2024-02-24_7d90d81dd80805322434b5f286c6a99c_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-24_7d90d81dd80805322434b5f286c6a99c_mafia
Size

2.2MB
MD5

7d90d81dd80805322434b5f286c6a99c
SHA1

2c2e3da2d9bc525bf9c39a003912cf81b6a63706
SHA256

b08cffce1004529897448d098cb07a13ea852da8959477104939dd1fc98ed5a6
SHA512

d871333bbf4041697c67031a1a69d09d014274e23bd7119bd7090275467a83b4524f61b647bd0e2825505773f454d97992bf168d5a252dc8c36431809b87f822
SSDEEP

49152:lpOfoicdBuvBu0Px/VdOjYAf1FZCG0SpRWkW4CurP9FHudsSstxr+DbIxkaZXSm+:HOkqpu0Px/VAYAfdC/SpRWp4CurVVSsi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-24_7d90d81dd80805322434b5f286c6a99c_mafia

Files

2024-02-24_7d90d81dd80805322434b5f286c6a99c_mafia
.exe windows:5 windows x86 arch:x86

92edb8104ec31e0e4dbb552dee03f747

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Code\구글 캘린더\src\[2014-08-13]SvCalender_UI_2010버전\Release\SvCalender.pdb

Imports

kernel32

GetConsoleCP
GetConsoleMode
EnumSystemLocalesA
IsValidLocale
LCMapStringW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
CompareStringW
GetStringTypeW
GetLocaleInfoW
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetStdHandle
IsProcessorFeaturePresent
IsValidCodePage
GetTimeZoneInformation
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
ExitProcess
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
HeapAlloc
DecodePointer
EncodePointer
CreateThread
ExitThread
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetProfileIntA
GetTickCount
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetFileAttributesExA
GetACP
lstrcpyA
GetSystemDirectoryW
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
SetThreadPriority
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
GetModuleHandleW
InterlockedExchange
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
CreateFileA
lstrcmpiA
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
CopyFileA
GlobalSize
lstrlenW
lstrlenA
GetCurrentProcessId
GetModuleFileNameA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
FreeLibrary
lstrcmpW
GetPrivateProfileStructA
GetPrivateProfileStringA
WritePrivateProfileStructA
WritePrivateProfileStringA
lstrcpynA
ActivateActCtx
LoadLibraryA
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleA
GetCurrentDirectoryA
SetEvent
FreeResource
FindResourceA
GlobalAlloc
ResumeThread
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
GetLastError
MultiByteToWideChar
LocalFree
FormatMessageA
ResetEvent
Sleep
WaitForSingleObject
CloseHandle
CreateEventA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte

user32

LoadImageA
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
DrawStateA
DestroyMenu
GetMenuItemInfoA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringA
InsertMenuA
RemoveMenu
GetWindowThreadProcessId
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MonitorFromWindow
MapWindowPoints
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
ValidateRect
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetMessageA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
GetMenu
GetWindow
TrackPopupMenu
DestroyIcon
EqualRect
UpdateWindow
ScreenToClient
WindowFromPoint
ClientToScreen
IsChild
SetCursor
DestroyCursor
LoadCursorW
SetWindowRgn
IsRectEmpty
IntersectRect
CheckMenuItem
SetWindowLongA
DrawIcon
IsIconic
AppendMenuA
GetSystemMenu
KillTimer
SetTimer
FillRect
ReleaseDC
GetDC
PostQuitMessage
SetForegroundWindow
LoadIconW
SetRect
GetMessagePos
GetCapture
SystemParametersInfoA
FrameRect
DrawEdge
InflateRect
DrawFrameControl
ShowOwnedPopups
GetKeyNameTextA
MapVirtualKeyA
RedrawWindow
GetSysColor
GetClassInfoA
DefWindowProcA
LoadCursorA
GetClientRect
RealChildWindowFromPoint
GetKeyState
SetCapture
LoadBitmapW
ReleaseCapture
DrawFocusRect
GetMonitorInfoA
EnumDisplayMonitors
GetCursorPos
IsWindow
GetWindowInfo
SetWindowPos
GetWindowRect
GetSystemMetrics
GetWindowLongA
GetSubMenu
LoadMenuW
GetSysColorBrush
GetWindowRgn
MapDialogRect
GetDoubleClickTime
CreateMenu
SubtractRect
GetUpdateRect
CopyImage
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
EnableWindow
PostMessageA
IsWindowVisible
PtInRect
OffsetRect
InvalidateRect
SendMessageA
GetParent
CopyRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
CharUpperA
IsZoomed
MessageBeep
CallWindowProcA
TranslateMessage
IsClipboardFormatAvailable
MapVirtualKeyExA
IsCharLowerA
CharUpperBuffA
CopyIcon
GetNextDlgGroupItem
GetIconInfo
HideCaret
InvertRect
SetCursorPos
DrawIconEx
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
RegisterClipboardFormatA
EnumChildWindows
LockWindowUpdate
SetClassLongA
CreateAcceleratorTableA
LoadAcceleratorsW
DestroyAcceleratorTable
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
PostThreadMessageA
WaitMessage
SetParent
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
GetAsyncKeyState
NotifyWinEvent
DeleteMenu
UnregisterClassA
SetLayeredWindowAttributes
GetClassInfoExA
TranslateMDISysAccel

gdi32

ExtSelectClipRgn
CreatePolygonRgn
OffsetRgn
CreateRectRgn
CombineRgn
SetPixelV
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
SelectPalette
GetObjectType
CreateDIBSection
CreateHatchBrush
CopyMetaFileA
CreateDCA
CreateRectRgnIndirect
SetRectRgn
PatBlt
CreateDIBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetRgnBox
GetTextColor
SetDIBColorTable
GetDIBits
StretchBlt
SetPixel
CreateEllipticRgn
Polyline
Ellipse
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
GetTextFaceA
DeleteDC
DeleteObject
RealizePalette
GetDeviceCaps
GetTextExtentPoint32A
CreatePalette
GetStockObject
GetPixel
CreateBitmap
LPtoDP
GetMapMode
GetWindowExtEx
GetViewportExtEx
DPtoLP
GetBkColor
Rectangle
Polygon
CreateSolidBrush
CreatePen
SelectObject
CreateFontIndirectA
GetObjectA
BitBlt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateCompatibleDC
CreateFontA
CreateCompatibleBitmap

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegCloseKey
RegEnumKeyExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
Shell_NotifyIconA
ShellExecuteA
SHAppBarMessage
SHGetFileInfoA

comctl32

InitializeFlatSB
FlatSB_EnableScrollBar
FlatSB_ShowScrollBar
ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathFindExtensionA
PathIsUNCA
PathStripToRootA
UrlUnescapeA
PathRemoveFileSpecW

ole32

IsAccelerator
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
DoDragDrop
OleLockRunning
CoTaskMemFree
CreateStreamOnHGlobal
OleGetClipboard
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop

oleaut32

VariantInit
SysAllocStringLen
SysStringLen
VariantChangeType
VarBstrFromDate
SysAllocString
VariantClear
SysFreeString
OleLoadPicture
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
InternetSetOptionA
HttpAddRequestHeadersA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetReadFile
HttpSendRequestA

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92edb8104ec31e0e4dbb552dee03f747

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

oleacc

wininet

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 323KB - Virtual size: 323KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 113KB - Virtual size: 112KB

.reloc Size: 193KB - Virtual size: 192KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 323KB - Virtual size: 323KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 113KB - Virtual size: 112KB

.reloc
Size: 193KB - Virtual size: 192KB