2024-03-19_6b8550ec4dfaf2221b9e7f5da7f257d4_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-19_6b8550ec4dfaf2221b9e7f5da7f257d4_mafia
Size

4.7MB
MD5

6b8550ec4dfaf2221b9e7f5da7f257d4
SHA1

bfc0cfce4ca5198781c01f75e0a02169b93c0949
SHA256

4a0217841f7fa73431a27108b01dcb180ff25f690563a153f58dd84e3b7d2577
SHA512

4ccda8b0a42b61ca6a5280c21b8dbb21e2b55631b17451721d2b152bac550f017d6076c410c56457ccc3d6781755778f4d7f4ec5bc54f9e3e1edaf1d7cee3d7e
SSDEEP

98304:6P61cOhX8LuDXtoZdMXRgZJHmUy0TYCCUNVEpdxctc7MofepyNlYs8IH44x87JGN:iOhMLubtoZdMXRgZ5mXXLUN3FENgIr8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-19_6b8550ec4dfaf2221b9e7f5da7f257d4_mafia

Files

2024-03-19_6b8550ec4dfaf2221b9e7f5da7f257d4_mafia
.exe windows:5 windows x86 arch:x86

3be2e381ea1a13a46c5b266aaff900ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\mastercoder\Desktop\svnuggunz\Build\Gunz\UGGunz.pdb

Imports

fmod

_FSOUND_Stream_SetEndCallback@12
_FSOUND_Stream_Open@16
_FSOUND_Stream_PlayEx@16
_FSOUND_Stream_SetMode@8
_FSOUND_Stream_Close@4
_FSOUND_Sample_SetMinMaxDistance@12
_FSOUND_GetVersion@0
_FSOUND_SetHWND@4
_FSOUND_Stream_GetMode@4
_FSOUND_3D_Listener_SetAttributes@32
_FSOUND_Stream_Stop@4
_FSOUND_GetDriverName@4
_FSOUND_GetNumDrivers@0
_FSOUND_StopSound@4
_FSOUND_GetError@0
_FSOUND_SetOutput@4
_FSOUND_SetDriver@4
_FSOUND_GetDriverCaps@8
_FSOUND_SetMinHardwareChannels@4
_FSOUND_SetMaxHardwareChannels@4
_FSOUND_Init@12
_FSOUND_Record_GetNumDrivers@0
_FSOUND_Record_GetDriverName@4
_FSOUND_Stream_SetBufferSize@4
_FSOUND_GetMaxChannels@0
_FSOUND_SetPaused@8
_FSOUND_Sample_Load@20
_FSOUND_Sample_GetMode@4
_FSOUND_PlaySoundEx@16
_FSOUND_3D_SetAttributes@12
_FSOUND_SetPriority@8
_FSOUND_SetVolume@8
_FSOUND_3D_SetRolloffFactor@4
_FSOUND_3D_SetDistanceFactor@4
_FSOUND_3D_SetDopplerFactor@4
_FSOUND_GetVolume@4
_FSOUND_SetMute@8
_FSOUND_Close@0
_FSOUND_3D_SetMinMaxDistance@12
_FSOUND_Update@0
_FSOUND_Sample_Free@4

