F:\我的C++程序\ServerStatus\Release\ServerStatus.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_001653ef7d48fb2d5aba81e0ec168520_mafia_wapomi.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_001653ef7d48fb2d5aba81e0ec168520_mafia_wapomi.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-09_001653ef7d48fb2d5aba81e0ec168520_mafia_wapomi
-
Size
313KB
-
MD5
001653ef7d48fb2d5aba81e0ec168520
-
SHA1
85e85d4e1f28792ee49bf3f883f44504d96bbd92
-
SHA256
a719c35bb452264a4253d9445e67a745557e702911bab73d8ca31758dfce3b6d
-
SHA512
f7770f9f0664a81b16f452a2c9979d44c4493ee180712e60f0ea3753376720588fae757d62e9f4ce3a0eb473af56cf9ba0349bad7d092215909f17dbca6a16ac
-
SSDEEP
6144:A5IjRlJ6Fx5TQ/HOzeSnoYZW5zDoWwFdxPkhmaP:AylJ6FxJQmzpoYezD1wFDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-09_001653ef7d48fb2d5aba81e0ec168520_mafia_wapomi
Files
-
2024-03-09_001653ef7d48fb2d5aba81e0ec168520_mafia_wapomi.exe windows:5 windows x86 arch:x86
6e9f59e281565a85268e9844a91a91d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
HeapAlloc
HeapFree
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
ExitThread
CreateThread
HeapQueryInformation
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
GetStringTypeW
IsProcessorFeaturePresent
GetTimeZoneInformation
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
DeleteFileW
FileTimeToSystemTime
lstrlenA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
InterlockedIncrement
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleW
CompareStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
lstrcmpW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
lstrlenW
WideCharToMultiByte
CloseHandle
SetWaitableTimer
CreateWaitableTimerW
GetTickCount
GetModuleFileNameW
FreeLibrary
lstrcpyW
GetProcAddress
GetVersionExW
LoadLibraryW
GetSystemDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
user32
CharUpperW
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuState
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
KillTimer
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
ScreenToClient
GetDlgCtrlID
CallWindowProcW
SetWindowPos
PtInRect
UnhookWindowsHookEx
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
IsWindow
GetWindowLongW
SetWindowLongW
GetMenu
CreateWindowExW
GetSubMenu
GetMenuItemCount
MsgWaitForMultipleObjects
PeekMessageW
DrawIcon
IsIconic
LoadIconW
EnableWindow
LoadCursorW
GetClassInfoW
DefWindowProcW
GetWindow
MapWindowPoints
GetParent
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplayMonitors
SetRectEmpty
CopyRect
GetMonitorInfoW
GetSystemMetrics
GetClientRect
SendMessageW
GetClassNameW
SetTimer
UnregisterClassW
RealChildWindowFromPoint
DestroyMenu
SetForegroundWindow
ShowWindow
SetWindowTextW
IsDialogMessageW
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
PostQuitMessage
InvalidateRect
GetWindowThreadProcessId
IsWindowEnabled
EndPaint
GetDC
GetWindowDC
ReleaseDC
BeginPaint
gdi32
SaveDC
RestoreDC
SetMapMode
GetClipBox
PtVisible
RectVisible
TextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreateBitmap
SetTextColor
SetBkColor
CreateDIBitmap
GetTextMetricsW
CreatePatternBrush
CreatePen
CreateSolidBrush
GetObjectW
GetStockObject
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
ExtTextOutW
GetDeviceCaps
DeleteObject
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
ShellExecuteW
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
ole32
CoTaskMemFree
CoCreateInstance
CoCreateGuid
CoInitialize
CoUninitialize
oleaut32
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysAllocString
winmm
PlaySoundW
ws2_32
recv
send
closesocket
connect
htons
gethostbyname
setsockopt
socket
WSAStartup
WSACleanup
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
����u Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE