2024-02-21_93559f8087ff73f7c7ad6a68ba8bb2b1_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-21_93559f8087ff73f7c7ad6a68ba8bb2b1_mafia
Size

2.0MB
MD5

93559f8087ff73f7c7ad6a68ba8bb2b1
SHA1

8732593adc370db7f90122c85dd2852504412c81
SHA256

c0f0c1f8f08f78eebcdeb4bc40044e73f976b0f96b6fc6b7f339f904e89c0324
SHA512

b47bd176ec89cd9565c938ceda3421209598bcc632a22f0b8682c2cb0e1e714438a3b042b0f0a5eb21ba378e060c32fa9259af1b58e113ad968396eef55cb97f
SSDEEP

49152:9YVr6fHr9mcOe6f46r8asM4K/xkqgSF6vIkvAsho+6KIdiJzdXtFQw3yKPURJ:yIr9mcOex67sM4K/hgSF6Akbo+BKiJzm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-21_93559f8087ff73f7c7ad6a68ba8bb2b1_mafia

Files

2024-02-21_93559f8087ff73f7c7ad6a68ba8bb2b1_mafia
.exe windows:5 windows x86 arch:x86

aeb86340d0a30ad869489f98951703f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\work\WORKSPACES\WK_SIEN_APPNETWORK\Sien App Network\SIEN.Installer\Trunk\Setup\SIEN.Installer.VS10\Release\Setup.pdb

Imports

rpcrt4

UuidToStringW

kernel32

GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
WriteConsoleW
GetProcessHeap
GetStringTypeW
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
ExitThread
ExitProcess
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetNumberFormatW
GetWindowsDirectoryW
GetTempFileNameW
SetErrorMode
GetCurrentDirectoryW
lstrcpyW
GetSystemDirectoryW
GetFullPathNameW
GetVolumeInformationW
UnlockFile
LockFile
lstrcmpiW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GlobalFlags
GetThreadLocale
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
RaiseException
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
SuspendThread
ResumeThread
SetThreadPriority
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
GetConsoleCP
GlobalFindAtomW
GlobalDeleteAtom
lstrcmpW
GetCurrentThreadId
FreeResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeLibrary
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
InterlockedDecrement
InterlockedIncrement
lstrlenA
CompareStringW
SetLastError
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
MulDiv
DeleteFileA
CreateFileA
OutputDebugStringA
ReleaseSemaphore
SignalObjectAndWait
CreateThread
Sleep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateSemaphoreA
VerifyVersionInfoW
VerSetConditionMask
WideCharToMultiByte
MultiByteToWideChar
ResetEvent
CreateEventW
GetTickCount
CreateMutexW
LocalAlloc
GetCurrentThread
OutputDebugStringW
GetSystemInfo
GetVersionExW
DuplicateHandle
OpenFileMappingW
GetCurrentProcess
GetModuleHandleW
GetProcAddress
SetEvent
GetExitCodeProcess
WaitForSingleObject
GetFileAttributesExW
FindNextFileW
FindClose
GetTempPathW
FlushFileBuffers
ReadFile
CopyFileW
WriteFile
GetSystemTimeAsFileTime
FindResourceExW
SetEndOfFile
SetFilePointer
FindFirstFileW
GetFileSize
CloseHandle
CreateFileMappingW
CreateFileW
VirtualQuery
UnmapViewOfFile
MapViewOfFile
DeleteFileW
GetLocalTime
CreateDirectoryW
GetCommandLineW
GetModuleFileNameW
CreateProcessW
LocalFree
GetCurrentProcessId
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
lstrlenW
GetTimeZoneInformation
GlobalAddAtomW
IsProcessorFeaturePresent
SetEnvironmentVariableW

