2024-04-17_c3f616e8a7a54e6f9b7b5e9fab2deb2c_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-17_c3f616e8a7a54e6f9b7b5e9fab2deb2c_mafia
Size

3.8MB
MD5

c3f616e8a7a54e6f9b7b5e9fab2deb2c
SHA1

c57d374bee1e77040787ab25b7eee919dffd055a
SHA256

f73ce157e38bc8e30a78fe3aa08a913163200f63a2fe325b4de9952d502b24cd
SHA512

1e8d7a852c1424686cf8a0cdd60fb130f8e7a9f8e7da5a7ad9ab905ffea38d0a76d0d131a9133e3328dea9055b1e28f1ab137165168a5fca6c4fe266b0a8f18f
SSDEEP

98304:CKDfwPZZ9j8WhEGQS0OF/FeqdSMqbRrnWVxoiMQD7KRGLXiIo1dXAVR:tDfwPvi+AS0ORb3VkQaiXiIo3Qn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-17_c3f616e8a7a54e6f9b7b5e9fab2deb2c_mafia

Files

2024-04-17_c3f616e8a7a54e6f9b7b5e9fab2deb2c_mafia
.exe windows:5 windows x86 arch:x86

1478cd2d3a3ebe0e795911116beff388

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\PrismMain\PrismDeploy\9999\Release\ccpro.pdb

Imports

winmm

PlaySoundA

rpcrt4

UuidToStringA
RpcStringFreeA
UuidFromStringA
UuidCreate

kernel32

GetLogicalDriveStringsA
InterlockedIncrement
GlobalMemoryStatus
GetUserDefaultLangID
GetSystemDefaultLangID
ExpandEnvironmentStringsA
RaiseException
TlsAlloc
lstrcpyA
GlobalHandle
TlsSetValue
TlsFree
IsBadReadPtr
TlsGetValue
GlobalSize
lstrcatA
lstrcmpA
IsDBCSLeadByte
lstrcmpiA
IsBadStringPtrA
GetCurrentDirectoryA
VirtualUnlock
FreeResource
FindResourceA
VirtualFree
VirtualLock
VirtualAlloc
DeactivateActCtx
ActivateActCtx
lstrcmpW
LoadLibraryW
CompareStringA
GlobalFindAtomA
LocalReAlloc
GetModuleHandleW
LoadLibraryExA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
SuspendThread
GetPrivateProfileIntA
VirtualProtect
GlobalFlags
GetCPInfo
GetOEMCP
GetSystemDirectoryW
GetUserDefaultLCID
GetFileAttributesExA
GetFileSizeEx
GetProfileIntA
EncodePointer
DecodePointer
GetDriveTypeW
ExitThread
CreateThread
VirtualQuery
GetTimeFormatW
GetDateFormatW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
GetCurrentDirectoryW
HeapSize
ExitProcess
SetStdHandle
HeapQueryInformation
GetSystemTimeAsFileTime
IsValidCodePage
IsProcessorFeaturePresent
LCMapStringW
HeapCreate
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
GetStdHandle
SetHandleCount
GetConsoleCP
GetConsoleMode
CompareStringW
WriteConsoleW
CreateFileW
GetTimeZoneInformation
QueryPerformanceCounter
QueryPerformanceFrequency
ResetEvent
GetLocaleInfoW
FileTimeToSystemTime
GetSystemTime
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
GetLastError
LocalFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenW
GetCurrentProcess
GetModuleFileNameA
GlobalAddAtomA
Sleep
OpenMutexA
WaitForSingleObject
ReleaseMutex
FormatMessageA
LocalAlloc
FindResourceExW
InterlockedCompareExchange
GetPriorityClass
SetPriorityClass
GetSystemInfo
CreateProcessA
SetThreadPriority
InitializeCriticalSection
GetModuleHandleA
GetCurrentThread
HeapAlloc
GetProcessHeap
HeapFree
GetVolumeInformationA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SystemTimeToFileTime
DosDateTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
CompareFileTime
FileTimeToDosDateTime
FindResourceExA
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
GlobalLock
GlobalUnlock
GlobalFree
GlobalReAlloc
GlobalAlloc
GetTickCount
InterlockedExchange
lstrcpynA
GetLocaleInfoA
GetNumberFormatA
GetCurrencyFormatA
GetDateFormatA
GetTimeFormatA
GetCurrentProcessId
ResumeThread
CreateMutexA
WaitForMultipleObjects
GetComputerNameA
GetFullPathNameA
SetVolumeLabelA
CreateFileA
GetFileSize
SetFilePointer
MoveFileExA
SetEndOfFile
UnlockFile
LockFile
GetACP
WriteFile
GetDriveTypeA
GetFileAttributesA
ReadFile
GetEnvironmentVariableA
FlushFileBuffers
GetShortPathNameA
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
SetLastError
RemoveDirectoryA
CopyFileA
SearchPathA
SetFileAttributesA
GetTempFileNameA
FindClose
GetPrivateProfileStringA
GetFileType
WritePrivateProfileStringA
MoveFileA
SetCurrentDirectoryW
GetDiskFreeSpaceA
DeviceIoControl
SetEnvironmentVariableA
FindNextFileA
DuplicateHandle
CloseHandle
GetFileInformationByHandle
DeleteFileA
GetThreadLocale
GetVersionExA
GetVersion
MulDiv
GetCurrentThreadId
GetFileTime
SetFileTime
GetExitCodeProcess
GlobalGetAtomNameA
GlobalDeleteAtom
CreateEventA
SetEvent
SetErrorMode
GetLocalTime
EnumResourceLanguagesA

