2024-03-16_5388ab4fe942fcd6eb9b98aa7a6da580_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-16_5388ab4fe942fcd6eb9b98aa7a6da580_mafia
Size

3.9MB
MD5

5388ab4fe942fcd6eb9b98aa7a6da580
SHA1

d6b7adfe145a5db8a5c828f98524af5cdad0d6f8
SHA256

96443a898c6f1d0b38abcac7526419957bf5a912f8e48c4a83b9df534f4f662a
SHA512

f75e4ad3e6773e756bb6b93bdc97e064aa04898b6054d48bbaf47c5075e626c9b13e49155d661faccbed36c498c238c68c77e60aeaf446a8012ce384664206e4
SSDEEP

98304:1X+Z2IuQWnsN8tIauTnvojATGuKiCJppckteyWL2iMSi2UKDTFkAX+CHg4lwRbVm:1uKIauzC9lpcktBl2jDTVOCA4O6qYBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-16_5388ab4fe942fcd6eb9b98aa7a6da580_mafia

Files

2024-03-16_5388ab4fe942fcd6eb9b98aa7a6da580_mafia
.exe windows:5 windows x86 arch:x86

78a93ceb26c70b416f79f05c4311331a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\KUF2_Perforce\wetmind_wetmind-PC_7577\Dev\Source\ProjectKUF2\DevUtil\ReleaseTools\KUF2Launcher\build\bin\Release_Win32\KUF2Launcher.pdb

Imports

kernel32

FindFirstFileExA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
VirtualAlloc
VirtualQuery
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
GetCurrentDirectoryW
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
GetStringTypeW
GetLocaleInfoW
ReleaseSemaphore
InitializeSListHead
InterlockedPushEntrySList
QueryDepthSList
CreateSemaphoreW
InterlockedPopEntrySList
InterlockedFlushSList
SwitchToThread
GetSystemTimeAsFileTime
CreateEventW
GetVersionExW
GetProcessAffinityMask
VirtualFree
SetThreadAffinityMask
FreeLibraryAndExitThread
GetThreadTimes
SetHandleCount
HeapCreate
GetConsoleCP
GetTimeZoneInformation
GetFileInformationByHandle
PeekNamedPipe
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
CompareStringW
GetThreadPriority
WriteConsoleW
EnumSystemLocalesA
IsValidLocale
SignalObjectAndWait
SleepEx
CreateTimerQueue
DeleteTimerQueueTimer
CreateTimerQueueTimer
SetEnvironmentVariableA
RemoveDirectoryA
ExitProcess
ExitThread
CreateThread
HeapReAlloc
EncodePointer
DecodePointer
GetDriveTypeW
GetUserDefaultLCID
SearchPathA
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetTempPathA
GetTempFileNameA
GetNumberFormatA
GetWindowsDirectoryA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
lstrcmpiA
GetSystemDirectoryW
GetOEMCP
GetCPInfo
GetACP
GlobalFlags
FindResourceExW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetThreadLocale
InterlockedIncrement
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
SetThreadPriority
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
GetModuleHandleW
InterlockedExchange
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
lstrcmpW
ActivateActCtx
DeactivateActCtx
VirtualProtect
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
MulDiv
GetConsoleMode
GetStdHandle
FreeConsole
SetFileAttributesA
FindFirstFileA
CreateDirectoryA
OutputDebugStringW
ResumeThread
GetThreadContext
SuspendThread
SetLastError
LoadLibraryA
GetEnvironmentVariableA
FreeLibrary
lstrcpyA
GetProfileIntA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrlenA
CreateProcessA
TerminateProcess
GetExitCodeProcess
OpenProcess
GetCurrentThreadId
CreateFileW
LoadLibraryW
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
SetErrorMode
GetModuleFileNameW
OutputDebugStringA
GetLocalTime
FreeResource
GetUserDefaultLangID
FindResourceA
MoveFileA
GetFileAttributesA
GetSystemInfo
GetVersionExA
GlobalMemoryStatusEx
SetCurrentDirectoryA
GetCurrentDirectoryA
ReleaseMutex
SetThreadExecutionState
CreateMutexA
GetLastError
SetEvent
DeleteFileA
CloseHandle
GetExitCodeThread
Sleep
WaitForSingleObject
GetCurrentThread
GetTickCount
GetDiskFreeSpaceA
GetDriveTypeA
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
FormatMessageA
LocalFree
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
ReadProcessMemory
IsBadReadPtr
IsBadCodePtr
HeapFree
GetProcessHeap
WaitForMultipleObjects
HeapAlloc

