2024-03-25_f384bf549e24d109d02f8ca227acf7ca_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-25_f384bf549e24d109d02f8ca227acf7ca_mafia
Size

3.3MB
MD5

f384bf549e24d109d02f8ca227acf7ca
SHA1

8bd960bcd74ace4b23eb957f111caf10619f5a3b
SHA256

bbe01b4394ecf4758d2681d1dca83cc9e6493146a6dade43b39ea928ddf8ee8d
SHA512

475e8e3feae810e0db627c86fec041959813a508f36c610ca420304e382ac97585a92002bf92563c20b22a02ab647835dcbb8cf7bb540ff309b672e552cc7c3d
SSDEEP

98304:Cgm5llAChPDfg9A/lSOfRwoGE8gj9CnTSnNUaoj9ghi1RebMIg9Cbk/V8:V+lmGSw029CnTSNUaojDIg9Cbk/V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-25_f384bf549e24d109d02f8ca227acf7ca_mafia

Files

2024-03-25_f384bf549e24d109d02f8ca227acf7ca_mafia
.exe windows:5 windows x86 arch:x86

f88c5e9af275064a9d23d5123ec2a900

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Exontrol\Exontrol.Stress\Stress.ExTree\Release\Stress.pdb

Imports

kernel32

GetTimeZoneInformation
GetConsoleCP
IsProcessorFeaturePresent
GetStringTypeW
SetEnvironmentVariableA
WriteConsoleW
LCMapStringW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
SizeofResource
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
ExitProcess
RaiseException
HeapReAlloc
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
RtlUnwind
HeapFree
HeapAlloc
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
GetWindowsDirectoryW
FindResourceExW
SetErrorMode
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
VirtualProtect
FileTimeToSystemTime
GlobalFlags
GetShortPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
MoveFileW
DeleteFileW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GetTempPathW
SetFilePointer
SearchPathW
Sleep
GetProfileIntW
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
ReplaceFileW
SystemTimeToFileTime
GetUserDefaultLCID
WaitForSingleObject
ResumeThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringA
GlobalGetAtomNameW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
GetCurrentProcessId
FreeLibrary
ReleaseActCtx
CreateActCtxW
lstrcmpA
CopyFileW
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
WideCharToMultiByte
GetCurrentDirectoryW
GetModuleFileNameW
CreateFileW
GetFileSize
CloseHandle
GetFileAttributesW
GlobalLock
ActivateActCtx
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
GlobalAlloc
GlobalReAlloc
GlobalFree
GlobalSize
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
lstrlenW
lstrcmpW
lstrcpyW
FreeResource
GetCurrentThreadId
GetTickCount
GetNumberFormatW
MultiByteToWideChar
lstrlenA
InterlockedDecrement
InterlockedIncrement
FindResourceW
LoadResource
LockResource
GetConsoleMode

