2024-02-29_cf5ae664076e187d3d8f4f510bc6236c_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-29_cf5ae664076e187d3d8f4f510bc6236c_mafia
Size

1.2MB
MD5

cf5ae664076e187d3d8f4f510bc6236c
SHA1

4ad030f4ad211404b8c246526af71338e11874f8
SHA256

b834b0c41d06dead8c9ba21713554622859f328d2e9509548ff0f29990712b36
SHA512

607f62bb2e8ecfc4f856947f6854cc3bdf9b7f203f8b7b2a0968daa2b5711e398411b1b4c6814fa3159f01b42694e21104cba9fbd2f092e426e580aa9d708764
SSDEEP

24576:N9AxQm5FRBr00p/0Yxql0Et/ad6vhJIZ8iV:N9Ax7/hxet/admhJIZ8iV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-29_cf5ae664076e187d3d8f4f510bc6236c_mafia

Files

2024-02-29_cf5ae664076e187d3d8f4f510bc6236c_mafia
.exe windows:5 windows x86 arch:x86

b4beeeff71e6dd3cbfd84b6c0fad7df9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\User\開発\ソースコード（聞々ハヤえもん）\00\Release\Hayaemon.pdb

Imports

comctl32

CreateToolbarEx
ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon
ord16

winmm

timeGetTime
PlaySoundW

wsock32

socket
gethostbyname
send
recv
WSACleanup
htons
WSAStartup
connect

wininet

InternetOpenUrlW
HttpQueryInfoW
InternetOpenW

bass

BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelGetLength
BASS_ChannelRemoveSync
BASS_Init
BASS_ChannelRemoveDSP
BASS_ChannelPlay
BASS_ChannelPause
BASS_FXSetParameters
BASS_ChannelSetFX
BASS_PluginLoad
BASS_ChannelGetLevel
BASS_PluginFree
BASS_FXGetParameters
BASS_ChannelGetInfo
BASS_ChannelSetDSP
BASS_StreamCreateURL
BASS_Free
BASS_Start
BASS_ChannelSetAttribute
BASS_StreamCreateFile
BASS_ChannelSetSync
BASS_ChannelRemoveFX
BASS_StreamCreate
BASS_StreamFree
BASS_ChannelSeconds2Bytes
BASS_Pause
BASS_ChannelGetAttribute
BASS_ChannelBytes2Seconds
BASS_ChannelSetPosition
BASS_ChannelStop
BASS_ChannelGetData

bass_ape

BASS_APE_StreamCreateFile

basscd

BASS_CD_StreamCreateFile

bassflac

BASS_FLAC_StreamCreateFile

bass_fx

BASS_FX_TempoCreate
BASS_FX_ReverseCreate
BASS_FX_TempoGetSource

bassenc

BASS_Encode_Start
BASS_Encode_Stop

shlwapi

PathIsDirectoryW
PathFileExistsW
PathRelativePathToW
PathRemoveFileSpecW
PathIsURLW

bass_aac

BASS_MP4_StreamCreateFile
BASS_AAC_StreamCreateFile

tags

TAGS_Read

bass_dshow

xVideo_ChannelSetWindow
xVideo_ChannelResizeWindow
xVideo_StreamCreateFile
xVideo_ChannelGetInfo
xVideo_SetConfig
xVideo_Init
xVideo_Register
xVideo_StreamFree

bass_alac

BASS_ALAC_StreamCreateFile

bassasio

BASS_ASIO_ChannelEnable
BASS_ASIO_Free
BASS_ASIO_Stop
BASS_ASIO_IsStarted
BASS_ASIO_SetRate
BASS_ASIO_ChannelSetRate
BASS_ASIO_ChannelJoin
BASS_ASIO_Init
BASS_ASIO_Start
BASS_ASIO_ChannelSetFormat

basswasapi

BASS_WASAPI_GetInfo
BASS_WASAPI_Init
BASS_WASAPI_Free
BASS_WASAPI_Start
BASS_WASAPI_Stop
BASS_WASAPI_IsStarted

bassmix

BASS_Mixer_StreamCreate
BASS_Mixer_StreamAddChannel

npnez

NSFSDK_SetNosefartFilter
NSFSDK_Load
NSFSDK_GetChannel
NSFSDK_SetSongNo
NSFSDK_Terminate
NSFSDK_GetFileInfo
NSFSDK_Reset
NSFSDK_SetFrequency
NSFSDK_GetSongMax
NSFSDK_Render
NSFSDK_SetChannel

