2024-04-09_5c89cb77c1acfb10001bdc06e16e82a3_mafia_wapomi

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-09_5c89cb77c1acfb10001bdc06e16e82a3_mafia_wapomi
Size

3.0MB
MD5

5c89cb77c1acfb10001bdc06e16e82a3
SHA1

8ae946115ef16518197f63fd7f393dfb6254750e
SHA256

8d5e78b7a7c6528b2274bd943258be318b5692039d47e4c000300e438d09ce44
SHA512

a2f499067103e469aaddf9307b8f3baa0d5f9a7d19950839e4b7e755a2f77b2519551247f7f2d462e40bea43cd8b6a3da77b84960aa51e880d7bd5f43cd211b1
SSDEEP

98304:660JdK/69bWYzidNHxUEMag1o5EAuSSp77OHfbhtrQjUHPtalWyTAZx5:6PbWZDuB7CffrQjVUyTAZx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-09_5c89cb77c1acfb10001bdc06e16e82a3_mafia_wapomi

Files

2024-04-09_5c89cb77c1acfb10001bdc06e16e82a3_mafia_wapomi
.exe windows:5 windows x86 arch:x86

2261a50a755afb3742359128312df24b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\HGT - Sapphire 0.0\Source\eMu - DataServer Sapphire S0\Source_DB\Release\Dataserver.pdb

Imports

ws2_32

inet_ntoa
setsockopt
WSAAccept
WSASend
WSAAsyncSelect
accept
send
closesocket
ntohl
inet_addr
WSACleanup
WSAStartup
socket
shutdown
WSARecv
WSASocketA
WSAGetLastError
recv
listen
htons
bind
htonl

kernel32

ExitThread
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
IsProcessorFeaturePresent
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsValidCodePage
SetHandleCount
GetStdHandle
GetLocaleInfoW
HeapCreate
HeapDestroy
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
FatalAppExitA
SetConsoleCtrlHandler
GetStringTypeW
LCMapStringW
CompareStringW
GetConsoleCP
GetConsoleMode
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
HeapReAlloc
VirtualQuery
GetTimeZoneInformation
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetTickCount
GetStartupInfoW
EnterCriticalSection
Sleep
CreateThread
CloseHandle
TerminateThread
WaitForSingleObject
FindResourceW
SizeofResource
LockResource
LoadResource
WideCharToMultiByte
lstrcpyA
InterlockedIncrement
GetLastError
PostQueuedCompletionStatus
SetThreadPriority
CreateIoCompletionPort
GetSystemInfo
GetQueuedCompletionStatus
HeapFree
GetProcessHeap
HeapAlloc
CreateDirectoryA
GetLocalTime
GetPrivateProfileIntA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
SetErrorMode
InitializeCriticalSectionAndSpinCount
HeapSetInformation
GetCommandLineA
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
DecodePointer
EncodePointer
LocalLock
LocalUnlock
FindResourceExW
GetDiskFreeSpaceA
ReplaceFileA
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetProfileIntA
GetTempPathA
GetTempFileNameA
GetFileTime
GetFileSizeEx
GetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetFileAttributesA
GetFileAttributesExA
ReadFile
GetFileSize
lstrcmpW
MultiByteToWideChar
SetLastError
GetNumberFormatA
GetWindowsDirectoryA
DeactivateActCtx
ActivateActCtx
LoadLibraryW
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
MoveFileA
lstrcmpiA
GetStringTypeExA
DeleteFileA
GetCurrentDirectoryA
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GetACP
GetAtomNameA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateEventA
SuspendThread
SetEvent
ResumeThread
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
lstrlenW
GetModuleFileNameA
CompareStringA
GlobalLock
GlobalUnlock
MulDiv
lstrlenA
FindResourceA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetModuleHandleA
FreeLibrary