user32

RealChildWindowFromPoint
TranslateMDISysAccel
DrawMenuBar
DefFrameProcW
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyIcon
FrameRect
SetCursorPos
SetClassLongW
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyAcceleratorTableW
IsClipboardFormatAvailable
SetMenuDefaultItem
DrawIcon
ShowOwnedPopups
TranslateMessage
WaitMessage
PostThreadMessageW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
PostQuitMessage
UnpackDDElParam
ReuseDDElParam
GetActiveWindow
LoadAcceleratorsW
InsertMenuItemW
GetDesktopWindow
TranslateAcceleratorW
LoadIconW
SendDlgItemMessageA
WinHelpW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
SetActiveWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
SetRect
GetKeyNameTextW
GetSysColorBrush
DrawFocusRect
DrawEdge
GetSysColor
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
CharUpperBuffW
SetParent
LockWindowUpdate
BringWindowToTop
TrackPopupMenu
ModifyMenuW
CreatePopupMenu
GetWindowTextLengthW
GetWindowTextW
SetWindowPos
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CheckDlgButton
GetMenuState
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
PeekMessageW
GetMessageW
DispatchMessageW
MonitorFromPoint
GetMonitorInfoW
UpdateLayeredWindow
EnableScrollBar
SetScrollPos
GetScrollPos
ValidateRect
RedrawWindow
UpdateWindow
EnableWindow
ClientToScreen
IsWindow
MapWindowPoints
UnionRect
SystemParametersInfoW
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
FillRect
DrawStateW
CopyImage
GetIconInfo
DestroyIcon
CopyRect
GetSystemMetrics
EnumChildWindows
GetUpdateRect
SubtractRect
GetNextDlgGroupItem
DestroyCursor
UnregisterClassW
GetDoubleClickTime
CharNextW
InvalidateRgn
HideCaret
DestroyMenu
IsMenu
GetClassLongW
GetWindowLongW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
DrawFrameControl
IsRectEmpty
RegisterWindowMessageW
CharUpperW
InvertRect
MapVirtualKeyExW
IsCharLowerW
GetWindowRgn
CreateMenu
DrawIconEx
GetClientRect
InflateRect
SendMessageW
SetTimer
KillTimer
GetAsyncKeyState
GetWindow
PostMessageW
SetWindowRgn
GetWindowRect
IsWindowVisible
GetCapture
GetFocus
GetTopWindow
GetKeyState
NotifyWinEvent
DestroyWindow
GetParent
DestroyAcceleratorTable
PtInRect
SetRectEmpty
OffsetRect
IntersectRect
EqualRect
IsChild
EndDeferWindowPos
BeginDeferWindowPos
DeleteMenu
CheckMenuItem
EnableMenuItem
GetSubMenu
LoadMenuW
GetSystemMenu
ScreenToClient
InvalidateRect
SetCapture
WindowFromPoint
LoadCursorW
ReleaseCapture
MessageBeep
SetCursor
GetCursorPos
IsZoomed
IsIconic
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetFocus
DefMDIChildProcW

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetObjectType
DPtoLP
LPtoDP
OffsetRgn
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
GetMapMode
ExtFloodFill
CreatePalette
GetPaletteEntries
OffsetViewportOrgEx
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
EnumFontFamiliesExW
GetNearestPaletteIndex
GetSystemPaletteEntries
GetTextFaceW
SetPixelV
Escape
SetViewportOrgEx
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetPaletteEntries
GetStockObject
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
SetTextColor
CreateFontIndirectW
RoundRect
Rectangle
CreatePatternBrush
ExtTextOutW
Polygon
Ellipse
Polyline
GetTextColor
GetBkColor
CreatePolygonRgn
CreateEllipticRgn
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
CreateDCW
CopyMetaFileW
GetDeviceCaps
CreateDIBSection
SetPixel
GetPixel
StretchBlt
CombineRgn
CreateRectRgn
CreateBitmap
SelectPalette
RealizePalette
GetDIBits
SetBkColor
BitBlt
SetDIBColorTable
DeleteDC
GetObjectW
DeleteObject
GetTextMetricsW
GetTextExtentPoint32W
PatBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateRoundRectRgn
CreatePen

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumKeyExW
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegCloseKey
GetFileSecurityW
SetFileSecurityW

shell32

SHGetPathFromIDListW
DragFinish
DragQueryFileW
ShellExecuteW
SHGetFileInfoW
SHGetDesktopFolder
SHGetSpecialFolderLocation
ExtractIconW
SHAddToRecentDocs
SHBrowseForFolderW
SHGetMalloc
SHAppBarMessage

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Destroy
ImageList_DrawEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW

ole32

StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoInitialize
CoCreateInstance
OleLockRunning
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleDuplicateData
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CoInitializeEx
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
CoUninitialize
CoTaskMemFree
CreateStreamOnHGlobal

oleaut32

VariantCopy
VariantClear
SysAllocString
VariantChangeType
SysAllocStringLen
SysStringLen
VariantInit
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysFreeString
GetErrorInfo

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

winmm

PlaySoundW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 337KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f88c5e9af275064a9d23d5123ec2a900

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

imm32

oleacc

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 337KB - Virtual size: 337KB

.data Size: 27KB - Virtual size: 56KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 173KB - Virtual size: 172KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 337KB - Virtual size: 337KB

.data
Size: 27KB - Virtual size: 56KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 173KB - Virtual size: 172KB