psapi

GetModuleBaseNameA
EnumProcessModules
EnumProcesses
GetModuleFileNameExA

kernel32

GetVersion
ExitThread
OpenProcess
SetPriorityClass
ResumeThread
SuspendThread
WaitForSingleObject
lstrlenA
VirtualFree
SetThreadContext
FlushInstructionCache
InterlockedCompareExchange
CreateFileW
SetEnvironmentVariableA
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetProcessHeap
CompareStringW
GetStringTypeW
GetDriveTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
LCMapStringW
IsValidCodePage
GlobalMemoryStatus
QueryPerformanceCounter
QueryPerformanceFrequency
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiA
GetModuleHandleW
DeleteFileA
SetCurrentDirectoryA
GetCurrentThreadId
CreateMutexA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateThread
ReleaseMutex
LoadLibraryExA
VirtualProtect
GetModuleFileNameA
GetWindowsDirectoryA
FindClose
CreateDirectoryA
Sleep
IsDebuggerPresent
GetCurrentProcess
CheckRemoteDebuggerPresent
GetThreadContext
GetCurrentThread
SetThreadPriority
GetCurrentDirectoryA
FindNextFileA
FindFirstFileA
GetFileAttributesA
GetTickCount
GetVolumeInformationA
GetLastError
GetCurrentProcessId
GetConsoleWindow
OutputDebugStringA
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetLocalTime
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
SetHandleCount
GetCurrentDirectoryW
PeekNamedPipe
IsProcessorFeaturePresent
GetLocaleInfoW
GetStdHandle
UnhandledExceptionFilter
GetFileType
SetStdHandle
CreateEventA
SetEvent
FindNextChangeNotification
WaitForMultipleObjects
OpenEventA
FindCloseChangeNotification
FindFirstChangeNotificationA
GlobalMemoryStatusEx
GetFileInformationByHandle
CreateFileA
ReadFile
SetFileTime
InterlockedDecrement
WriteFile
SystemTimeToFileTime
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GlobalAddAtomA
GlobalDeleteAtom
IsDBCSLeadByte
ResetEvent
SizeofResource
LockResource
LoadResource
FindResourceW
SetUnhandledExceptionFilter
FileTimeToSystemTime
TerminateProcess
GetSystemInfo
GetSystemDirectoryA
MulDiv
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrlenW
LocalFree
FormatMessageA
CopyFileA
GlobalFree
SetLastError
GlobalReAlloc
lstrcmpA
CompareStringA
GetModuleFileNameW
InterlockedIncrement
DeactivateActCtx
ReleaseActCtx
ActivateActCtx
LocalAlloc
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameA
lstrcmpW
lstrcpyA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetFullPathNameA
GlobalFlags
GetFileAttributesExA
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
InterlockedExchange
GetLocaleInfoA
GetUserDefaultUILanguage
LoadLibraryW
InitializeCriticalSectionAndSpinCount
GlobalFindAtomA
FreeResource
FindResourceA
GetACP
GetSystemDirectoryW
GetCPInfo
GetOEMCP
GetNumberFormatA
GetTempFileNameA
GetTempPathA
GetProfileIntA
SearchPathA
GetUserDefaultLCID
FindResourceExW
DecodePointer
EncodePointer
GetDriveTypeA
FindFirstFileExA
GetSystemTimeAsFileTime
HeapFree
ExitProcess
HeapAlloc
GetTimeFormatA
GetDateFormatA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
VirtualAlloc
VirtualQuery
HeapReAlloc
HeapQueryInformation
HeapSize

user32

EqualRect
AdjustWindowRectEx
GetClassInfoA
GetClassInfoExA
RedrawWindow
ShowScrollBar
GetScrollRange
SetScrollRange
SetMenu
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoA
MonitorFromWindow
GetMessagePos
GetMessageTime
DestroyWindow
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
IsChild
WinHelpA
LoadIconW
RegisterWindowMessageA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
SetRectEmpty
SystemParametersInfoA
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadCursorW
SetCursor
ShowOwnedPopups
DeleteMenu
InvalidateRect
SetTimer
KillTimer
GetMenuItemInfoA
DestroyMenu
CopyImage
GetMenuDefaultItem
CreatePopupMenu
IsRectEmpty
SetCapture
ReleaseCapture
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
MessageBeep
OffsetRect
EmptyClipboard
LoadImageA
GetNextDlgGroupItem
DrawIconEx
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
WindowFromPoint
SetClassLongA
LoadMenuW
GetSystemMenu
DrawStateA
DrawEdge
DrawFrameControl
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetRect
IntersectRect
LockWindowUpdate
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
PostThreadMessageA
WaitMessage
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
FrameRect
GetUpdateRect
RegisterClipboardFormatA
DeferWindowPos
CharUpperBuffA
GetDoubleClickTime
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
InflateRect
CopyRect
IsWindow
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
CheckDlgButton
GetScrollPos
SetScrollPos
ValidateRect
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcA
GetMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetClipboardData
GetCursorPos
GetFocus
RealChildWindowFromPoint
GetDlgCtrlID
PtInRect
SendMessageA
IsWindowVisible
GetParent
GetWindowTextLengthA
EnumWindows
GetWindow
GetWindowTextA
FindWindowExA
GetClassNameA
GetTopWindow
FlashWindow
FindWindowA
EnumDisplaySettingsA
ShowWindow
DefWindowProcA
ShowCursor
MessageBoxA
SetFocus
UnhookWindowsHookEx
DispatchMessageA
TranslateMessage
GetMessageA
SetWindowsHookExA
CallNextHookEx
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
GetAsyncKeyState
wsprintfA
GetWindowRect
GetWindowThreadProcessId
PostMessageA
PostQuitMessage
GetKeyState
SetCursorPos
ClientToScreen
SetWindowTextA
CharUpperA
DestroyIcon
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetLastActivePopup
IsWindowEnabled
LoadCursorA
GetSystemMetrics
GetSysColor
GetSysColorBrush
GetDesktopWindow
EnableWindow
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDC
ReleaseDC
PeekMessageA
LoadIconA
RegisterClassA
CreateWindowExA
SetWindowPos
GetActiveWindow
UpdateWindow
GetWindowLongA
SetForegroundWindow
CopyIcon
SetWindowLongA
GetClientRect
MoveWindow
MapVirtualKeyA
GetKeyNameTextA
ScreenToClient
GetKeyboardLayout
IsIconic
UnregisterHotKey
BringWindowToTop
GetIconInfo