user32

TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
WaitMessage
PostThreadMessageA
IsMenu
MonitorFromPoint
UpdateLayeredWindow
MapVirtualKeyExA
IsCharLowerA
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
DrawFrameControl
DrawEdge
DrawStateA
LoadMenuW
SetClassLongA
DestroyAcceleratorTable
SetWindowRgn
DrawIconEx
GetNextDlgGroupItem
CopyImage
GetIconInfo
MessageBeep
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
RedrawWindow
UnregisterClassA
SetCapture
LockWindowUpdate
GetDCEx
WindowFromPoint
SetRect
UnionRect
MapVirtualKeyA
GetKeyNameTextA
CharUpperA
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
KillTimer
GetDialogBaseUnits
GetSysColorBrush
RealChildWindowFromPoint
SystemParametersInfoA
GetMenuItemInfoA
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetMenuBarInfo
LoadImageA
DestroyIcon
ReleaseCapture
LoadAcceleratorsA
IsIconic
InsertMenuItemA
CreatePopupMenu
OffsetRect
BringWindowToTop
TranslateAcceleratorA
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
InSendMessage
PostQuitMessage
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
GetWindowThreadProcessId
IntersectRect
InflateRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
ScrollWindowEx
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconW
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
SendNotifyMessageA
GetTabbedTextExtentA
GetTabbedTextExtentW
GetWindowRgn
WindowFromDC
DestroyCursor
DrawIcon
MapDialogRect
EnumChildWindows
SubtractRect
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetDoubleClickTime
CharUpperBuffA
CopyIcon
RegisterClipboardFormatA
GetUpdateRect
ValidateRect
FrameRect
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetParent
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
SendMessageA
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
GetWindow
MessageBoxA
GetDC
ReleaseDC
GetSystemMetrics
UpdateWindow
EnableWindow
SetTimer
InvalidateRect
GetClientRect
DrawTextA
FillRect
GetSysColor
wsprintfA
LoadCursorA
SetRectEmpty
LoadImageW

gdi32

SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
StartDocA
PtVisible
RectVisible
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CopyMetaFileA
CreateDCA
CreateCompatibleBitmap
GetCharWidthA
SetLayout
StretchDIBits
GetTextExtentPoint32A
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
GetCurrentObject
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
GetDIBits
StretchBlt
SetPixel
Rectangle
OffsetRgn
GetRgnBox
EnumFontFamiliesExA
RoundRect
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
SetMapperFlags
GetLayout
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
TextOutA
CreateFontA
CreateFontIndirectA
GetTextMetricsA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA

advapi32

RegEnumKeyExA
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegCloseKey
RegOpenKeyExW
RegEnumValueA
RegQueryValueA

shell32

SHGetMalloc
DragQueryFileA
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
SHGetDesktopFolder
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
DragFinish
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

StgOpenStorageOnILockBytes
StgCreateDocfile
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CLSIDFromString
CoCreateInstance
StringFromGUID2
CoDisconnectObject
CoCreateGuid
CoRevokeClassObject
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
CoRegisterClassObject
CoGetClassObject
OleRegGetUserType
WriteClassStg
CreateILockBytesOnHGlobal
SetConvertStg
CoTaskMemFree
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateDataAdviseHolder
CreateOleAdviseHolder
CoGetMalloc
GetRunningObjectTable
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleRun
OleRegGetMiscStatus
OleRegEnumVerbs
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
PropVariantCopy
StgCreateDocfileOnILockBytes
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
CLSIDFromProgID
WriteFmtUserTypeStg
CoRegisterMessageFilter
OleSetContainedObject
GetHGlobalFromILockBytes
OleDuplicateData
OleLoad

oleaut32

SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VariantInit
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
SysAllocString
SafeArrayGetElement
SysAllocStringLen
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
VariantChangeType
SafeArrayAccessData
VariantClear

oledlg

ord8

odbc32

ord41
ord7
ord36
ord9
ord75
ord12
ord76
ord13
ord61
ord31
ord24
ord8
ord4
ord72
ord48
ord49
ord43
ord26
ord16
ord11
ord20
ord18

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 97.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�J<��u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2261a50a755afb3742359128312df24b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

odbc32

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 480KB - Virtual size: 480KB

.data Size: 33KB - Virtual size: 97.3MB

.rsrc Size: 27KB - Virtual size: 27KB

.reloc Size: 414KB - Virtual size: 414KB

�J<��u� Size: 16KB - Virtual size: 20KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 480KB - Virtual size: 480KB

.data
Size: 33KB - Virtual size: 97.3MB

.rsrc
Size: 27KB - Virtual size: 27KB

.reloc
Size: 414KB - Virtual size: 414KB

�J<��u�
Size: 16KB - Virtual size: 20KB