user32

GetClassLongA
GetCapture
IsChild
WinHelpA
GetNextDlgTabItem
CreateDialogIndirectParamA
CheckMenuItem
ModifyMenuA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMessageA
ShowOwnedPopups
GetMenuItemInfoA
DestroyMenu
SystemParametersInfoA
GetKeyNameTextA
MapVirtualKeyA
OffsetRect
ReleaseCapture
SetCapture
LoadCursorW
TranslateAcceleratorA
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
IsRectEmpty
SetParent
GetAsyncKeyState
MapDialogRect
WindowFromPoint
WaitMessage
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
UnregisterClassA
RealChildWindowFromPoint
GetSysColorBrush
EnumDisplayMonitors
SetLayeredWindowAttributes
IsClipboardFormatAvailable
DrawIcon
SetWindowRgn
UnionRect
GetDCEx
LockWindowUpdate
NotifyWinEvent
SetClassLongA
LoadMenuW
DrawStateA
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
GetNextDlgGroupItem
MonitorFromPoint
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageA
SetMenuDefaultItem
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
RegisterClipboardFormatA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetWindowRgn
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
ValidateRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
CopyRect
GetWindowTextLengthA
GetWindowTextA
ShowWindow
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetPropA
SendDlgItemMessageA
GetDlgItem
CheckRadioButton
CheckDlgButton
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
GetMenuItemCount
GetLastActivePopup
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
OemToCharBuffA
CharToOemA
CharLowerA
WaitForInputIdle
EnumWindows
GetWindowThreadProcessId
SetDlgItemTextA
EndDialog
GetSysColor
DialogBoxParamA
GetActiveWindow
CharUpperA
OemToCharA
CharNextA
CharPrevA
CharUpperBuffA
EnumChildWindows
SetWindowLongA
GetMessagePos
CopyIcon
CopyImage
GetClassNameA
SetRectEmpty
SetRect
TabbedTextOutA
FillRect
IntersectRect
SetWindowPos
GetDlgCtrlID
MessageBoxA
IsWindowEnabled
PostQuitMessage
LoadMenuIndirectA
CreateAcceleratorTableA
MessageBeep
IsZoomed
BringWindowToTop
IsIconic
DestroyIcon
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
DestroyCursor
SetCursor
LoadCursorA
SetFocus
GetWindowLongA
GetKeyState
SetCursorPos
GetCursorPos
GetWindowContextHelpId
GetWindow
SetWindowContextHelpId
ClientToScreen
ScreenToClient
IsWindowVisible
InflateRect
RedrawWindow
GetClientRect
PtInRect
SetWindowTextA
DrawMenuBar
RemoveMenu
InsertMenuA
DeleteMenu
GetSubMenu
DestroyAcceleratorTable
LoadIconW
GetFocus
GetParent
UpdateWindow
DispatchMessageA
TranslateMessage
PeekMessageA
ReleaseDC
SetTimer
KillTimer
EnableMenuItem
GetSystemMenu
GetDesktopWindow
GetWindowRect
GetSystemMetrics
LoadImageA
LoadIconA
GetDC
RegisterWindowMessageA
PostMessageA
SetForegroundWindow
FindWindowA
ExitWindowsEx
EnableWindow
SendMessageA
InvalidateRect
IsWindow
GetPropA
RemovePropA
SetMenu
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetForegroundWindow
wsprintfA

