Q:\src\maps\wlens.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_8947a9fcb366639814fb6127c1a38666_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_8947a9fcb366639814fb6127c1a38666_mafia.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-03-10_8947a9fcb366639814fb6127c1a38666_mafia
-
Size
3.4MB
-
MD5
8947a9fcb366639814fb6127c1a38666
-
SHA1
518ac8a0a759705b51cfb86ef580fcfa25acdca9
-
SHA256
a6063319bdd8db316396e9a5476e371cfc412346e52bd832db44cf657529c3d2
-
SHA512
17d6b2f7da51f679fe090bbcac4b9acbba2c5628eb7cd00f840d60372046378f20cec4f930e2f6b27ed01e286680d6813cc4f7e091134865310343296c5f8a91
-
SSDEEP
98304:EH+Ja2IvnDYddFfDRZWt8LMhzc9y2NwHxNJZ5nEnY5jqKpgLf4SY6Po962toesSj:EH+oYdpHJ92HxNv5GswPo96Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-10_8947a9fcb366639814fb6127c1a38666_mafia
Files
-
2024-03-10_8947a9fcb366639814fb6127c1a38666_mafia.exe windows:5 windows x86 arch:x86
3e7738eea053d19a91e4c8f5cf49b3a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
sort2000
_s_2mains@36
kernel32
GetStringTypeW
HeapCreate
HeapDestroy
LCMapStringW
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetCurrentDirectoryW
SetConsoleCtrlHandler
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
CompareStringW
SetEnvironmentVariableA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetDriveTypeW
IsValidCodePage
CreateFileW
GetLocalTime
GetProfileStringA
SetConsoleCursorPosition
WriteConsoleOutputA
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
ReadConsoleInputA
SetConsoleActiveScreenBuffer
SetConsoleTextAttribute
SetConsoleMode
SetConsoleWindowInfo
SetConsoleScreenBufferSize
CreateConsoleScreenBuffer
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryA
IsProcessorFeaturePresent
FatalAppExitA
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GlobalMemoryStatus
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
GetStdHandle
HeapSetInformation
ExitProcess
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
HeapAlloc
FindFirstFileExA
GetDriveTypeA
HeapFree
DecodePointer
EncodePointer
RtlUnwind
RaiseException
LocalLock
LocalUnlock
GetDiskFreeSpaceA
ReplaceFileA
GetUserDefaultLCID
VirtualProtect
Sleep
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetTempPathA
GetTempFileNameA
GetFileTime
GetFileSizeEx
SetFileTime
LocalFileTimeToFileTime
SetFileAttributesA
GetFileAttributesExA
SetErrorMode
GetNumberFormatA
GetWindowsDirectoryA
GetShortPathNameA
GetFullPathNameA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
CreateFileA
lstrcmpiA
GetStringTypeExA
GetSystemDirectoryW
DeleteFileA
GetCurrentDirectoryA
GetThreadLocale
GetAtomNameA
GetOEMCP
SetHandleCount
GetConsoleMode
GetStartupInfoW
GetConsoleCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetACP
GlobalFlags
GetTickCount
GetPrivateProfileIntA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GetCurrentProcessId
GetModuleFileNameA
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetModuleHandleA
CompareStringA
LoadLibraryW
ActivateActCtx
DeactivateActCtx
lstrcmpW
SetLastError
CopyFileA
GlobalSize
lstrlenW
lstrlenA
FindResourceA
FreeResource
FreeLibrary
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
GetVolumeInformationA
GetFileAttributesA
CreateDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetCommandLineA
MulDiv
FindResourceExW
WritePrivateProfileStringA
GetPrivateProfileStringA
SearchPathA
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
lstrcpyA
_lwrite
OpenFile
_lclose
_llseek
_lread
GlobalReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryA
GetProcAddress
GetLastError
FormatMessageA
LocalFree
SetEnvironmentVariableW
GetProcessHeap
user32
DefMDIChildProcA
DefFrameProcA
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
MapVirtualKeyExA
IsCharLowerA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
DrawFrameControl
DrawEdge
DrawStateA
LoadMenuW
SetClassLongA
DestroyAcceleratorTable
SetWindowRgn
IsZoomed
SetRect
UnpackDDElParam
ReuseDDElParam
LoadMenuA
GetMenuBarInfo
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
DrawIconEx
GetNextDlgGroupItem
LoadImageA
CopyImage
GetIconInfo
OffsetRect
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetMenuDefaultItem
RedrawWindow
PostThreadMessageA
CharUpperA
DestroyIcon
WaitMessage
ReleaseCapture
SetCapture
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
KillTimer
SetTimer
DeleteMenu
SetRectEmpty
UnregisterClassA
GetSysColorBrush
GetDialogBaseUnits
RealChildWindowFromPoint
RegisterClipboardFormatA
ShowOwnedPopups
