2024-02-23_86117c1e2b13d77895f39ed45bf0fe43_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-23_86117c1e2b13d77895f39ed45bf0fe43_mafia
Size

3.0MB
MD5

86117c1e2b13d77895f39ed45bf0fe43
SHA1

26a2106447884cf61cbea35cc65d456d7e200773
SHA256

6a55e7c2dbf0fad4bea98a5a74c4e5cd75ff0aefcf981f37a68d10e37d37d97a
SHA512

672afba9e026fc530583066202685d361966bfa7a5b26770b07d4a15e1a095385eea33ef1f030af151595d299cc44d8a3023e233892f68e1818bb7e47a5c40d3
SSDEEP

98304:BXVrkkm78xORgxoENL5cNMBiLfS2xbUt2WEpkXxciOEgErwRd+7:BSyJNL59f26t82XxcVEgErwR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-23_86117c1e2b13d77895f39ed45bf0fe43_mafia

Files

2024-02-23_86117c1e2b13d77895f39ed45bf0fe43_mafia
.exe windows:5 windows x86 arch:x86

43861f53e3b8913e63ac8dac85c019a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dev\mastervu\MasterVu\Manwe\Application\Release\MasterVu.pdb

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

setupapi

SetupDiCreateDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInterfaceA

ole32

OleDuplicateData
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CreateStreamOnHGlobal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoTaskMemAlloc
ReleaseStgMedium
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree

shlwapi

PathFileExistsA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionW
PathFindExtensionA

kernel32

IsDebuggerPresent
TerminateProcess
HeapCreate
SetHandleCount
GetStdHandle
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeW
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLocaleInfoW
CompareStringW
WriteConsoleW
EnumSystemLocalesA
IsValidLocale
CreateFileW
GetProcessHeap
SetEnvironmentVariableA
TransactNamedPipe
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
InterlockedDecrement
SetUnhandledExceptionFilter
LoadLibraryA
GetProcAddress
FreeLibrary
GetVolumeInformationA
CloseHandle
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
lstrlenA
MultiByteToWideChar
GetLastError
LocalFree
LocalAlloc
Sleep
CreateThread
FindFirstFileA
FindNextFileA
FindClose
GetCurrentDirectoryA
SetCurrentDirectoryA
GlobalLock
GlobalUnlock
GlobalFree
FormatMessageA
CopyFileA
DeleteFileA
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
ExitThread
ExitProcess
HeapReAlloc
RaiseException
RtlUnwind
FindFirstFileExA
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
CreateDirectoryA
HeapAlloc
GetDateFormatA
GetTimeFormatA
DecodePointer
EncodePointer
HeapFree
CreateMutexA
ReleaseMutex
SetNamedPipeHandleState
FindResourceExW
GetUserDefaultLCID
GetTickCount
GetFileAttributesA
GetLocalTime
InterlockedIncrement
VirtualProtect
SearchPathA
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetTempPathA
GetTempFileNameA
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
GetNumberFormatA
GetWindowsDirectoryA
GetOEMCP
GetCPInfo
GetFullPathNameA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
lstrcpyA
GetACP
GlobalFlags
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalFindAtomA
LoadLibraryW
lstrcmpW
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcessId
ResumeThread
SetThreadPriority
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetUserDefaultUILanguage
ConvertDefaultLocale
GetModuleHandleA
GetSystemDefaultUILanguage
GetModuleFileNameA
GetLocaleInfoA
CompareStringA
lstrcmpA
GetModuleHandleW
FindResourceA
FreeResource
GlobalSize
GlobalAlloc
lstrlenW
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExA
GetCurrentProcess
SetPriorityClass
CreateFileA
DeviceIoControl
MoveFileA
GetCommandLineA
RemoveDirectoryA
ActivateActCtx
DeactivateActCtx
SetLastError
MulDiv

user32

LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
RegisterClipboardFormatA
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardLayout
ToAsciiEx
DrawStateA
GetSystemMenu
LoadMenuW
SetClassLongA
DestroyAcceleratorTable
SetParent
SetWindowRgn
UnpackDDElParam
ReuseDDElParam
LoadMenuA
InsertMenuItemA
BringWindowToTop
DrawIconEx
CopyImage
GetIconInfo
NotifyWinEvent
EnableScrollBar
InvertRect
GetAsyncKeyState
CreatePopupMenu
GetMenuDefaultItem
DestroyMenu
GetMenuItemInfoA
CharUpperA
DestroyIcon
UnregisterClassA
GetNextDlgGroupItem
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
OffsetRect
CharNextA
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
SetRectEmpty
DeleteMenu
WaitMessage
LoadCursorW
RealChildWindowFromPoint
MapVirtualKeyA
GetKeyNameTextA
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExA
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
ShowOwnedPopups
IsCharLowerA
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
GetLastActivePopup
GrayStringA
DrawTextExA
TabbedTextOutA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
ValidateRect
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDlgItem
SetWindowPos
DrawFocusRect
MessageBeep
DestroyCaret
HideCaret
ShowCaret
SetCaretPos
CreateCaret
IntersectRect
GetWindowDC
GetWindowRect
LoadIconA
LoadImageA
DrawEdge
FrameRect
IsWindowEnabled
GetParent
GetWindowLongA
CopyRect
MapVirtualKeyExA
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
GetWindowRgn
DestroyCursor
GetSysColor
GetCursorPos
SetCursor
SetFocus
UpdateWindow
IsWindowVisible
GetSysColorBrush
RedrawWindow
ReleaseCapture
WindowFromPoint
SetCapture
PtInRect
ClientToScreen
GetMessagePos
ToAscii
GetKeyboardState
ScreenToClient
EndPaint
BeginPaint
DefWindowProcA
RegisterClassA
LoadCursorA
IsZoomed
MoveWindow
GetClientRect
IsIconic
InvalidateRect
ReleaseDC
GetDC
SetTimer
KillTimer
PostMessageA
UnregisterDeviceNotification
wsprintfA
RegisterDeviceNotificationA
EnableWindow
DrawIcon
LoadIconW
DrawTextA
InflateRect
DrawFrameControl
FillRect
GetWindowTextA
SendMessageA
GetActiveWindow
TranslateAcceleratorA
GetSystemMetrics
LoadBitmapA
LoadAcceleratorsA
GetKeyState
SetRect
MessageBoxA
SubtractRect
GetDoubleClickTime
CharUpperBuffA
CopyIcon
GetUpdateRect
IsClipboardFormatAvailable
keybd_event
SetMenuDefaultItem
CreateMenu
TranslateMDISysAccel
SetMenuItemBitmaps
DrawMenuBar
IsChild