user32

EnumDisplayMonitors
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
CharNextA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadImageA
DestroyIcon
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
OffsetRect
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
InvalidateRect
DrawStateA
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
SetWindowContextHelpId
PostQuitMessage
MapVirtualKeyA
GetKeyNameTextA
LoadBitmapA
IntersectRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
IsCharLowerA
MapWindowPoints
SetLayeredWindowAttributes
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
CopyRect
GetWindow
GetDesktopWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
SetPropA
GetCapture
GetActiveWindow
SetActiveWindow
MapDialogRect
SetWindowPos
ShowWindow
GetPropA
RemovePropA
GetAsyncKeyState
PostThreadMessageA
CharUpperBuffA
GetFocus
SetFocus
wsprintfA
EnableWindow
SendMessageA
SetTimer
CopyIcon
GetWindowLongA
GetParent
GetDlgItem
IsWindowEnabled
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
LoadBitmapW
GetWindowThreadProcessId
PtInRect
IsWindow
EnumDisplaySettingsA
LoadCursorW
SetCapture
WindowFromPoint
GetWindowRgn
DestroyCursor
SubtractRect
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
EnumDisplayDevicesA
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
InflateRect
GetWindowRect
LoadIconW
FindWindowA
PostMessageA
KillTimer
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
ScrollWindow
MapVirtualKeyExA
FrameRect
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
RegisterClipboardFormatA
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawEdge
SetClassLongA
DestroyAcceleratorTable
DrawIconEx
GetIconInfo
HideCaret
DrawFocusRect
InvertRect
SetParent
UnregisterClassA
GetMenuDefaultItem
SetMenuDefaultItem
WaitMessage
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
CharUpperA
IsZoomed
NotifyWinEvent
SetWindowRgn
GetSystemMenu
LoadMenuW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
GetMonitorInfoA
DeleteMenu
IsMenu

gdi32

GetLayout
SetLayout
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateCompatibleBitmap
GetBkColor
GetTextColor
GetTextExtentPoint32A
EnumFontFamiliesExA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetRgnBox
CreateRoundRectRgn
CreateDIBSection
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
GetTextFaceA
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
CreateDCA
CopyMetaFileA
GetDeviceCaps
GetObjectA
BitBlt
SelectObject
GetTextMetricsA
CreateSolidBrush
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
GetUserNameA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegEnumValueA
RegQueryValueA

shell32

SHGetFileInfoA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
DragFinish
SHAppBarMessage
ShellExecuteA
SHGetSpecialFolderPathA
DragQueryFileA

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
OleDuplicateData
CoTaskMemAlloc
CreateILockBytesOnHGlobal
CoTaskMemFree
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
ReleaseStgMedium
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoCreateInstance
CoUninitialize
CoInitialize
OleGetClipboard
CoRegisterMessageFilter
CoRevokeClassObject

oleaut32

VariantCopy
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
SysAllocString
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SafeArrayDestroy
SysFreeString
SysAllocStringByteLen

oledlg

ord8

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

dbghelp

SymInitialize

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

winmm

PlaySoundA
timeGetTime

wininet

InternetQueryDataAvailable
HttpQueryInfoA
InternetOpenUrlA
InternetReadFile
InternetOpenA
InternetCloseHandle

ws2_32

inet_ntoa
gethostbyname
WSAStartup
WSACleanup

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78a93ceb26c70b416f79f05c4311331a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

dbghelp

version

winmm

wininet

ws2_32

oleacc

imm32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 323KB - Virtual size: 323KB

.data Size: 90KB - Virtual size: 1.1MB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 193KB - Virtual size: 193KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 323KB - Virtual size: 323KB

.data
Size: 90KB - Virtual size: 1.1MB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 193KB - Virtual size: 193KB