2024-03-26_2af0f068475bc692da4c502ebca85703_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-26_2af0f068475bc692da4c502ebca85703_mafia
Size

5.6MB
MD5

2af0f068475bc692da4c502ebca85703
SHA1

028ce177e40841ad6d5bf9a371a157d7c7ecbc9c
SHA256

eccc78e4710ac2e656889d0eac3846ca2f2279023061cc43d52592b32d84d9a9
SHA512

bca1c9aed742e920e0c96b82fc8101be5082ef7a3c176063b6389e5651e76b5c4dfe1e41c8696a8e0affdeff22b11da76575b96d3d2b6e5e218b48b5464e9e2c
SSDEEP

98304:59+7KRP/yUzLkZFfVuoE304JVdi61OXcr:K7OP/THq2oE3RL45cr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-26_2af0f068475bc692da4c502ebca85703_mafia

Files

2024-03-26_2af0f068475bc692da4c502ebca85703_mafia
.exe windows:5 windows x86 arch:x86

89285df67a09daadfd759f98dc06ed65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\e.mcmullin\Downloads\DSPFilters-master\DSPFilters-master\user\Workspaces\VisualStudio2010\dspfilterscpp-Output\Products\Win32Release\DSPFiltersDemo.pdb

Imports

ws2_32

send
ioctlsocket
select
getsockopt
__WSAFDIsSet
recv
htonl
htons
bind
setsockopt
WSAStartup
recvfrom
ntohs
accept
inet_ntoa
inet_addr
listen
getaddrinfo
freeaddrinfo
connect
WSAGetLastError
socket
closesocket
sendto

winmm

midiOutPrepareHeader
midiOutLongMsg
midiOutUnprepareHeader
midiOutGetNumDevs
midiOutGetDevCapsW
midiInGetNumDevs
midiInGetDevCapsW
midiInStart
midiInUnprepareHeader
midiInPrepareHeader
midiOutShortMsg
timeBeginPeriod
timeGetTime
midiInOpen
midiInClose
midiOutClose
midiInReset
midiInStop
midiOutOpen
midiInAddBuffer

wininet

HttpOpenRequestW
InternetWriteFile
HttpEndRequestW
HttpSendRequestExW
FtpOpenFileW
InternetConnectW
InternetSetOptionW
InternetCrackUrlW
InternetOpenW
HttpQueryInfoW
InternetCloseHandle
InternetSetFilePointer
InternetReadFile

msvfw32

DrawDibOpen
DrawDibDraw

imm32

ImmGetCompositionStringW
ImmGetContext
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow

kernel32

GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetStartupInfoW
HeapSetInformation
GetCommandLineA
RaiseException
ExitThread
HeapReAlloc
HeapFree
RtlUnwind
DecodePointer
EncodePointer
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
CreateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
HeapAlloc
GetFileType
GetProcAddress
LoadLibraryA
Sleep
CloseHandle
ResetEvent
SetPriorityClass
SetThreadPriority
GetPriorityClass
GetCurrentProcess
GetThreadPriority
GetCurrentThread
CreateEventW
WaitForSingleObject
SetEvent
SetFilePointer
UnmapViewOfFile
WaitForMultipleObjects
GetLastError
ConnectNamedPipe
DisconnectNamedPipe
GetSystemInfo
IsProcessorFeaturePresent
GetVersionExW
GetModuleHandleW
GlobalMemoryStatusEx
QueryPerformanceFrequency
QueryPerformanceCounter
InitializeCriticalSection
GetCPInfo
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
TerminateThread
GetCurrentThreadId
SetThreadAffinityMask
IsDebuggerPresent
ExitProcess
FreeLibrary
ReleaseMutex
TerminateProcess
GetOverlappedResult
CancelIo
ReadFile
WriteFile
PeekNamedPipe
FindClose
SetLocalTime
GetFileAttributesW
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
CopyFileW
MoveFileW
GetFileAttributesExW
SetFileTime
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FindFirstFileW
CreateNamedPipeW
OutputDebugStringW
GetComputerNameW
GetCommandLineW
LoadLibraryW
CreateMutexW
CreateProcessW
SetHandleInformation
CreatePipe
GetDiskFreeSpaceExW
GetDriveTypeW
FormatMessageW
CreateDirectoryW
FlushFileBuffers
SetEndOfFile
MapViewOfFile
CreateFileMappingW
GetVolumeInformationW
GetLogicalDriveStringsW
GetModuleFileNameW
GetTempPathW
GlobalUnlock
GlobalSize
GlobalLock
GlobalAlloc
InterlockedExchange
LCMapStringW
GetStdHandle
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapSize
SetUnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetTickCount
GetCurrentProcessId
UnhandledExceptionFilter
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
SetStdHandle
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CompareStringW
SetEnvironmentVariableA
WriteConsoleW
CreateFileA
DeleteCriticalSection
GetProcessHeap

