2024-03-09_b1737e08f334c535ceec03279a5ba94a_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-09_b1737e08f334c535ceec03279a5ba94a_mafia
Size

6.2MB
MD5

b1737e08f334c535ceec03279a5ba94a
SHA1

d111ace8cb2fb63b334ad19a1fb9150428e1e7bc
SHA256

3fec29c9b9a41e264c534dc5ca81093f66412c325b9048be713624887796c413
SHA512

98274ae802b8315b29498a6139952864d3695d195fc8cb67738b436c9cc01f9e4a3faa13465dc9a825f91f96da482326f85af91deb3d9b207d20b61441c47864
SSDEEP

196608:oDXbNtDd/MmCp3XHCPXBs72S3CKCXCv2a/A:oDXht5/MmCpHiPXOR39Uk20

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-09_b1737e08f334c535ceec03279a5ba94a_mafia

Files

2024-03-09_b1737e08f334c535ceec03279a5ba94a_mafia
.exe windows:5 windows x86 arch:x86

88ba4820f2d988b7dd9d9a4e95060122

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kkowalczyk\src\sumatrapdf30\obj-rel\SumatraPDF.pdb

Imports

advapi32

RegCloseKey
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity
RegOpenKeyExW
RegEnumKeyW

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
HeapFree
GetVersionExW
HeapDestroy
HeapCreate
TerminateProcess
GetEnvironmentVariableA
GlobalMemoryStatusEx
Module32FirstW
GetSystemInfo
CreateToolhelp32Snapshot
GetCurrentThreadId
OutputDebugStringA
Module32NextW
GetLogicalDrives
GetUserDefaultUILanguage
AllocConsole
CreateProcessW
VerSetConditionMask
SetConsoleScreenBufferSize
FormatMessageA
LoadLibraryW
GetModuleFileNameW
VerifyVersionInfoW
GetStdHandle
GetConsoleScreenBufferInfo
lstrcpyW
GetTempFileNameW
GetDriveTypeW
CreateDirectoryW
WriteFile
GetVolumePathNameW
ReadFile
CreateFileW
WritePrivateProfileStringW
GetTempPathW
GetPrivateProfileIntW
GetFileSizeEx
GetLongPathNameW
GetFileTime
GetFileAttributesExW
GetShortPathNameW
DeleteFileW
GetFileInformationByHandle
RaiseException
CompareFileTime
ReadDirectoryChangesW
WaitForMultipleObjectsEx
QueueUserAPC
CancelIo
WideCharToMultiByte
MultiByteToWideChar
GetThreadContext
VirtualQuery
GetCurrentThread
Thread32First
Thread32Next
OpenThread
GetModuleHandleA
SuspendThread
ResumeThread
GetEnvironmentVariableW
GetExitCodeProcess
TryEnterCriticalSection
GetACP
SetFilePointer
lstrcpynW
CompareStringW
WriteConsoleW
GetTimeZoneInformation
CreateProcessA
GetProcessHeap
SetEndOfFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetCurrentDirectoryW
CreateFileA
PeekNamedPipe
LCMapStringW
SetHandleCount
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetFileType
InitializeCriticalSectionAndSpinCount
SetStdHandle
FindFirstFileExW
SetConsoleCtrlHandler
GetStartupInfoW
HeapSetInformation
GetCommandLineA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
DuplicateHandle
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
MoveFileA
DecodePointer
EncodePointer
GetFullPathNameW
ExitProcess
GetCommandLineW
MapViewOfFile
UnmapViewOfFile
SetErrorMode
MoveFileExW
QueryPerformanceCounter
GetModuleHandleW
GetSystemTimeAsFileTime
Sleep
FileTimeToDosDateTime
CopyFileW
FormatMessageW
GetFileAttributesW
MulDiv
GetLastError
CreateFileMappingW
QueryPerformanceFrequency
CloseHandle
GetCurrentProcessId
LocalFree
SetFileAttributesW
EnterCriticalSection
CreateEventA
InitializeCriticalSection
InterlockedExchange
WaitForSingleObject
LeaveCriticalSection
ResetEvent
SetEvent
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
GetModuleFileNameA
GetTickCount
GetFullPathNameA
GetFileAttributesA
FindClose
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
DeleteCriticalSection
CreateThread
GetSystemDirectoryW
GetWindowsDirectoryW
GlobalDeleteAtom
GlobalAddAtomW
FindFirstFileW
FindNextFileW
GetProcAddress
GetDateFormatW
GetLocaleInfoW
GetTimeFormatW
CreateEventW
SystemTimeToFileTime
SetThreadExecutionState
GetSystemTime
FindResourceW
LoadResource
SizeofResource
LockResource
HeapReAlloc
GetLocaleInfoA
HeapAlloc

