2024-02-28_994333366ab3482e0be06f97b9eab6af_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-28_994333366ab3482e0be06f97b9eab6af_mafia
Size

5.9MB
MD5

994333366ab3482e0be06f97b9eab6af
SHA1

6233a012185e032e918d383bd1908c87ec2c1d07
SHA256

3dedeaae3d7ac6b00df130800b330748956b301268693d5b7edc2277a75e14e8
SHA512

a42243b8f6c931123f90c53f19778dcf7cd8d13d136a9c8a4b61ea1b237891d638def8564e90b447477bda4e20d35483bd4a61dd52d690e2a87943f44f5c6738
SSDEEP

98304:qNCabdNgIa9JlMHBsTQF7XD2keCbeihVZQbskxpSDEeFzjDCfmiH6fbcIYLOt+Hm:qCxpSRFzjGcLedN0tT+JyFx2xbyp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-28_994333366ab3482e0be06f97b9eab6af_mafia

Files

2024-02-28_994333366ab3482e0be06f97b9eab6af_mafia
.exe windows:5 windows x86 arch:x86

07b5c51ade1b91f878814407ab190b1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_EndDrag
ImageList_DragLeave
ImageList_DragEnter
ord16
ImageList_DragMove
ImageList_BeginDrag
ImageList_SetDragCursorImage
ord17
ImageList_SetBkColor
ImageList_Draw
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Add

rpcrt4

UuidToStringW
RpcStringFreeW

advapi32

CryptCreateHash
RegDeleteKeyW
RegSetValueExW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
GetUserNameW
RegQueryValueExW
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptAcquireContextA
CryptGetHashParam

setupapi

CM_Get_Device_ID_Size
CM_Get_Parent
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceRegKey
SetupDiDestroyDeviceInfoList
CM_Get_Device_IDW

ws2_32

recvfrom
WSAStartup
WSASetLastError
__WSAFDIsSet
gethostname
ioctlsocket
listen
accept
WSAGetLastError
select
recv
send
WSAIoctl
setsockopt
getsockname
ntohs
bind
htons
getsockopt
getpeername
closesocket
socket
connect
WSACleanup
sendto
getaddrinfo
freeaddrinfo

wldap32

ord200
ord79
ord35
ord32
ord30
ord33
ord50
ord60
ord143
ord211
ord22
ord301
ord27
ord41
ord46
ord26

kernel32

GetComputerNameW
GetProcAddress
GetModuleHandleW
WaitForSingleObject
TerminateProcess
GetModuleFileNameW
GetFileAttributesW
FindClose
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTempPathW
GetFileTime
GetFileSize
GetTempFileNameW
LocalFree
FormatMessageW
GetFileType
GetCurrentProcess
CopyFileW
SetCurrentDirectoryW
InterlockedIncrement
InterlockedDecrement
TlsSetValue
ExitProcess
ResumeThread
TlsGetValue
TlsFree
TlsAlloc
GetACP
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
SetThreadLocale
WaitForMultipleObjects
SetEvent
CreatePipe
PeekNamedPipe
SetNamedPipeHandleState
GetExitCodeProcess
CreateEventW
CreateThread
CreateProcessW
DuplicateHandle
FindNextFileW
GetSystemTimeAsFileTime
OutputDebugStringW
ExpandEnvironmentStringsW
GetCurrentThread
RaiseException
IsBadReadPtr
IsBadStringPtrA
lstrlenA
LoadLibraryA
GetVersionExA
GetTickCount
SleepEx
FormatMessageA
ExpandEnvironmentStringsA
GetStringTypeW
EncodePointer
DecodePointer
SetFilePointer
CreateFileA
IsValidCodePage
GetCPInfo
Sleep
GetCurrentProcessId
GetEnvironmentVariableW
QueryPerformanceFrequency
QueryPerformanceCounter
LocalAlloc
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
DebugBreak
MultiByteToWideChar
WideCharToMultiByte
SetErrorMode
SetConsoleCursorPosition
FillConsoleOutputCharacterW
WriteConsoleW
WriteConsoleA
GetStdHandle
GetConsoleScreenBufferInfo
ReadConsoleOutputCharacterA
FreeConsole
GetVersionExW
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
LoadLibraryW
GlobalLock
GlobalSize
GlobalUnlock
GlobalAlloc
GlobalFree
GetProcessHeap
HeapSize
GetCurrentThreadId
SetLastError
MulDiv
EnumResourceNamesW
InterlockedCompareExchange
SizeofResource
LockResource
LoadResource
FindResourceW
ReadFile
WriteFile
GetLastError
CloseHandle
CreateFileW
DeviceIoControl
GetStartupInfoW
RtlUnwind
HeapReAlloc
GetTimeFormatW
GetDateFormatW
SetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteFileW
MoveFileW
CreateDirectoryW
GetFullPathNameW
ExitThread
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetFileInformationByHandle
GetDriveTypeA
FindFirstFileExA
LCMapStringW
GetTimeFormatA
GetDateFormatA
CompareStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
IsProcessorFeaturePresent
GetOEMCP
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetEnvironmentVariableA
SetEnvironmentVariableW
GetCurrentDirectoryW
GetDriveTypeW
GetFullPathNameA
GetLocaleInfoA
EnumSystemLocalesA
SetEndOfFile
InterlockedExchange

