2024-02-21_31291e4646cbd6384c87c697918997ce_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-21_31291e4646cbd6384c87c697918997ce_mafia
Size

3.8MB
MD5

31291e4646cbd6384c87c697918997ce
SHA1

b464757637659fef8b8e5b0591bdc4e33787f749
SHA256

c0ff799af1b33c2d2659bf897d904b1b747c65d957bb66809802207cbb197d5d
SHA512

c85c3193140bae6f8ada4a9ddefa7caf3c35611d68b8c0cc2a657cd9383eb9cd8818e09556dc97658ca31f358e99da9d9f8d83526794bc60a3c02fa2948f1c2f
SSDEEP

98304:nyOO1dwyqQq1lw3HoEhLo611C6/RPuymWBlArYArB8IlwuxNYAA+Ns:nXO1dwbQIIrLoWucQDrB8Im8NYA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-21_31291e4646cbd6384c87c697918997ce_mafia

Files

2024-02-21_31291e4646cbd6384c87c697918997ce_mafia
.exe windows:5 windows x86 arch:x86

758ac96d5839366a464068045991b3c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Phoenix V5\PhoenixBuilder\PhoenixBuilder.pdb

Imports

d3dx9_43

D3DXMatrixScaling
D3DXMatrixRotationAxis
D3DXMatrixLookAtLH
D3DXVec3TransformCoord
D3DXCreateEffectFromFileA
D3DXCreateFontA
D3DXVec2TransformCoord
D3DXMatrixReflect
D3DXVec2Normalize
D3DXMatrixTranspose
D3DXVec3Unproject
D3DXPlaneIntersectLine
D3DXMatrixRotationY
D3DXVec3Project
D3DXGetImageInfoFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateTexture
D3DXCreateTextureFromFileInMemoryEx
D3DXMatrixOrthoRH
D3DXPlaneTransform
D3DXVec3Normalize
D3DXSaveTextureToFileA
D3DXQuaternionRotationMatrix
D3DXMatrixRotationYawPitchRoll
D3DXCreateTextureFromFileExA
D3DXCreateCubeTexture
D3DXPlaneFromPointNormal
D3DXSaveTextureToFileInMemory
D3DXPlaneFromPoints
D3DXMatrixRotationX
D3DXMatrixRotationZ
D3DXMatrixMultiply
D3DXMatrixInverse
D3DXMatrixTranslation
D3DXMatrixPerspectiveFovRH

winmm

timeGetTime
PlaySoundA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHGetFolderPathA
SHCreateDirectoryExA
SHAppBarMessage

kernel32

EncodePointer
FindFirstFileExA
FindNextFileA
HeapAlloc
HeapSetInformation
GetStartupInfoW
ExitProcess
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
SetEnvironmentVariableA
FindResourceExW
WriteConsoleW
GetTimeFormatA
GetDateFormatA
RaiseException
ExitThread
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
HeapQueryInformation
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
IsValidCodePage
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CompareStringW
CreateFileW
LCMapStringW
GetTimeZoneInformation
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
GetProcessHeap
GetExitCodeProcess
CreateProcessA
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
GetTempPathA
GetTempFileNameA
GetOEMCP
GetCPInfo
GetACP
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
CreateFileA
lstrcmpiA
TlsFree
DecodePointer
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetCurrentDirectoryA
lstrcpyA
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalFindAtomA
LoadLibraryW
lstrcmpW
GlobalSize
FormatMessageA
LocalFree
lstrlenW
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalFree
FindResourceA
FreeResource
ResumeThread
SetThreadPriority
GlobalAddAtomA
GetCurrentProcessId
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetModuleFileNameA
GetLocaleInfoA
CompareStringA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GetVersionExA
MultiByteToWideChar
lstrlenA
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalUnlock
GlobalAlloc
GlobalLock
MulDiv
SetConsoleTitleA
AllocConsole
DeleteFileA
GetLocalTime
RemoveDirectoryA
QueryPerformanceCounter
CreateThread
CloseHandle
ReleaseMutex
QueryPerformanceFrequency
CreateMutexA
OpenMutexA
Sleep
TerminateThread
GetCommandLineA
WaitForSingleObject
CopyFileA
InterlockedDecrement
GetTickCount
LockResource
GetLogicalDriveStringsA
SizeofResource
WideCharToMultiByte
LoadResource
FindResourceW
HeapFree
LocalReAlloc
SetCurrentDirectoryA

