2024-02-21_aa0cc97af73955d86d6ce9c0ae1ced20_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-21_aa0cc97af73955d86d6ce9c0ae1ced20_mafia
Size

6.0MB
MD5

aa0cc97af73955d86d6ce9c0ae1ced20
SHA1

64b2b8e234a5faa348204a67fc68912f98db0506
SHA256

7d861d7c1c8ca9304f594b239274427881fe033879e37f935f4441e19940365a
SHA512

90155ca86e6107f44ea898ed4c910737a559aec209f0b281ea04e72ea9a805a399e4249b901b2b009fb05de1baf0b0d9db837ae45f23fa7005c3130b476deee2
SSDEEP

98304:GYz5HYqTOpUYphXdddTv6YrdNXatPTO7sIa11dBH9T9y7GE4O80vZTcJJasvk7ka:BS3p3ddj6YrdNY9y7t4O8/4svXE5zJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-21_aa0cc97af73955d86d6ce9c0ae1ced20_mafia

Files

2024-02-21_aa0cc97af73955d86d6ce9c0ae1ced20_mafia
.exe windows:5 windows x86 arch:x86

e5ee20a97a16f9cb833aba5be6a1af5a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

freeaddrinfo
WSASetLastError
sendto
recvfrom
accept
listen
connect
socket
closesocket
getpeername
getsockopt
htons
bind
getsockname
setsockopt
ntohl
send
recv
WSAGetLastError
WSAStartup
WSACleanup
ntohs
getaddrinfo
shutdown
gethostname
ioctlsocket
select
__WSAFDIsSet

wldap32

ord33
ord200
ord79
ord32
ord30
ord26
ord301
ord60
ord143
ord211
ord22
ord46
ord27
ord41
ord50
ord35

comctl32

ImageList_SetDragCursorImage
ord16
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Destroy
ImageList_Create
ImageList_Add
ImageList_EndDrag
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_BeginDrag
ord17
ImageList_SetBkColor
ImageList_Draw
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon

rpcrt4

UuidToStringW
RpcStringFreeW

wsock32

gethostbyaddr
getservbyname
htonl
ioctlsocket
gethostbyname

kernel32

GetTempFileNameW
CreateMutexW
TlsSetValue
ExitProcess
SetThreadPriority
ResumeThread
TlsGetValue
GetCurrentProcess
TlsFree
TlsAlloc
LocalFree
FormatMessageW
GetACP
IsValidLocale
GetLocaleInfoW
SetThreadLocale
WriteFile
SetEvent
CreatePipe
SetNamedPipeHandleState
GetExitCodeProcess
CreateEventW
CreateThread
CreateProcessW
DuplicateHandle
QueryPerformanceFrequency
GetEnvironmentVariableW
GetCPInfo
IsValidCodePage
GetComputerNameW
GetModuleHandleW
TerminateProcess
GetModuleFileNameW
GetSystemTimeAsFileTime
OutputDebugStringW
GetCurrentThread
RaiseException
FindNextFileW
IsBadReadPtr
IsBadStringPtrA
SetFilePointer
CreateFileA
LocalAlloc
lstrlenA
GetFileTime
GetTempPathW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
InterlockedExchange
EncodePointer
CopyFileW
GetFileAttributesW
CreateFileW
DebugBreak
WideCharToMultiByte
GetProcessHeap
HeapSize
GlobalSize
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
SetErrorMode
SetConsoleCursorPosition
FillConsoleOutputCharacterW
WriteConsoleW
WriteConsoleA
GetConsoleScreenBufferInfo
ReadConsoleOutputCharacterA
FreeConsole
GetVersionExW
GetCommandLineW
LoadLibraryW
MulDiv
InterlockedIncrement
DecodePointer
HeapFree
RtlUnwind
InterlockedDecrement
FindClose
Sleep
WaitForMultipleObjects
PeekNamedPipe
ReadFile
FormatMessageA
WaitForSingleObject
GetVersionExA
LoadLibraryA
FreeLibrary
CloseHandle
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
MultiByteToWideChar
SleepEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FlushConsoleInputBuffer
GetStdHandle
GetFileType
GetVersion
GetModuleHandleA
GetProcAddress
GetLastError
GetCurrentThreadId
HeapAlloc
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetConsoleCtrlHandler
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
ExitThread
GetFileInformationByHandle
GetDriveTypeA
FindFirstFileExA
GetTimeZoneInformation
GetTimeFormatW
GetDateFormatW
DeleteFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
MoveFileW
GetFullPathNameW
LCMapStringW
IsProcessorFeaturePresent
HeapCreate
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetOEMCP
GetFullPathNameA
GetCurrentDirectoryW
SetEndOfFile
GetStringTypeW
GetDriveTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringW

user32

WaitForInputIdle
KillTimer
SetTimer
DdeFreeStringHandle
DdeUninitialize
DdeQueryStringW
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeGetLastError
DdeInitializeW
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleW
DdeNameService
DdeConnect
DdePostAdvise
SetRect
CheckMenuRadioItem
CheckMenuItem
GetSysColorBrush
ValidateRgn
ChildWindowFromPoint
CreateMenu
AppendMenuW
ModifyMenuW
RemoveMenu
InsertMenuItemW
InsertMenuW
CreatePopupMenu
SetMenuItemInfoW
GetSubMenu
DestroyMenu
GetMenuState
UnionRect
EndPaint
BeginPaint
GetWindowDC
PostThreadMessageW
ValidateRect
GetMessageW
DrawIconEx
DrawFrameControl
TranslateAcceleratorW
CreateAcceleratorTableW
DestroyAcceleratorTable
DestroyCursor
GetWindowTextW
GetClassNameW
MessageBeep
SetActiveWindow
FindWindowExW
LoadCursorW
MsgWaitForMultipleObjects
MessageBoxW
GetDoubleClickTime
keybd_event
GetWindowTextLengthW
HideCaret
CreateIconIndirect
PostMessageW
SetMenu
SetWindowRgn
RegisterClassW
UnregisterClassW
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetWindowPlacement
GetDialogBaseUnits
FlashWindow
IsIconic
IsZoomed
SetForegroundWindow
BringWindowToTop
DrawFocusRect
EnumDisplaySettingsW
CopyRect
DrawTextW
GetDlgItem
CreateDialogParamW
InflateRect
PtInRect
UnregisterHotKey
RegisterHotKey
SetWindowsHookExW
GetMenuItemCount
GetMenuItemInfoW
SystemParametersInfoW
BeginDeferWindowPos
EndDeferWindowPos
MapWindowPoints
GetUpdateRgn
GetWindowRect
DeferWindowPos
MoveWindow
UpdateWindow
SetCursorPos
ReleaseCapture
SetFocus
DestroyWindow
GetClientRect
GetSysColor
SetWindowTextW
IsWindow
CallWindowProcW
DefWindowProcW
FillRect
InvalidateRect
SetCursor
IsDialogMessageW
TrackPopupMenu
GetCapture
CallNextHookEx
UnhookWindowsHookEx
ChildWindowFromPointEx
GetWindow
GetActiveWindow
GetMessageTime
IsWindowEnabled
IsWindowVisible
ClientToScreen
ScreenToClient
RedrawWindow
SetParent
WindowFromPoint
GetParent
ScrollWindow
EnableScrollBar
SetScrollInfo
GetScrollInfo
SetCapture
SetWindowPos
ShowWindow
GetFocus
EnableWindow
SetWindowLongW
GetWindowLongW
GetAsyncKeyState
VkKeyScanW
MapVirtualKeyW
GetDC
ReleaseDC
PeekMessageW
DispatchMessageW
TranslateMessage
PostQuitMessage
SendMessageW
AdjustWindowRectEx
ShowCursor
GetClipboardFormatNameW
IsClipboardFormatAvailable
CreateDialogIndirectParamW
RegisterClipboardFormatW
GetCursorPos
GetMessagePos
LoadImageW
DestroyIcon
GetSystemMetrics
GetIconInfo
LoadBitmapW
LoadIconW
GetKeyState
MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
ChangeDisplaySettingsW
wsprintfW
DrawEdge
OffsetRect
DrawStateW
CreateWindowExW