user32

ValidateRgn
ShowCursor
AdjustWindowRectEx
ChangeDisplaySettingsW
EnumDisplaySettingsW
wsprintfW
WaitForInputIdle
KillTimer
SetTimer
DdeFreeStringHandle
DdeUninitialize
DdeQueryStringW
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeGetLastError
DdeInitializeW
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleW
DdeNameService
DdeConnect
DdePostAdvise
GetWindowPlacement
CreateDialogIndirectParamW
FlashWindow
IsIconic
IsZoomed
SetForegroundWindow
BringWindowToTop
DrawFocusRect
OffsetRect
CopyRect
DrawTextW
UnregisterClassW
RegisterClassW
GetClassInfoW
GetDoubleClickTime
PostMessageW
SetMenu
GetDialogBaseUnits
GetClipboardFormatNameW
RegisterClipboardFormatW
DrawEdge
DrawStateW
SetRect
CheckMenuRadioItem
CheckMenuItem
GetSysColorBrush
CreateMenu
AppendMenuW
ModifyMenuW
RemoveMenu
InsertMenuItemW
InsertMenuW
CreatePopupMenu
SetMenuItemInfoW
EnableMenuItem
GetSubMenu
DrawMenuBar
DestroyMenu
GetMenuState
LoadCursorW
GetDlgItem
CreateDialogParamW
LoadImageW
EndPaint
LoadBitmapW
LoadIconW
CreateIconIndirect
GetIconInfo
InflateRect
PtInRect
UnregisterHotKey
RegisterHotKey
SetWindowsHookExW
GetMenuItemCount
GetMenuItemInfoW
SystemParametersInfoW
BeginDeferWindowPos
EndDeferWindowPos
MapWindowPoints
GetUpdateRgn
CreateWindowExW
GetWindowRect
DeferWindowPos
MoveWindow
UpdateWindow
SetCursorPos
ReleaseCapture
SetFocus
DestroyWindow
SetWindowTextW
IsWindow
CallWindowProcW
DefWindowProcW
InvalidateRect
SetCursor
IsDialogMessageW
TrackPopupMenu
GetCapture
CallNextHookEx
UnhookWindowsHookEx
ChildWindowFromPointEx
GetWindow
GetActiveWindow
GetMessageTime
IsWindowEnabled
IsWindowVisible
ClientToScreen
ScreenToClient
RedrawWindow
SetParent
WindowFromPoint
GetParent
ScrollWindow
EnableScrollBar
SetScrollInfo
GetScrollInfo
SetCapture
SetWindowPos
ShowWindow
GetFocus
EnableWindow
SetWindowLongW
GetWindowLongW
GetKeyState
GetSystemMetrics
GetAsyncKeyState
VkKeyScanW
MapVirtualKeyW
GetDC
PeekMessageW
DispatchMessageW
TranslateMessage
PostQuitMessage
IsClipboardFormatAvailable
PostThreadMessageW
ValidateRect
GetMessageW
TranslateAcceleratorW
CreateAcceleratorTableW
DestroyAcceleratorTable
GetWindowTextW
GetClassNameW
DestroyCursor
MessageBeep
SendMessageW
GetCursorPos
GetMessagePos
ReleaseDC
GetClientRect
FillRect
DrawIconEx
DrawFrameControl
BeginPaint
GetWindowDC
MsgWaitForMultipleObjects
MessageBoxW
FindWindowExW
ChildWindowFromPoint
keybd_event
GetWindowTextLengthW
HideCaret
UnionRect
SetWindowRgn
GetDesktopWindow
DestroyIcon
GetSystemMenu
GetSysColor
MessageBoxA