gdi32

CreateSolidBrush
CreatePen
CreateHatchBrush
GetTextFaceA
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
DPtoLP
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
GetTextExtentPoint32A
SelectObject
GetObjectA
DeleteDC
DeleteObject
SetMapMode
CreateDIBSection
CreateCompatibleDC
CreateFontA
GetDeviceCaps
GetTextMetricsA
GetObjectType
SelectPalette
GetStockObject
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
AddFontResourceA
RemoveFontResourceA
GetRgnBox
EnumFontFamiliesExA
LPtoDP
SetLayout
GetLayout
SetTextAlign
MoveToEx
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteValueA
RegOpenKeyA
RegEnumKeyExA
RegCloseKey

shell32

DragQueryFileA
DragFinish
ShellExecuteA
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetFileInfoA
SHChangeNotify
SHBrowseForFolderA
SHGetSpecialFolderPathA

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoInitialize
OleRun
CoCreateInstance
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoUninitialize

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathRemoveFileSpecA
PathStripPathA
PathIsDirectoryA
PathSearchAndQualifyA
PathFileExistsA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA

imm32

ImmNotifyIME
ImmAssociateContext
ImmSetConversionStatus
ImmGetDefaultIMEWnd
ImmGetCompositionStringA
ImmGetContext
ImmGetOpenStatus
ImmGetConversionStatus
ImmReleaseContext
ImmGetCandidateListA

winmm

timeGetTime
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
PlaySoundA

ws2_32

recv
send
closesocket
htons
gethostbyname
WSACleanup
WSAStartup
inet_ntoa
connect
ntohs
inet_addr
gethostname
setsockopt
ioctlsocket
htonl
sendto
recvfrom
shutdown
bind
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSACloseEvent
WSAGetLastError
socket

rpcrt4

UuidCreateSequential

wininet

InternetConnectA
InternetOpenA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFileExA
InternetSetStatusCallback
InternetCloseHandle
InternetCrackUrlA

gdiplus

GdipStringFormatGetGenericTypographic
GdipDeletePen
GdipCreatePen1
GdipDeleteBrush
GdiplusShutdown
GdiplusStartup
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipSaveImageToFile
GdipDisposeImage
GdipAlloc
GdipCreatePath
GdipDeletePath
GdipDeleteGraphics
GdipDeleteFontFamily
GdipDeleteFont
GdipCreateSolidFill
GdipAddPathString
GdipCreateFromHDC
GdipSetSmoothingMode
GdipDrawPath
GdipGraphicsClear
GdipFillPath
GdipDrawString
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetFamily
GdipCloneBrush
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipGetImageGraphicsContext
GdipDrawImageI
GdipFree

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString
VariantInit
VariantClear
VariantChangeType
VariantTimeToSystemTime
SysStringLen
GetErrorInfo
VarBstrFromDate
SystemTimeToVariantTime

dbghelp

MiniDumpWriteDump

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 676KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 191KB - Virtual size: 26.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3be2e381ea1a13a46c5b266aaff900ae

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

fmod

psapi

kernel32

user32

gdi32

advapi32

shell32

ole32

msimg32

comctl32

shlwapi

imm32

winmm

ws2_32

rpcrt4

wininet

gdiplus

oleacc

winspool.drv

comdlg32

oleaut32

dbghelp

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 676KB - Virtual size: 675KB

.data Size: 191KB - Virtual size: 26.2MB

.rsrc Size: 79KB - Virtual size: 78KB

.reloc Size: 462KB - Virtual size: 462KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 676KB - Virtual size: 675KB

.data
Size: 191KB - Virtual size: 26.2MB

.rsrc
Size: 79KB - Virtual size: 78KB

.reloc
Size: 462KB - Virtual size: 462KB