gdi32

GetBkColor
SetMapMode
SetViewportExtEx
SetWindowExtEx
SetWindowOrgEx
PolyBezier
SetPixel
GetPixel
SetViewportOrgEx
SetROP2
Polyline
GetClipBox
PtInRegion
EqualRgn
GetRgnBox
CreateHatchBrush
ExtCreatePen
MoveToEx
LineTo
DeleteObject
GetNearestPaletteIndex
SelectObject
SetStretchBltMode
ExtSelectClipRgn
ExtFloodFill
GetCharABCWidthsW
GetTextExtentExPointW
Arc
Pie
Polygon
SetPolyFillMode
PolyPolygon
Rectangle
RoundRect
Ellipse
MaskBlt
ExtTextOutW
StretchDIBits
SetBrushOrgEx
StretchBlt
SaveDC
RestoreDC
CreateICW
GetSystemPaletteEntries
EnumFontFamiliesExW
SetAbortProc
StartDocW
EndDoc
StartPage
EndPage
CreateDCW
GetEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileHeader
CreateEnhMetaFileW
PlayEnhMetaFile
CloseEnhMetaFile
GetPaletteEntries
GetDIBColorTable
CreatePalette
CreateDIBitmap
GetDIBits
CreateDIBSection
GetStockObject
CreatePatternBrush
SetTextAlign
RectInRegion
CreateRectRgnIndirect
CombineRgn
SelectClipRgn
CreateBitmap
GetRegionData
ExtCreateRegion
OffsetRgn
CreatePen
CreateSolidBrush
SetBkMode
SetTextColor
SetBkColor
GetOutlineTextMetricsW
CreateFontIndirectW
BitBlt
DeleteDC
CreateRectRgn
GdiFlush
GetTextExtentPoint32W
SelectPalette
RealizePalette
GetTextMetricsW
GetObjectW
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
ExcludeClipRect

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

comdlg32

CommDlgExtendedError
ChooseFontW
ChooseColorW
PrintDlgW
PageSetupDlgW
GetOpenFileNameW
GetSaveFileNameW

advapi32

RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegisterEventSourceA
ReportEventA
DeregisterEventSource
GetUserNameW

shell32

SHGetPathFromIDListW
SHGetMalloc
DragQueryFileW
DragQueryPoint
DragFinish
DragAcceptFiles
ExtractIconExW
ExtractIconW
SHGetSpecialFolderLocation

ole32

CoCreateInstance
CoTaskMemAlloc
RevokeDragDrop
OleUninitialize
OleInitialize
OleLockRunning
OleRun
OleSetContainedObject
RegisterDragDrop
CoLockObjectExternal
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
OleGetClipboard

oleaut32

VariantTimeToSystemTime
SysStringLen
SystemTimeToVariantTime
SafeArrayUnlock
SafeArrayCreate
SafeArrayLock
SysReAllocString
SysFreeString
VariantClear
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantInit
SysAllocString

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5ee20a97a16f9cb833aba5be6a1af5a

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wldap32

comctl32

rpcrt4

wsock32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 2.3MB - Virtual size: 2.3MB

.data Size: 78KB - Virtual size: 284KB

.tls Size: 512B - Virtual size: 13B

.rsrc Size: 327KB - Virtual size: 327KB

.reloc Size: 334KB - Virtual size: 334KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 2.3MB - Virtual size: 2.3MB

.data
Size: 78KB - Virtual size: 284KB

.tls
Size: 512B - Virtual size: 13B

.rsrc
Size: 327KB - Virtual size: 327KB

.reloc
Size: 334KB - Virtual size: 334KB