user32

IsDlgButtonChecked
CheckRadioButton
SetDlgItemTextW
EnableWindow
GetWindow
IsCharAlphaNumericW
GetUpdateRect
ValidateRect
CloseClipboard
EmptyClipboard
OpenClipboard
GetSystemMenu
GetWindowDC
TrackMouseEvent
InvalidateRgn
DrawEdge
GetMenuItemInfoW
OffsetRect
ReleaseDC
GetMenuItemCount
SetMenuDefaultItem
DrawFrameControl
RedrawWindow
GetMessagePos
GetWindowTextLengthW
ShowWindowAsync
ReuseDDElParam
SetForegroundWindow
MessageBeep
IsWindowUnicode
UnpackDDElParam
HideCaret
LoadImageW
ShowCaret
SetClassLongW
CallWindowProcW
PostMessageW
SetActiveWindow
DrawTextW
CopyImage
TrackPopupMenu
GetMenuItemID
CreateMenu
ModifyMenuW
GetMenu
CheckMenuRadioItem
AppendMenuW
EnableMenuItem
CreatePopupMenu
GetPropW
SetLayeredWindowAttributes
ClientToScreen
DdeInitializeW
EnumDisplayMonitors
DdeCreateStringHandleW
GetWindowInfo
DdeFreeStringHandle
CheckDlgButton
RemoveMenu
DispatchMessageW
MoveWindow
GetWindowThreadProcessId
DefWindowProcW
GetScrollPos
SetScrollInfo
EndDeferWindowPos
DestroyMenu
UpdateWindow
SendMessageW
AllowSetForegroundWindow
IsWindowVisible
GetSystemMetrics
BeginDeferWindowPos
ReleaseCapture
MessageBoxW
DeferWindowPos
GetCursor
CreateWindowExW
ShowScrollBar
FindWindowExW
IsWindow
LoadBitmapW
SetMenu
ShowWindow
SetWindowPos
GetSysColor
SetWindowLongW
SystemParametersInfoW
GetAncestor
GetWindowLongW
InvalidateRect
GetScrollInfo
LoadIconW
RegisterClassExW
GetForegroundWindow
LoadAcceleratorsW
TranslateMessage
GetCapture
CharLowerW
IsCharUpperW
BeginPaint
SetFocus
GetClientRect
FindWindowW
SetParent
LoadCursorW
GetParent
GetFocus
GetKeyState
IsZoomed
KillTimer
SetCapture
FillRect
IsIconic
PostQuitMessage
GetMessageW
SendDlgItemMessageW
EndDialog
GetDlgItem
DialogBoxParamW
DialogBoxIndirectParamW
wsprintfA
GetDC
MonitorFromRect
DdeFreeDataHandle
RemovePropW
DdeUninitialize
MonitorFromWindow
GetDesktopWindow
GetCursorPos
AdjustWindowRectEx
DdeClientTransaction
DdeConnect
SetClipboardData
SetMenuItemInfoW
DdeDisconnect
SetPropW
GetWindowRect
ScreenToClient
SetTimer
MapVirtualKeyW
TranslateAcceleratorW
SetCursor
DestroyWindow
EndPaint
CheckMenuItem
MapWindowPoints
InsertMenuW
GetMonitorInfoW

