2024-03-06_c42d77a86a0249449a7d5d0a893e3de0_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-06_c42d77a86a0249449a7d5d0a893e3de0_mafia
Size

10.0MB
MD5

c42d77a86a0249449a7d5d0a893e3de0
SHA1

ebcc8f9e998d9d54d91c51aa553edd1c7137f43d
SHA256

becf89dd0d592322d43b046fb46c29ad552e2edea2ac3d78b67828e3a5b7e024
SHA512

cde9404f48247746d9cb709e50e8e58d402eab7e9d1b8544afb3001dc756301d8054a9d064e93035dfae9af4d2e0b823f5291d815a0f267bbe757c7facecd38e
SSDEEP

196608:NAGZZOeQrZSbsIdGHOZ5x4XgJAskR+pnpG9yuyKNmYxUGjQJsv6tWKFdu9CoME:NA+Or8rZ5x4WAHR+pMyuyKNmYxUGjQJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-06_c42d77a86a0249449a7d5d0a893e3de0_mafia

Files

2024-03-06_c42d77a86a0249449a7d5d0a893e3de0_mafia
.exe windows:5 windows x86 arch:x86

58f0ac4da57dc7e9092bdf98fd8530c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glCopyTexSubImage2D
glTexCoord2f
glTexCoord4f
glVertex2d
glLoadMatrixd
glDrawElements
glLoadMatrixf
glColorMask
glDepthMask
glStencilOp
glStencilFunc
glStencilMask
glTexImage1D
glTexGenfv
glTexGeni
glCullFace
glPixelTransferi
glTexEnvf
glClearStencil
wglSwapLayerBuffers
wglRealizeLayerPalette
wglDeleteContext
wglCreateContext
wglGetCurrentDC
wglGetCurrentContext
wglMakeCurrent
wglCreateLayerContext
wglShareLists
wglGetProcAddress
wglDescribeLayerPlane
glDeleteTextures
glTexParameteri
glOrtho
glScissor
glGenTextures
glTexParameterf
glGetBooleanv
glTexSubImage2D
glGetError
glGetString
glDrawBuffer
glBindTexture
glPopAttrib
glPopClientAttrib
glPushClientAttrib
glPushAttrib
glVertexPointer
glTexCoordPointer
glEnableClientState
glDrawArrays
glDisableClientState
glTexImage2D
glGetTexLevelParameteriv
glLineStipple
glMap2f
glMapGrid2f
glEvalMesh2
glFogi
glFogfv
glFogf
glHint
glViewport
glPixelStorei
glLightModeli
glBlendFunc
glClearDepth
glLightModelfv
glLightfv
glFrontFace
glDepthFunc
glColor4f
glVertex2f
glGetDoublev
glGetFloatv
glClearColor
glGetIntegerv
glClear
glFlush
glReadPixels
glMateriali
glPolygonOffset
glRotatef
glPushMatrix
glScalef
glTranslatef
glPopMatrix
glPolygonMode
glShadeModel
glLineWidth
glNewList
glDisable
glColor3f
glPointSize
glEnable
glEndList
glGenLists
glMaterialfv
glVertex3dv
glCallList
glDeleteLists
glBegin
glNormal3f
glVertex3f
glEnd
glMatrixMode
glLoadIdentity

glu32

gluUnProject
gluProject
gluErrorString
gluLookAt
gluPerspective
gluTessEndPolygon
gluTessEndContour
gluTessVertex
gluTessBeginContour
gluTessBeginPolygon
gluTessCallback
gluTessProperty
gluNewTess
gluOrtho2D
gluDeleteTess

glut32

glutWireCube

kernel32

GetOEMCP
IsValidCodePage
FlushFileBuffers
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
SetEnvironmentVariableW
SetEnvironmentVariableA
GetStringTypeW
GetLocaleInfoA
EnumSystemLocalesA
GetProcessHeap
GetEnvironmentVariableA
FormatMessageA
GetProcAddress
GetModuleHandleW
GetStartupInfoW
GetVolumeInformationW
SetErrorMode
GetLastError
GetLocaleInfoW
InterlockedDecrement
LoadLibraryA
GlobalLock
GlobalAlloc
GetUserDefaultLangID
GetLongPathNameW
IsValidLocale
IsValidLanguageGroup
lstrcmpW
GlobalSize
ExpandEnvironmentStringsW
CloseHandle
CreateProcessW
GlobalFree
ExitProcess
lstrlenA
GetDriveTypeW
ReadFile
WriteFile
SetFilePointer
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
CreateFileA
WideCharToMultiByte
CreateFileW
CompareStringW
GetUserDefaultLCID
GetCurrentProcessId
GetCommandLineW
LocalFree
FormatMessageW
GetVersionExW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
OutputDebugStringW
TlsFree
GetCurrentThreadId
GetSystemInfo
SwitchToThread
Sleep
GetCurrentThread
TlsAlloc
TerminateThread
WaitForSingleObject
SetThreadPriority
TlsSetValue
ResumeThread
GetThreadPriority
WaitForMultipleObjects
SetEvent
CreateEventW
DuplicateHandle
GetCurrentProcess
TlsGetValue
GetSystemDirectoryW
LoadLibraryW
MultiByteToWideChar
ReleaseSemaphore
CreateSemaphoreW
GetLocalTime
QueryPerformanceFrequency
GetTickCount
QueryPerformanceCounter
GetFileType
SetFilePointerEx
SetEndOfFile
GetLogicalDrives
ResetEvent
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FindClose
FindFirstFileW
GetFileInformationByHandle
CreateDirectoryW
RemoveDirectoryW
GetFileAttributesW
CopyFileW
MoveFileW
DeleteFileW
DeviceIoControl
GetFullPathNameW
GetTempPathW
GetCurrentDirectoryW
GetFileAttributesExW
GetDateFormatW
GetTimeFormatW
GetCurrencyFormatW
GetUserDefaultUILanguage
FindNextFileW
FindFirstFileExW
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetLastError
InterlockedIncrement
IsProcessorFeaturePresent
SetFileAttributesW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleMode
GetThreadLocale
GetConsoleCP
GetTimeZoneInformation
CreateThread
ExitThread
GetStdHandle
WriteConsoleW
HeapReAlloc
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
InterlockedExchange
SetHandleCount
GetCPInfo
GetACP
SetThreadAffinityMask
GetProcessAffinityMask
GlobalUnlock