gdi32

OffsetWindowOrgEx
GetObjectA
CreateFontIndirectA
SetPixelV
GetTextFaceA
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
Rectangle
SetPixel
SetDIBColorTable
GetRgnBox
OffsetRgn
GetSystemPaletteEntries
GetNearestPaletteIndex
Polygon
Polyline
GetTextColor
CreatePolygonRgn
CreateRoundRectRgn
EnumFontFamiliesExA
Ellipse
LPtoDP
CreateEllipticRgn
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
CreateCompatibleBitmap
CreateFontA
GetCharWidthA
PatBlt
CreateDCA
CopyMetaFileA
CreateHatchBrush
CreatePen
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
GetStockObject
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
GetBkColor
SetBkColor
SetBkMode
CreateSolidBrush
StretchBlt
GetPaletteEntries
StretchDIBits
SetDIBitsToDevice
UnrealizeObject
CreateHalftonePalette
CreateDIBSection
CreateCompatibleDC
GetTextExtentExPointA
TextOutA
DeleteDC
EndDoc
EndPage
StartPage
StartDocA
SelectObject
DeleteObject
GetTextMetricsA
SetMapMode
CreateRectRgnIndirect
CreatePalette
RealizePalette
GetBitmapBits
GetDeviceCaps
CreateBitmap
GetTextExtentPoint32A

msimg32

TransparentBlt
AlphaBlend

shell32

SHAppBarMessage
DragQueryFileA
Shell_NotifyIconA
SHGetFileInfoA
DragFinish
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
ShellExecuteA

ole32

OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleDestroyMenuDescriptor
OleGetClipboard
CoLockObjectExternal
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CLSIDFromProgID
CoTaskMemFree
OleRun
CoUninitialize
CoSetProxyBlanket
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoInitializeEx
OleUninitialize
StringFromGUID2
OleInitialize

wsock32

gethostname
gethostbyname
WSAGetLastError
ioctlsocket
ntohl
WSACleanup
WSAStartup
inet_addr

gdiplus

GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImagePalette
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCreateFromHDC

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512KB - Virtual size: 511KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 880KB - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1478cd2d3a3ebe0e795911116beff388

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

rpcrt4

kernel32

user32

gdi32

msimg32

shell32

ole32

wsock32

gdiplus

imm32

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 512KB - Virtual size: 511KB

.data Size: 80KB - Virtual size: 119KB

.rsrc Size: 880KB - Virtual size: 879KB

.reloc Size: 271KB - Virtual size: 270KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 512KB - Virtual size: 511KB

.data
Size: 80KB - Virtual size: 119KB

.rsrc
Size: 880KB - Virtual size: 879KB

.reloc
Size: 271KB - Virtual size: 270KB