gdi32

PatBlt
SetBrushOrgEx
CreateBitmap
CreatePatternBrush
SetROP2
ExtTextOutW
MoveToEx
SetGraphicsMode
LineTo
CreateDIBSection
GetDIBits
SetDIBColorTable
CreateCompatibleBitmap
SetDIBits
GetDIBColorTable
GetObjectW
CreateFontIndirectW
SetBkColor
SetWorldTransform
IntersectClipRect
GetObjectA
BitBlt
SetViewportOrgEx
ExcludeClipRect
CreateRectRgn
GetClipBox
ExtSelectClipRgn
SetLayout
GetTextExtentPoint32W
SetBkMode
SelectClipRgn
CreateRoundRectRgn
RoundRect
TextOutW
EndPage
StartPage
GetDeviceCaps
CreateDCW
SetMapMode
SetStretchBltMode
StartDocW
EndDoc
AbortDoc
SetTextColor
DeleteDC
StretchBlt
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
CreatePen
GetStockObject
CreateSolidBrush

comdlg32

CommDlgExtendedError
PrintDlgExW
GetSaveFileNameW
GetOpenFileNameW

shell32

SHBindToParent
SHGetFolderPathW
ShellExecuteExW
SHGetDesktopFolder
DragFinish
DragQueryFileW
DragAcceptFiles
SHGetFileInfoW
SHAddToRecentDocs
SHChangeNotify

gdiplus

GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipCreateBitmapFromGraphics
GdipDrawRectangleI
GdipAddPathLine
GdipGetImageHorizontalResolution
GdipDrawImageRectRect
GdipDrawRectangle
GdipDrawLine
GdipGetFamilyName
GdipSetPenDashArray
GdipSetWorldTransform
GdipGetFamily
GdipTransformMatrixPoints
GdipInvertMatrix
GdipSetPenDashOffset
GdipSetImageAttributesWrapMode
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipGetFontCollectionFamilyList
GdipSetImageAttributesColorMatrix
GdipGetEmHeight
GdipAddPathPath
GdipFillPolygon
GdipPrivateAddFontFile
GdipSetClipRect
GdipDrawImagePointsRect
GdipSetPageScale
GdipGetDpiY
GdipGetFontCollectionFamilyCount
GdipGetMatrixElements
GdipTransformRegion
GdipGraphicsClear
GdipCreateRegionRectI
GdipSetPenLineCap197819
GdipDeleteFontFamily
GdipIsStyleAvailable
GdipSaveGraphics
GdipCreateMatrix2
GdipSetImagePalette
GdipNewPrivateFontCollection
GdipGetWorldTransform
GdipDeletePrivateFontCollection
GdipSetPenTransform
GdipGetCellAscent
GdipGetLogFontW
GdipCloneFontFamily
GdipSetPixelOffsetMode
GdipSetPenLineJoin
GdipGetClipBounds
GdiplusShutdown
GdiplusStartup
GdipFree
GdipGetImageHeight
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipSaveImageToFile
GdipCloneImage
GdipGetImageWidth
GdipRotateMatrix
GdipSetStringFormatMeasurableCharacterRanges
GdipGetImageEncodersSize
GdipTranslateMatrix
GdipBitmapUnlockBits
GdipGetRegionBounds
GdipBitmapSetResolution
GdipCreateBitmapFromStream
GdipMeasureString
GdipGetStringFormatFlags
GdipScaleMatrix
GdipCloneBitmapAreaI
GdipFillEllipseI
GdipCreateLineBrushFromRect
GdipDeleteMatrix
GdipFillRectangle
GdipClonePath
GdipTransformPath
GdipGetPathWorldBoundsI
GdipSetPenMiterLimit
GdipSetPenMode
GdipCreateMatrix
GdipCreateStringFormat
GdipMeasureCharacterRanges
GdipDrawImageI
GdipCreateBitmapFromGdiDib
GdipSetPropertyItem
GdipReleaseDC
GdipWidenPath
GdipGetDC
GdipDeleteBrush
GdipDeletePen
GdipCreateRegion
GdipSetClipRectI
GdipGetClip
GdipSetClipRegion
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDrawImageRectRectI
GdipCreateFontFromDC
GdipCreateFromHWND
GdipDeleteStringFormat
GdipSetStringFormatTrimming
GdipGetPathData
GdipSetCompositingQuality
GdipSetSolidFillColor
GdipTranslateWorldTransform
GdipSetCompositingMode
GdipCloneStringFormat
GdipBitmapLockBits
GdipStringFormatGetGenericTypographic
GdipRestoreGraphics
GdipGetImageEncoders
GdipDrawString
GdipTransformPointsI
GdipDeleteRegion
GdipSetPageUnit
GdipResetWorldTransform
GdipCreateRegionPath
GdipSetPenWidth
GdipSetPenColor
GdipDeletePathIter
GdipPathIterNextMarkerPath
GdipAddPathArcI
GdipCreatePen2
GdipCreatePathIter
GdipAddPathLineI
GdipClosePathFigure
GdipSetSmoothingMode
GdipAddPathEllipseI
GdipDeleteFont
GdipSetTextRenderingHint
GdipSetPathMarker
GdipIsVisiblePathPointI
GdipStartPathFigure
GdipSetStringFormatLineAlign
GdipStringFormatGetGenericDefault
GdipCreatePath2
GdipGetRegionHRgn
GdipPathIterRewind
GdipCreateFontFromLogfontA
GdipIsVisibleRectI
GdipGetPointCount
GdipSetStringFormatFlags
GdipCreatePath
GdipFillPath
GdipDeletePath
GdipDrawPath
GdipWindingModeOutline
GdipAddPathRectangleI
GdipCreatePen1
GdipDrawLineI
GdipFillRectangleI
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteGraphics
GdipCloneBrush
GdipGetFontHeight

