B:\CM_XPM_WK\CM_RELEASE_6_60\wibu\Doku_und_Samples\cm\DevKit\Samples\C++\CmHip\Release\CmHipGUI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-09_5a59a3388f270820e2c25c14573aecaa_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-09_5a59a3388f270820e2c25c14573aecaa_mafia.exe
Resource
win10v2004-20240319-en
General
-
Target
2024-04-09_5a59a3388f270820e2c25c14573aecaa_mafia
-
Size
2.3MB
-
MD5
5a59a3388f270820e2c25c14573aecaa
-
SHA1
1eda89ef77740b78aa68e1fea570a1a3eb9f84eb
-
SHA256
cb015880c523db35ed27b6b24a0f530b06c93e72eb6b5c25fa33cea34b11b354
-
SHA512
30823b5591b98903053a88d272c07aef792bcd4f9f84365f6436347b99c745ded2ea7caa5c4ac5b9587e28572879e7cd6ce4bba2cd691ffa1a5cb462a4ec8056
-
SSDEEP
49152:wDNbJPUKCV8Cw3d8p2Q8Fd46j4VSdF7MJmsx4CSCb1esYHC/xZ7z8tGo:QqKCV8zdpXd46j4VSdF7MJmsXqsWC/x4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-09_5a59a3388f270820e2c25c14573aecaa_mafia
Files
-
2024-04-09_5a59a3388f270820e2c25c14573aecaa_mafia.exe windows:5 windows x86 arch:x86
409f7f25528f7c83a5e0cac2772facca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wibucmhipapi32
??0CmByteArray@cmhip@@QAE@XZ
??1CmByteArray@cmhip@@QAE@XZ
?GetWCharArray@CmString@cmhip@@ABEXPA_WH@Z
?GetCharArray@CmString@cmhip@@ABEXPADH@Z
?FromWCharArray@CmString@cmhip@@QAEHPB_WH@Z
??0CmString@cmhip@@QAE@XZ
?Size@CmString@cmhip@@QBEHXZ
?IsEmpty@CmString@cmhip@@QBE_NXZ
?FromAscii@CmString@cmhip@@QAEHPBDH@Z
??1CmString@cmhip@@QAE@XZ
??0CmString@cmhip@@QAE@ABV01@@Z
??1CmActFileInfo@cmhip@@UAE@XZ
??0CmActFileInfo@cmhip@@QAE@ABVCmString@1@@Z
?SetTime@CmDateTime@cmhip@@QAEHHHH@Z
?SetDate@CmDateTime@cmhip@@QAEHHHH@Z
?Second@CmDateTime@cmhip@@QBEHXZ
?Minute@CmDateTime@cmhip@@QBEHXZ
?Hour@CmDateTime@cmhip@@QBEHXZ
?Day@CmDateTime@cmhip@@QBEHXZ
?Month@CmDateTime@cmhip@@QBEHXZ
?Year@CmDateTime@cmhip@@QBEHXZ
??4CmDateTime@cmhip@@QAEAAV01@ABV01@@Z
??1CmDateTime@cmhip@@QAE@XZ
??0CmDateTime@cmhip@@QAE@XZ
?SetFirmItemText@FirmItemParamSet@cmhip@@QAEHABVCmString@2@@Z
??1FirmItemParamSet@cmhip@@QAE@XZ
??0FirmItemParamSet@cmhip@@QAE@K@Z
??1ProductItemParamSet@cmhip@@UAE@XZ
??0ProductItemParamSet@cmhip@@QAE@K@Z
?SetUserData@ProductItemParamSetBase@cmhip@@QAEHABVCmByteArray@2@@Z
?SetUsagePeriod@ProductItemParamSetBase@cmhip@@QAEHK@Z
?SetRandomSecretData@ProductItemParamSetBase@cmhip@@QAEHEH@Z
?SetProductItemText@ProductItemParamSetBase@cmhip@@QAEHABVCmString@2@@Z
?SetMaintenancePeriod@ProductItemParamSetBase@cmhip@@QAEHABVCmDateTime@2@0@Z
?SetHiddenDataAccessCode@ProductItemParamSetBase@cmhip@@QAEHEK@Z
?SetHiddenData@ProductItemParamSetBase@cmhip@@QAEHEABVCmByteArray@2@@Z
?SetExtendedProtectedData@ProductItemParamSetBase@cmhip@@QAEHEABVCmByteArray@2@@Z
?SetRelativeUnitCounter@ProductItemParamSetBase@cmhip@@QAEHK@Z
?SetAbsoluteUnitCounter@ProductItemParamSetBase@cmhip@@QAEHK@Z
?SetFirmCode@CmActParamSet@cmhip@@QAEHK@Z
??1CmActParamSet@cmhip@@QAE@XZ
??0CmActParamSet@cmhip@@QAE@W4CmActCtrlModeId@1@@Z
?LastErrorText@ProgrammingEngine@cmhip@@QBEABVCmString@2@XZ
?LastErrorCode@ProgrammingEngine@cmhip@@QBEHXZ
?TargetBoxes@ProgrammingEngine@cmhip@@QBEPBVCmBoxTable@2@XZ
?Security@ProgrammingEngine@cmhip@@QBEPBVCmSecurity@2@XZ
?ProductItemProgrammer@ProgrammingEngine@cmhip@@QAEPAVCmProductItemProgrammer@2@XZ
?FirmItemProgrammer@ProgrammingEngine@cmhip@@QAEPAVCmFirmItemProgrammer@2@XZ
?Reset@ProgrammingEngine@cmhip@@QAEHXZ
?Initialize@ProgrammingEngine@cmhip@@QAEHW4PortTypeId@2@W4NetworkAccessModeId@2@W4LicenseAccessModeId@2@12K@Z
?Initialize@ProgrammingEngine@cmhip@@QAEHABVCmString@2@00W4NetworkAccessModeId@2@W4LicenseAccessModeId@2@_N@Z
?Initialize@ProgrammingEngine@cmhip@@QAEHABVCmString@2@0ABVCmActParamSet@2@W4NetworkAccessModeId@2@W4LicenseAccessModeId@2@@Z
??1ProgrammingEngine@cmhip@@QAE@XZ
??0ProgrammingEngine@cmhip@@QAE@XZ
?SetData@CmByteArray@cmhip@@QAEHPBEH@Z
?Clear@CmByteArray@cmhip@@QAEXXZ
?At@CmByteArray@cmhip@@QBEABEH@Z
?Setup@CmString@cmhip@@AAEXXZ
kernel32
GetProfileIntW
Sleep
GetFileSizeEx
VirtualProtect
GetUserDefaultLCID
FindResourceExW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
ExitProcess
RaiseException
ExitThread
CreateThread
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
WriteConsoleW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
GetTempPathW
GetTempFileNameW
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetNumberFormatW
CreateFileW
lstrcmpiW
DeleteFileW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
lstrcpyW
GetSystemDirectoryW
GetCurrentDirectoryW
FileTimeToSystemTime
GetThreadLocale
GlobalGetAtomNameW
GlobalFlags
InitializeCriticalSection
lstrlenA
GlobalFindAtomW
GetVersionExW
CompareStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
CopyFileW
GlobalSize
FormatMessageW
LocalFree
MulDiv
GlobalUnlock
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
FreeResource
GlobalFree
GlobalAddAtomW
GetCurrentProcessId
GetPrivateProfileStringW
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetModuleFileNameW
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
ActivateActCtx
LoadLibraryW
GetLastError
DeactivateActCtx
SetLastError
GlobalLock
lstrcmpW
GetProcessHeap
GlobalAlloc
GetModuleHandleW
GetProcAddress
FreeLibrary
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
WideCharToMultiByte
LockResource
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
GetWindowsDirectoryW
GetTickCount
GetFileTime
CreateFileA
SearchPathW
user32
CreateAcceleratorTableW
SetCursorPos
BringWindowToTop
LockWindowUpdate
TranslateAcceleratorW
InsertMenuItemW
LoadImageW
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatW
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageW
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
CopyIcon
CharUpperBuffW
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
SubtractRect
DestroyCursor
GetWindowRgn
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
RedrawWindow
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
PtInRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
GetPropW
InvalidateRgn
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
LoadAcceleratorsW
LoadMenuW
MapVirtualKeyW
GetKeyNameTextW
ReleaseDC
GetDC
CopyRect
GetWindowTextLengthW
GetWindowTextW
DrawIconEx
SetScrollPos
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
ShowOwnedPopups
SetCursor
PostMessageW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetTopWindow
GetFocus
GetParent
SetParent
SetFocus
InvalidateRect
GetSystemMenu
IsIconic
DrawIcon
GetClientRect
LoadIconW
AppendMenuW
GetSystemMetrics
SendMessageW
EnableWindow
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFocusRect
DrawFrameControl
IntersectRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
OffsetRect
CharNextW
CharUpperW
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
KillTimer
SetTimer
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
LoadCursorW
GetSysColorBrush
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
RealChildWindowFromPoint
GetWindowRect
DrawEdge
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
DrawStateW
SetClassLongW
GetAsyncKeyState
NotifyWinEvent
CreatePopupMenu
DestroyAcceleratorTable
SetWindowRgn
IsZoomed
CopyImage
UnregisterClassW
MessageBeep
GetScrollPos
GetNextDlgGroupItem
GetClassNameW
GetSysColor
SetPropW
EndDeferWindowPos
GetMessageTime
UnhookWindowsHookEx
GetMessagePos
GetScrollInfo
gdi32
CopyMetaFileW
GetDeviceCaps
CreateBitmap
CreateDCW
CreateRectRgnIndirect
PatBlt
SetPixelV
GetTextFaceW
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
DeleteObject
SelectClipRgn
CreateRectRgn
GetObjectW
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
GetTextExtentPoint32W
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
CreateFontIndirectW
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegCreateKeyExW
shell32
SHBrowseForFolderW
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
DragQueryFileW
DragFinish
ShellExecuteW
SHGetFileInfoW
comctl32
ImageList_GetIconSize
InitCommonControlsEx
shlwapi
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindFileNameW
ole32
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
CoCreateGuid
CLSIDFromProgID
ReleaseStgMedium
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoFreeUnusedLibraries
CoTaskMemFree
CLSIDFromString
oleaut32
OleCreateFontIndirect
VarBstrFromDate
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocString
SysFreeString
oledlg
OleUIBusyW
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundW
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 305KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 542KB - Virtual size: 542KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