kernel32

TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleW
FindFirstFileW
FindClose
lstrcatW
GetTickCount
FileTimeToSystemTime
GetCurrentDirectoryW
SetCurrentDirectoryW
lstrcmpiW
FindNextFileW
FileTimeToLocalFileTime
lstrcpyW
lstrcmpW
GetFileSize
CreateFileW
lstrlenW
CloseHandle
GetFileAttributesW
SetPriorityClass
HeapAlloc
GetCurrentProcess
HeapFree
GlobalLock
OutputDebugStringW
GetProcessHeap
GetPrivateProfileStringW
GlobalAlloc
WideCharToMultiByte
Sleep
WritePrivateProfileSectionW
ReadFile
ExitThread
MultiByteToWideChar
SetThreadPriority
WritePrivateProfileStringW
GlobalUnlock
GetPrivateProfileIntW
GlobalFree
GetPrivateProfileStringA
GetLocalTime
GetExitCodeThread
DeleteFileW
GetPrivateProfileSectionW
FreeLibrary
LoadLibraryW
GetProcAddress
WritePrivateProfileStringA
CreateMutexW
GetModuleFileNameW
GetLastError
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineW
ExitProcess
CreateThread
ResumeThread
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetEndOfFile
InterlockedDecrement
InterlockedIncrement
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringW
HeapSize
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
HeapReAlloc
SetStdHandle
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
TlsAlloc

user32

GetMenuItemCount
GetSysColor
GetMenuState
EmptyClipboard
EnableMenuItem
PeekMessageW
GetWindowPlacement
TranslateMessage
DeleteMenu
IsZoomed
FillRect
GetMessageW
CloseClipboard
SetWindowPlacement
ValidateRect
MapWindowPoints
BeginPaint
EndPaint
GetWindowTextA
IsCharAlphaNumericW
FindWindowW
IsCharAlphaW
MessageBeep
LoadImageW
IsIconic
ShowWindowAsync
TranslateAcceleratorW
UnregisterHotKey
GetCursorPos
GetFocus
MessageBoxW
DestroyWindow
GetWindowTextLengthW
SetTimer
PostQuitMessage
KillTimer
GetClientRect
InvalidateRect
GetWindowTextW
SetClassLongW
SetWindowPos
IsWindow
SetMenu
UpdateWindow
AdjustWindowRect
SetWindowTextW
GetSystemMenu
PostMessageW
SetForegroundWindow
SetFocus
RemoveMenu
EnableWindow
RemovePropW
LoadCursorW
SetParent
SetPropW
RegisterClassExW
LoadIconW
GetPropW
CallWindowProcW
DefWindowProcW
CharNextW
CreateMenu
AppendMenuW
OpenClipboard
SetClipboardData
RegisterHotKey
CheckMenuItem
DispatchMessageW
GetDesktopWindow
SetCursor
SetCapture
wsprintfW
GetCapture
CreatePopupMenu
InsertMenuW
SendMessageW
GetKeyState
ScreenToClient
GetWindowRect
GetParent
GetDC
GetWindowLongW
SystemParametersInfoW
ReleaseDC
SetWindowLongW
CreateWindowExW
CopyAcceleratorTableW
DestroyAcceleratorTable
MapVirtualKeyW
CreateAcceleratorTableW
GetKeyboardLayout
MapVirtualKeyExW
GetKeyNameTextW
ReleaseCapture
IsWindowVisible
GetDoubleClickTime
GetSystemMetrics
ShowWindow
TrackPopupMenu
DestroyMenu

gdi32

CreateCompatibleBitmap
GetStockObject
MoveToEx
LineTo
BeginPath
BitBlt
SetTextColor
StretchBlt
SetBrushOrgEx
SetBkMode
CreateCompatibleDC
Rectangle
EndPath
SetStretchBltMode
CreatePen
TextOutW
CreateSolidBrush
StrokeAndFillPath
CreateFontIndirectW
DeleteObject
CreateFontW
GetObjectW
GetTextExtentPoint32W
GetTextMetricsW
DeleteDC
CreateDIBSection
SelectObject

comdlg32

GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

ShellExecuteW
SHGetFileInfoW
SHBrowseForFolderW
Shell_NotifyIconW
SHGetMalloc
ShellExecuteA
ShellExecuteExW
DragQueryFileW
SHGetPathFromIDListW

Sections

.text
Size: 910KB - Virtual size: 909KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4beeeff71e6dd3cbfd84b6c0fad7df9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

winmm

wsock32

wininet

bass

bass_ape

basscd

bassflac

bass_fx

bassenc

shlwapi

bass_aac

tags

bass_dshow

bass_alac

bassasio

basswasapi

bassmix

npnez

kernel32

user32

gdi32

comdlg32

advapi32

shell32

Sections

.text Size: 910KB - Virtual size: 909KB

.rdata Size: 178KB - Virtual size: 178KB

.data Size: 22KB - Virtual size: 29KB

.rsrc Size: 65KB - Virtual size: 64KB

.reloc Size: 72KB - Virtual size: 72KB

.text
Size: 910KB - Virtual size: 909KB

.rdata
Size: 178KB - Virtual size: 178KB

.data
Size: 22KB - Virtual size: 29KB

.rsrc
Size: 65KB - Virtual size: 64KB

.reloc
Size: 72KB - Virtual size: 72KB