user32

CopyIcon
CharUpperBuffA
PostThreadMessageA
GetDoubleClickTime
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
CreateMenu
GetUpdateRect
IsCharLowerA
MapVirtualKeyExA
SubtractRect
DestroyCursor
MapDialogRect
GetWindowRgn
BringWindowToTop
DrawIconEx
DrawFrameControl
DrawEdge
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
SetWindowRgn
GetSystemMenu
LoadMenuW
OffsetRect
CharUpperA
DestroyIcon
WaitMessage
KillTimer
DeleteMenu
SetLayeredWindowAttributes
EnumDisplayMonitors
GetSysColorBrush
IntersectRect
RealChildWindowFromPoint
MessageBeep
NotifyWinEvent
GetAsyncKeyState
ReleaseCapture
LoadCursorW
EnableScrollBar
HideCaret
SetCapture
DrawFocusRect
InvertRect
SetRectEmpty
IsRectEmpty
WindowFromPoint
DrawStateA
SetWindowTextA
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconW
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
FrameRect
ShowScrollBar
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
CreateAcceleratorTableA
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
GetWindow
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
GetMenuStringA
AppendMenuA
GetMenuItemID
GetMenuItemCount
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
ValidateRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
PostMessageA
PostQuitMessage
IsWindowEnabled
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
MapVirtualKeyA
GetKeyNameTextA
CopyRect
IsWindow
CloseClipboard
IsClipboardFormatAvailable
GetClipboardData
EmptyClipboard
OpenClipboard
SetClipboardData
IsZoomed
ShowWindow
DrawMenuBar
UpdateWindow
MoveWindow
ReleaseDC
ShowCursor
SetCursorPos
RegisterClassExA
TranslateMessage
SetWindowLongA
UnregisterClassA
CreateWindowExA
PeekMessageA
TranslateAcceleratorA
SetWindowPos
DispatchMessageA
LoadCursorA
GetForegroundWindow
MessageBoxA
IsIconic
GetKeyState
LoadBitmapA
DrawIcon
GetSystemMetrics
IsWindowVisible
EnableWindow
SetTimer
ScreenToClient
GetWindowRect
FillRect
RegisterClipboardFormatA
LoadImageW
GetNextDlgGroupItem
CopyImage
GetIconInfo
LockWindowUpdate
GetScrollPos
SetRect
GetLastActivePopup
GetSubMenu
GetParent
LoadIconA
GetClientRect
SetFocus
SendMessageA
GetDC
GetCapture
InvalidateRect
GetWindowLongA
DefWindowProcA
RedrawWindow
GetCursorPos
RemoveMenu
InsertMenuA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
SetClassLongA
DestroyAcceleratorTable
SetParent
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
SetScrollInfo
InsertMenuItemA
SetForegroundWindow

gdi32

ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
GetDeviceCaps
CreatePen
CreateSolidBrush
CreateHatchBrush
CopyMetaFileA
CreateDCA
ScaleViewportExtEx
CreateFontIndirectA
GetTextExtentPoint32A
GetTextMetricsA
SetRectRgn
CombineRgn
DPtoLP
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
GetTextColor
Polyline
SetTextAlign
Polygon
CreatePalette
LineTo
RealizePalette
Rectangle
GetNearestPaletteIndex
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
PtInRegion
FrameRgn
SetPixelV
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
FillRgn
GetBoundsRect
GetTextFaceA
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Ellipse
MoveToEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
PatBlt
CreateRectRgnIndirect
CreateCompatibleDC
GetPaletteEntries
SetPixel
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectA
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetWindowOrgEx

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegEnumValueA

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW
PathFileExistsA
PathIsUNCA

ole32

CoInitializeEx
CoUninitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
IsAccelerator
OleLockRunning
CoTaskMemFree
CoCreateInstance
CoCreateGuid
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoInitialize
CreateStreamOnHGlobal
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleTranslateAccelerator

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
SysFreeString
SysAllocStringLen
VariantChangeType
VariantInit
VariantCopy
VariantClear
SysAllocString

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

d3d9

Direct3DCreate9

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 597KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

758ac96d5839366a464068045991b3c1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3dx9_43

winmm

shell32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

gdiplus

oleacc

imm32

d3d9

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 597KB - Virtual size: 596KB

.data Size: 40KB - Virtual size: 348KB

.rsrc Size: 154KB - Virtual size: 153KB

.reloc Size: 274KB - Virtual size: 273KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 597KB - Virtual size: 596KB

.data
Size: 40KB - Virtual size: 348KB

.rsrc
Size: 154KB - Virtual size: 153KB

.reloc
Size: 274KB - Virtual size: 273KB