user32

ReleaseCapture
InvalidateRect
DestroyCaret
GetSystemMenu
ShowWindow
GetWindowPlacement
SetCaretPos
ShowCaret
CreateCaret
SetForegroundWindow
SetFocus
GetFocus
RedrawWindow
SetLayeredWindowAttributes
DispatchMessageW
TranslateMessage
GetMessageW
SendMessageTimeoutW
GetWindowTextW
EnumWindows
GetForegroundWindow
GetSystemMetrics
DestroyIcon
EmptyClipboard
SetClipboardData
GetCursorPos
GetMessagePos
GetWindowInfo
CreateIconIndirect
GetCapture
GetWindowRect
SendMessageW
LoadCursorW
SetCursor
DestroyCursor
OpenClipboard
GetClipboardData
CloseClipboard
MessageBeep
SetCursorPos
MessageBoxW
EnableMenuItem
GetParent
PostMessageW
GetMessageExtraInfo
GetAsyncKeyState
GetAncestor
SetWindowTextW
GetDC
ReleaseDC
GetMessageTime
GetWindowThreadProcessId
AttachThreadInput
SetWindowLongW
DestroyWindow
UnregisterClassW
RegisterClassExW
CreateWindowExW
GetDesktopWindow
SetCapture
TrackMouseEvent
GetClientRect
WindowFromPoint
SetWindowPos
GetActiveWindow
PeekMessageW
MapVirtualKeyW
GetUpdateRgn
BeginPaint
EndPaint
GetWindowLongW
DefWindowProcW
IsChild
EnumDisplayMonitors
SystemParametersInfoW
GetIconInfo
SendInput

gdi32

GetDeviceCaps
GetPixel
GetObjectW
CreateDIBSection
RestoreDC
StretchDIBits
GetTextMetricsW
ExcludeClipRect
CreateBitmap
GetRegionData
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
GetKerningPairsW
GetGlyphIndicesW
GetGlyphOutlineW
SetMapperFlags
SetMapMode
CreateFontIndirectW
SelectObject
GetOutlineTextMetricsW
DeleteObject
CreateCompatibleDC
SaveDC
DeleteDC
EnumFontFamiliesExW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
GetUserNameW

shell32

SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
ExtractAssociatedIconW
SHGetSpecialFolderPathW
SHFileOperationW
ord190
SHOpenFolderAndSelectItems
ord155

ole32

CoTaskMemFree
CoCreateInstance
PropVariantClear
CoTaskMemAlloc
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CoInitialize
OleInitialize
OleUninitialize

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

shlwapi

PathStripToRootW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89285df67a09daadfd759f98dc06ed65

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

winmm

wininet

msvfw32

imm32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

version

shlwapi

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 3.0MB - Virtual size: 3.0MB

.data Size: 109KB - Virtual size: 118KB

.rsrc Size: 269KB - Virtual size: 269KB

.reloc Size: 144KB - Virtual size: 144KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 3.0MB - Virtual size: 3.0MB

.data
Size: 109KB - Virtual size: 118KB

.rsrc
Size: 269KB - Virtual size: 269KB

.reloc
Size: 144KB - Virtual size: 144KB