
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
shell32
SHGetDesktopFolder
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragQueryFileA
DragFinish
comctl32
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
StrStrIA
PathRemoveFileSpecW
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsDirectoryA
PathIsUNCA
ole32
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleCreateMenuDescriptor
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
oleaut32
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SysStringLen
SysAllocStringLen
VariantInit
SysFreeString
SysAllocStringByteLen
VariantClear
SafeArrayDestroy
VariantChangeType
oledlg
ord8
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
odbc32
ord51
ord50
ord45
ord44
ord17
ord41
ord10
ord61
ord3
ord16
ord2
ord1
ord15
ord9
ord14
ord20
ord8
ord48
ord49
ord11
ord19
ord12
ord46
ord18
ord13
ord59
ord43
ord68
ord5
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 258KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