GetMessageA
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
WindowFromPoint
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
MapVirtualKeyA
GetKeyNameTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
CheckMenuItem
WinHelpA
TranslateMDISysAccel
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowTextLengthA
GetWindowTextA
SetFocus
SetWindowPos
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowLongA
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetForegroundWindow
LoadIconA
LoadIconW
IsIconic
GetSystemMenu
DrawIcon
InSendMessage
CreateMenu
IsClipboardFormatAvailable
SendNotifyMessageA
GetUpdateRect
GetClipboardData
FindWindowA
GetTabbedTextExtentA
GetTabbedTextExtentW
GetWindowRgn
WindowFromDC
DestroyCursor
MapDialogRect
FrameRect
InflateRect
CopyRect
GetSysColor
MessageBoxA
FillRect
DrawMenuBar
EnableMenuItem
SetParent
SetMenuDefaultItem
GetDCEx
EnumChildWindows
SubtractRect
GetDoubleClickTime
CharUpperBuffA
IsChild
CopyIcon
RegisterWindowMessageA
GetAsyncKeyState
MessageBeep
GetSystemMetrics
GetMessagePos
UpdateWindow
ScreenToClient
LoadBitmapA
GetCursorPos
PeekMessageA
TranslateMessage
DispatchMessageA
GetKeyState
GetWindow
GetDlgCtrlID
GetWindowLongA
GetFocus
IsWindowVisible
InvalidateRect
AppendMenuA
CreatePopupMenu
PtInRect
SendMessageA
EnableWindow
GetParent
IntersectRect
LoadCursorA
SetCursor
GetClientRect
ClientToScreen
GetWindowRect
GetDC
ReleaseDC
IsRectEmpty
DrawTextA
gdi32
CreatePatternBrush
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectA
SetArcDirection
GetTextExtentPoint32A
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetCharWidthA
EnumFontFamiliesA
GetTextCharsetInfo
GetBkColor
GetPaletteEntries
GetNearestPaletteIndex
GetCurrentObject
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
SetPixel
Rectangle
CreateDIBPatternBrushPt
GetRgnBox
EnumFontFamiliesExA
RoundRect
LPtoDP
GetWindowOrgEx
PolyBezierTo
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
SetLayout
GetLayout
SetMapperFlags
OffsetRgn
ExtSelectClipRgn
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
GetViewportOrgEx
DeleteDC
SetGraphicsMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
CopyMetaFileA
GetTextMetricsA
CreateFontA
CreateDIBitmap
StretchBlt
SetStretchBltMode
SetDIBitsToDevice
StretchDIBits
DeleteObject
GetObjectA
GetStockObject
SelectPalette
RealizePalette
GetDIBits
GetSystemPaletteEntries
CreatePalette
CreateDCA
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
BitBlt
SetColorAdjustment
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
EnumJobsA
GetPrinterA
EndPagePrinter
StartDocPrinterA
GetJobA
OpenPrinterA
ClosePrinter
AbortPrinter
StartPagePrinter
DeviceCapabilitiesA
EndDocPrinter
WritePrinter
EnumPrintersA
SetJobA
DocumentPropertiesA
advapi32
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegSetValueA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
GetUserNameA
GetFileSecurityA
SetFileSecurityA
RegQueryValueExA
RegOpenKeyExW
RegEnumValueA
RegQueryValueA
shell32
DragQueryFileA
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
ShellExecuteExA
DragFinish
ShellExecuteA
SHGetSpecialFolderLocation
comctl32
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx
shlwapi
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW
ole32
CreateStreamOnHGlobal
CLSIDFromProgID
OleRun
CoInitializeEx
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoInitialize
CoUninitialize
CLSIDFromString
CoCreateInstance
CoDisconnectObject
OleCreateFromData
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
StgCreateDocfile
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleSaveToStream
WriteClassStm
OleSave
StgCreateDocfileOnILockBytes
PropVariantCopy
DoDragDrop
OleSetMenuDescriptor
OleLockRunning
IsAccelerator
OleTranslateAccelerator
CreateDataAdviseHolder
CreateOleAdviseHolder
CoGetMalloc
GetRunningObjectTable
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleRegGetMiscStatus
OleRegEnumVerbs
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleDuplicateData
OleCreateLinkFromData
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgIsStorageFile
StgOpenStorage
CreateFileMoniker
CreateILockBytesOnHGlobal
StringFromGUID2
StgOpenStorageOnILockBytes
oleaut32
SysFreeString
VarUdateFromDate
SysAllocString
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysStringLen
oledlg
ord8
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 563KB - Virtual size: 563KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