gdi32

TextOutA
GetTextColor
GetBkColor
GetTextExtentPointA
IntersectClipRect
GetTextExtentPoint32A
CreateFontA
SetBkColor
CreatePen
MoveToEx
LineTo
Rectangle
Polyline
CreateRectRgn
CreatePolygonRgn
PtInRegion
EnumFontFamiliesExA
GetDIBits
CopyMetaFileA
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
SetTextAlign
GetLayout
SetLayout
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
CreateDCA
CreateSolidBrush
ExtSelectClipRgn
CreateBitmap
SelectPalette
GetObjectType
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
CreateFontIndirectA
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextMetricsA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateEllipticRgn
Ellipse
Polygon
SetPixel
OffsetRgn
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
EndDoc
EndPage
StartPage
StartDocA
GetDeviceCaps
SetDIBColorTable
GetDIBColorTable
CreateDIBSection
BitBlt
DeleteDC
GetObjectA
SetTextColor
SetBkMode
StretchBlt
SetStretchBltMode
RoundRect
GetStockObject
CreateRoundRectRgn
SelectObject
CreateCompatibleBitmap
SelectClipRgn
CreateCompatibleDC
CreatePatternBrush
ScaleWindowExtEx
DeleteObject

msimg32

GradientFill
AlphaBlend
TransparentBlt

comdlg32

PrintDlgExA
CommDlgExtendedError
GetSaveFileNameA
GetFileTitleA

winspool.drv

GetPrinterA
ClosePrinter
DocumentPropertiesA
ord201
OpenPrinterA

advapi32

RegEnumValueA
RegQueryValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
RegCloseKey
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA

shell32

SHBrowseForFolderA
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
DragFinish
SHAppBarMessage
ShellExecuteA
DragQueryFileA

comctl32

ImageList_GetIconSize

oleaut32

VariantInit
SysStringByteLen
SysFreeString
SysAllocString
SysStringLen
VariantChangeType
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
SafeArrayDestroy
VarBstrFromDate
OleCreateFontIndirect
VariantCopy
VariantClear
GetErrorInfo

oledlg

ord8

gdiplus

GdipSetPageUnit
GdipDrawLineI
GdipDrawEllipseI
GdipDeleteBrush
GdipCloneBrush
GdipCreateSolidFill
GdipFillRectangle
GdipTranslateWorldTransform
GdipSetClipRectI
GdipResetClip
GdipCreateLineBrushI
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreatePath
GdipDeletePath
GdipClosePathFigure
GdipAddPathLine2
GdipAddPathLineI
GdipDrawLine
GdipDrawPath
GdipFillRectangleI
GdipFillPath
GdipMeasureString
GdipIsVisiblePathPoint
GdipDrawRectangleI
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipResetPath
GdipAddPathArcI
GdipAddPathRectangleI
GdipCreateBitmapFromHICON
GdipSetSolidFillColor
GdipCreateTexture2I
GdipCreateLineBrushFromRectI
GdipSetSmoothingMode
GdipSetPenColor
GdipAddPathCurve2I
GdipAddPathPath
GdipSetClipRect
GdipSetClipRegion
GdipGetClip
GdipCreateRegion
GdipDeleteRegion
GdipRotateWorldTransform
GdipDrawLines
GdipDrawRectangle
GdipSetLineColors
GdipAddPathCurve3I
GdipDrawImageRectI
GdipAddPathLine2I
GdipCreateTexture
GdipClonePath
GdipCreateBitmapFromResource
GdipSetStringFormatFlags
GdipGetStringFormatFlags
GdipSetStringFormatAlign
GdipDrawString
GdipCreateBitmapFromStream
GdipSetInterpolationMode
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipCloneImage
GdipDrawImageI
GdipReleaseDC
GdipGetDC
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCreatePen1
GdipGetImageEncoders
GdipSetTextRenderingHint
GdipDeletePen
GdipCreateFromHDC
GdipGetImageEncodersSize
GdipGetImagePixelFormat
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipSetLineBlend
GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

wmvcore

WMCreateProfileManager
WMCreateWriter

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 397KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43861f53e3b8913e63ac8dac85c019a5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

setupapi

ole32

shlwapi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

wmvcore

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 397KB - Virtual size: 397KB

.data Size: 38KB - Virtual size: 80KB

.rsrc Size: 328KB - Virtual size: 327KB

.reloc Size: 240KB - Virtual size: 239KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 397KB - Virtual size: 397KB

.data
Size: 38KB - Virtual size: 80KB

.rsrc
Size: 328KB - Virtual size: 327KB

.reloc
Size: 240KB - Virtual size: 239KB