user32

RegisterClassW
GetQueueStatus
KillTimer
SetTimer
CharNextExA
GetClipboardFormatNameW
DispatchMessageW
SetClipboardViewer
ChangeClipboardChain
GetMenu
GetKeyboardState
SetMenuItemInfoW
TrackPopupMenuEx
MapVirtualKeyW
MsgWaitForMultipleObjectsEx
LoadIconW
ToAscii
ToUnicode
GetKeyboardLayout
DestroyCaret
SetCaretPos
CreateCaret
HideCaret
TranslateMessage
GetKeyboardLayoutList
RegisterWindowMessageW
GetAsyncKeyState
RegisterClipboardFormatW
CreateCursor
SetCursorPos
DestroyCursor
GetIconInfo
DrawIconEx
CreateIconIndirect
GetClassInfoW
LoadImageW
GetSysColorBrush
RegisterClassExW
GetCursorPos
DefWindowProcW
GetWindowRgn
UnregisterClassW
ClipCursor
GetUpdateRect
InvalidateRgn
BeginPaint
EndPaint
GetSysColor
WindowFromPoint
GetParent
GetDoubleClickTime
SetDoubleClickTime
SetCaretBlinkTime
PeekMessageW
PostMessageW
GetKeyState
GetCaretBlinkTime
FlashWindowEx
MessageBeep
SystemParametersInfoW
GetDesktopWindow
GetSystemMenu
EnableMenuItem
SetParent
ValidateRgn
GetClientRect
GetWindowPlacement
SetWindowPlacement
GetWindowRect
IsWindowVisible
IsIconic
IsZoomed
MoveWindow
InvalidateRect
ShowWindow
ScreenToClient
ClientToScreen
SetWindowRgn
SetCursor
SetWindowsHookExW
SetCapture
GetSystemMetrics
SendMessageW
SetWindowTextW
AdjustWindowRectEx
ScrollWindowEx
UpdateWindow
SetWindowPos
ReleaseCapture
UnhookWindowsHookEx
DestroyIcon
CallNextHookEx
GetWindowLongW
SetWindowLongW
GetActiveWindow
GetFocus
SetFocus
IsChild
DestroyWindow
CreateWindowExW
GetDC
ReleaseDC
SetForegroundWindow

gdi32

GetTextFaceW
GetFontData
GetCharABCWidthsW
GetCharABCWidthsI
GetCharABCWidthsFloatW
GetTextExtentPoint32W
CreateFontIndirectW
GetTextMetricsW
SetGraphicsMode
SetWorldTransform
GetGlyphOutlineW
SetTextColor
SetBkMode
SetTextAlign
ExtTextOutW
GetOutlineTextMetricsW
CreateEllipticRgn
CreateRectRgn
GetRegionData
CreateCompatibleBitmap
BitBlt
CreateBitmap
GetDIBits
PtInRegion
GetObjectW
GetPaletteEntries
EnumFontFamiliesExW
CombineRgn
OffsetRgn
CreateDIBSection
CreatePalette
SwapBuffers
ChoosePixelFormat
SetPixelFormat
CreateCompatibleDC
SelectObject
DeleteDC
GetStockObject
DeleteObject
SelectPalette
RealizePalette
SetPaletteEntries
DescribePixelFormat
GdiFlush
SelectClipRgn
GetDeviceCaps

shell32

ShellExecuteW
SHGetFileInfoW

ole32

CoUninitialize
CoInitialize
CoGetMalloc
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
StringFromGUID2
CoCreateGuid
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleInitialize
OleUninitialize
ReleaseStgMedium
DoDragDrop
CoTaskMemFree
CoCreateInstance
OleGetClipboard

oleaut32

SysAllocString
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegDeleteKeyW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
GetTokenInformation
OpenProcessToken
RegCreateKeyExW
RegFlushKey
RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegDeleteValueW

imm32

ImmAssociateContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmSetCompositionFontW
ImmGetCompositionStringW
ImmNotifyIME
ImmGetDefaultIMEWnd
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

ws2_32

WSAAsyncSelect

libiomp5md

ord710
ord125
ord130
ord146
ord114
ord118
ord116
ord127
ord703
ord106
ord135
ord136
ord706
ord126
ord150
ord138
ord148
ord151
ord707
ord141
ord113
ord123
ord145

Sections

.text
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58f0ac4da57dc7e9092bdf98fd8530c3

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

glu32

glut32

kernel32

user32

gdi32

shell32

ole32

oleaut32

comdlg32

advapi32

imm32

winmm

ws2_32

libiomp5md

Sections

.text Size: 7.5MB - Virtual size: 7.5MB

.rdata Size: 2.1MB - Virtual size: 2.1MB

.data Size: 80KB - Virtual size: 139KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 294KB - Virtual size: 293KB

.text
Size: 7.5MB - Virtual size: 7.5MB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 80KB - Virtual size: 139KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 294KB - Virtual size: 293KB