ole32

CoCreateInstance
ReleaseStgMedium
CoGetMalloc
CoTaskMemFree
CoInitialize
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemAlloc
OleInitialize

comctl32

ord412
ord410
ord413
InitCommonControlsEx
CreatePropertySheetPageW
ImageList_Create
ImageList_AddMasked
ImageList_GetIconSize
ImageList_Draw
ImageList_Destroy

msimg32

GradientFill

winspool.drv

OpenPrinterW
DocumentPropertiesW
GetPrinterW
ClosePrinter
DeviceCapabilitiesW
ord203

wininet

HttpSendRequestA
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
InternetConnectW
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle

urlmon

CoInternetGetSession

oleaut32

SysAllocString
SafeArrayCreateVector
SafeArrayPutElement
VariantInit
VariantClear
SysFreeString

shlwapi

ord219
PathIsRelativeW
StrStrW
StrRStrIW
StrStrIW
SHGetValueW
SHDeleteKeyW
PathAppendW
SHSetValueW
PathIsNetworkPathW
SHDeleteValueW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 159KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88ba4820f2d988b7dd9d9a4e95060122

Headers

File Characteristics

PDB Paths

Imports

advapi32

kernel32

user32

gdi32

comdlg32

shell32

gdiplus

ole32

comctl32

msimg32

winspool.drv

wininet

urlmon

oleaut32

shlwapi

version

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 3.2MB - Virtual size: 3.2MB

.data Size: 159KB - Virtual size: 216KB

.rsrc Size: 140KB - Virtual size: 139KB

.reloc Size: 138KB - Virtual size: 138KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 3.2MB - Virtual size: 3.2MB

.data
Size: 159KB - Virtual size: 216KB

.rsrc
Size: 140KB - Virtual size: 139KB

.reloc
Size: 138KB - Virtual size: 138KB