gdi32

GetPixel
SetPixel
PolyBezier
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
SetMapMode
DeleteObject
SelectClipRgn
CreateSolidBrush
GetBkColor
SetStretchBltMode
ExtSelectClipRgn
CreateRectRgn
ExtFloodFill
SetBrushOrgEx
GetCharABCWidthsW
GetTextExtentPoint32W
GetTextExtentExPointW
CreateCompatibleBitmap
BitBlt
Arc
Pie
Polygon
SetPolyFillMode
SelectObject
Rectangle
RoundRect
Ellipse
GetStockObject
MaskBlt
ExtTextOutW
CreateFontIndirectW
StretchDIBits
StretchBlt
GdiFlush
ExcludeClipRect
CreateBitmap
CreatePatternBrush
CreateHatchBrush
GetOutlineTextMetricsW
CreatePen
OffsetRgn
ExtCreateRegion
GetRegionData
DeleteDC
CreateCompatibleDC
SetViewportOrgEx
GetTextMetricsW
SetROP2
SelectPalette
SaveDC
RestoreDC
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
ExtCreatePen
LineTo
MoveToEx
GetRgnBox
EqualRgn
PtInRegion
RectInRegion
CombineRgn
CreateRectRgnIndirect
CreateDIBSection
GetDIBits
CreateDIBitmap
GetDIBColorTable
SetTextAlign
CreateICW
SetAbortProc
StartDocW
EndDoc
StartPage
EndPage
CreateDCW
EnumFontFamiliesExW
GetEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileHeader
CreateEnhMetaFileW
PlayEnhMetaFile
CloseEnhMetaFile
GetSystemPaletteEntries
RealizePalette
Polyline
GetDeviceCaps
GetClipBox
GetObjectW
SetBkMode
SetTextColor
PolyPolygon
SetBkColor

winspool.drv

OpenPrinterW
ClosePrinter
EnumPrintersW
DocumentPropertiesW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseColorW
PrintDlgW
PageSetupDlgW
ChooseFontW
CommDlgExtendedError

shell32

SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExW
ExtractIconExW
ExtractIconW
DragQueryFileW
DragQueryPoint
DragFinish
DragAcceptFiles
SHGetSpecialFolderLocation

ole32

OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoLockObjectExternal
RegisterDragDrop
OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemAlloc
RevokeDragDrop
ReleaseStgMedium

wsock32

ntohl
shutdown
gethostbyname
gethostbyaddr
getservbyname
htonl
ioctlsocket

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 425KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07b5c51ade1b91f878814407ab190b1d

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

rpcrt4

advapi32

setupapi

ws2_32

wldap32

kernel32

user32

gdi32

winspool.drv

comdlg32

shell32

ole32

wsock32

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 84KB - Virtual size: 295KB

.tls Size: 512B - Virtual size: 13B

.rsrc Size: 193KB - Virtual size: 192KB

.reloc Size: 425KB - Virtual size: 425KB

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 84KB - Virtual size: 295KB

.tls
Size: 512B - Virtual size: 13B

.rsrc
Size: 193KB - Virtual size: 192KB

.reloc
Size: 425KB - Virtual size: 425KB