user32

UnregisterClassW
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
MapVirtualKeyW
GetKeyNameTextW
IntersectRect
DestroyMenu
GetMenuItemInfoW
InflateRect
ShowOwnedPopups
SetCursor
RegisterClipboardFormatW
GetMessageW
TranslateMessage
PostQuitMessage
MoveWindow
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
IsWindowVisible
ValidateRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
SetFocus
SetWindowsHookExW
GetCursorPos
CallNextHookEx
GetWindowRect
PtInRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
DestroyIcon
ScreenToClient
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetClassNameW
InvalidateRect
UpdateWindow
NotifyWinEvent
GetAsyncKeyState
IsZoomed
DrawStateW
GetDesktopWindow
SetClassLongW
DrawIconEx
DrawFrameControl
DrawFocusRect
ToUnicodeEx
UnhookWindowsHookEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
CheckMenuItem
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
SystemParametersInfoW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RedrawWindow
KillTimer
SetTimer
DrawEdge
GetParent
FillRect
GetSysColor
GetClassLongW
WindowFromDC
ShowWindow
SetActiveWindow
EnableMenuItem
GetSystemMenu
SetForegroundWindow
SetWindowTextW
EnableWindow
IsRectEmpty
UnionRect
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
CreatePopupMenu
SetMenuDefaultItem
GetMenuDefaultItem
CopyImage
WaitMessage
PostThreadMessageW
CopyAcceleratorTableW
SetRect
InvalidateRgn
CharNextW
MapDialogRect
GetKeyState
DrawIcon
GetSystemMetrics
IsIconic
GetClientRect
LoadIconW
SendMessageW
PostMessageW
wvsprintfW
CharUpperW
CharLowerW
SetRectEmpty
EnumDisplayMonitors
SetLayeredWindowAttributes
OffsetRect
DeleteMenu
LoadMenuW
SetWindowRgn
SetCapture
WindowFromPoint
ReleaseCapture
ClientToScreen
MessageBeep
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
SetCursorPos
BringWindowToTop
LockWindowUpdate
InvertRect
HideCaret
DestroyAcceleratorTable
GetIconInfo
LoadImageW
GetNextDlgGroupItem
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
FrameRect
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
CopyIcon
CharUpperBuffW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
IsClipboardFormatAvailable
GetUpdateRect
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
SubtractRect
DestroyCursor
GetWindowRgn
SetParent
SetWindowContextHelpId

gdi32

SelectClipRgn
GetPixel
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
CreateDIBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
GetRgnBox
GetTextColor
SetLayout
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceW
SetPixelV
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetStockObject
CreateSolidBrush
DeleteObject
CreateBitmap
CreateDCW
CopyMetaFileW
GetDeviceCaps
Escape
TextOutW
RectVisible
PtVisible
CreateFontIndirectW
GetObjectW
ExtTextOutW
CreateRectRgn
GetTextExtentPoint32W
BitBlt
GetBkColor
DPtoLP
GetViewportExtEx
GetWindowExtEx
CreateCompatibleBitmap
LPtoDP
CreateCompatibleDC
GetMapMode
PatBlt

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

GetLengthSid
RegOpenCurrentUser
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegDeleteKeyW
RegDeleteValueW
OpenProcessToken
RegEnumKeyW
RegQueryValueW
RegSetValueW
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
AddAccessAllowedAce
InitializeAcl
RegQueryValueExW
AllocateAndInitializeSid
DuplicateToken
OpenThreadToken
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW

shell32

DragQueryFileW
DragFinish
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
ExtractIconW
Shell_NotifyIconW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
CommandLineToArgvW
SHGetFileInfoW
SHBrowseForFolderW

comctl32

ord17
ImageList_GetIconSize

shlwapi

PathIsUNCW
PathStripToRootW
PathFindExtensionW
UrlUnescapeW
SHQueryValueExW
PathRemoveExtensionW
PathStripPathW
PathFileExistsW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CoCreateGuid
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
OleDuplicateData
CoRegisterClassObject
CoRevokeClassObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
StringFromGUID2
CoDisconnectObject
CLSIDFromString
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CreateStreamOnHGlobal
DoDragDrop
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleLockRunning

oleaut32

OleCreateFontIndirect
VarBstrFromDate
VariantTimeToSystemTime
SafeArrayDestroy
SystemTimeToVariantTime
SafeArrayCreate
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
DispCallFunc
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantCopy
VariantClear
SysAllocStringLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocString

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

gdiplus

GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageI
GdipBitmapUnlockBits
GdipFree
GdipAlloc
GdipDisposeImage
GdipLoadImageFromFile
GdipCloneImage
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipDrawImageRectI
GdiplusStartup
GdiplusShutdown
GdipDeleteGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImageEncoders

ws2_32

WSARecv
WSASend
WSAAccept
listen
inet_addr
htons
bind
WSASocketW
WSACleanup
WSAStartup
WSAGetLastError
closesocket
setsockopt

wininet

DeleteUrlCacheEntryW
InternetCrackUrlW
InternetCanonicalizeUrlW
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetQueryDataAvailable

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aeb86340d0a30ad869489f98951703f2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

ws2_32

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 330KB - Virtual size: 329KB

.data Size: 31KB - Virtual size: 61KB

.rsrc Size: 112KB - Virtual size: 112KB

.reloc Size: 181KB - Virtual size: 181KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 330KB - Virtual size: 329KB

.data
Size: 31KB - Virtual size: 61KB

.rsrc
Size: 112KB - Virtual size: 112KB

.reloc
Size: 181KB - Virtual size: 181KB