2024-04-18_16414a56b8d5216352a619cfcd3ab173_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-18_16414a56b8d5216352a619cfcd3ab173_mafia
Size

11.8MB
MD5

16414a56b8d5216352a619cfcd3ab173
SHA1

c39c49bdd279bcd1513de61ada2a913bacfd1dbc
SHA256

f00690982ddfdda06d2ea2dcc8caf588c732b76b66b0e065c2eaab1acf037646
SHA512

fc5ab6083b8b7f88ac963cdeef8393c123079c6c493c72af041ccde1a054213acda894c9b682ea9c4efdc76416272d120b6f473887a908603b7d1e68074e64da
SSDEEP

196608:ylqfThhn8RCmXWBqJvFW1AQ4ub8kW8R5U:ylqfThx8RnpvDc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-18_16414a56b8d5216352a619cfcd3ab173_mafia

Files

2024-04-18_16414a56b8d5216352a619cfcd3ab173_mafia
.exe windows:5 windows x86 arch:x86

a04c8b27018a61d5184dae8076c96d22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\b94e\exec\ATrain9v4Viewer.pdb

Imports

kernel32

TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
VirtualAlloc
HeapCreate
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
LoadLibraryA
ExitProcess
HeapReAlloc
GetEnvironmentStringsW
SetHandleCount
FreeEnvironmentStringsW
GetStdHandle
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
VirtualQuery
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
CreateThread
ExitThread
HeapFree
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
GetNumberFormatW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GlobalFlags
lstrcpyW
SetErrorMode
lstrlenA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetThreadLocale
GlobalGetAtomNameW
GlobalFindAtomW
CompareStringW
GlobalAddAtomW
ReleaseActCtx
CreateActCtxW
ResumeThread
SetThreadPriority
FreeResource
GetCurrentProcessId
lstrcmpA
GlobalDeleteAtom
GetCurrentThreadId
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
ActivateActCtx
DeactivateActCtx
lstrcmpW
FreeLibrary
LoadLibraryExW
InterlockedExchange
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
GetProcAddress
WideCharToMultiByte
SetLastError
GlobalSize
FormatMessageW
LocalFree
lstrlenW
MulDiv
CopyFileW
SetFileAttributesW
FindNextFileW
DeleteFileW
FindClose
FindFirstFileW
InitializeCriticalSection
CreateFileW
SetThreadExecutionState
SetUnhandledExceptionFilter
GetCurrentProcess
SetThreadIdealProcessor
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThread
WaitForMultipleObjects
SetThreadAffinityMask
CreateEventW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
InterlockedDecrement
InterlockedIncrement
LoadLibraryW
GetSystemDirectoryW
GetLocaleInfoW
GetUserDefaultLCID
GetDiskFreeSpaceW
GetSystemInfo
GetDriveTypeW
GetLogicalDriveStringsW
GlobalMemoryStatusEx
GetVersionExW
GetModuleHandleW
MultiByteToWideChar
GetDiskFreeSpaceExW
GetModuleFileNameW
Sleep
CreateDirectoryW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetEvent
GetTickCount
SetCurrentDirectoryW
WaitForSingleObject
CreateMutexW
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
OpenMutexW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentDirectoryW
GetComputerNameA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation

user32

ReuseDDElParam
LoadMenuW
DestroyMenu
LoadImageW
DestroyIcon
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
IntersectRect
OffsetRect
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
ShowWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
UnpackDDElParam
SetCursor
SetMenuItemBitmaps
SetCapture
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
IsWindowVisible
ValidateRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetTimer
KillTimer
WaitMessage
DispatchMessageW
PostMessageW
PostQuitMessage
GetMenuState
GetMenuStringW
GetNextDlgGroupItem
MessageBeep
AppendMenuW
GetMenuItemID
UnregisterClassW
PeekMessageW
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
PtInRect
UpdateWindow
SetWindowPos
MoveWindow
GetSystemMetrics
CopyRect
GetWindowRect
MessageBoxW
SetCursorPos
ClientToScreen
ScreenToClient
CharUpperW
GetSysColorBrush
DeleteMenu
SystemParametersInfoW
EnumDisplayMonitors
SetLayeredWindowAttributes
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
GetClientRect
GetCursorPos
GetDoubleClickTime
SwapMouseButton
SetWindowLongW
AdjustWindowRectEx
SetRect
ReleaseDC
GetDC
InvalidateRect
RealChildWindowFromPoint
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
ShowOwnedPopups
InvalidateRgn
GetWindowRgn
EnableWindow
IsIconic
DestroyCursor
DrawIcon
SubtractRect
MapVirtualKeyExW
IsCharLowerW
InflateRect
CharUpperBuffW
CopyIcon
GetUpdateRect
DestroyWindow
GetKeyState
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsClipboardFormatAvailable
GetClipboardData
LoadIconW
LoadCursorW
FrameRect
SetMenuDefaultItem
CreateMenu
IsMenu
UpdateLayeredWindow
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
LockWindowUpdate
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateW
SetClassLongW
GetAsyncKeyState
NotifyWinEvent
WindowFromPoint
DestroyAcceleratorTable
SetWindowRgn
IsZoomed
UnionRect
SetParent
GetSystemMenu
MapVirtualKeyW
GetKeyNameTextW
CopyImage
GetMenuItemInfoW
GetMenuCheckMarkDimensions

gdi32

RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SelectPalette
GetObjectType
SaveDC
GetBkColor
GetTextColor
GetRgnBox
PatBlt
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SetPixelV
GetTextCharsetInfo
EnumFontFamiliesW
BitBlt
CreateRectRgnIndirect
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject
CreateDIBitmap
CreateCompatibleBitmap
GetObjectW
CreateDCW
CopyMetaFileW
GetDeviceCaps
ExtTextOutW
GetTextMetricsW
SetTextColor
SetBkColor
GetCharABCWidthsW
GetGlyphOutlineW
CreateFontW
GetTextExtentPoint32W
DeleteObject
DeleteDC
SelectObject
CreateDIBSection
CreateHatchBrush
CreateBitmap
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegOpenKeyExW

shell32

SHAppBarMessage
DragFinish
DragQueryFileW
SHGetFileInfoW
SHBrowseForFolderW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW

ole32

CoInitializeEx
CoUninitialize
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
DoDragDrop
CoCreateInstance
CoInitialize
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard

oleaut32

VariantCopy
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
VariantChangeType
SysAllocStringLen
SysAllocString
SysFreeString
SysStringLen
VariantTimeToSystemTime
VariantClear
SafeArrayDestroy
VariantInit

oledlg

OleUIBusyW

wsock32

WSACleanup
WSAStartup
WSASetLastError

winmm

mmioAscend
mmioRead
mmioClose
mmioSeek
mmioOpenW
timeGetTime
PlaySoundW
mmioDescend

imm32

ImmGetCompositionStringW
ImmGetOpenStatus
ImmSetOpenStatus
ImmGetCandidateListW
ImmGetContext
ImmReleaseContext
ImmNotifyIME

iphlpapi

GetIfTable

msacm32

acmStreamUnprepareHeader
acmStreamSize
acmStreamClose
acmStreamOpen
acmFormatSuggest
acmStreamConvert
acmStreamPrepareHeader

imagehlp

StackWalk
SymCleanup
SymFunctionTableAccess
SymGetModuleBase
SymInitialize

d3d9

Direct3DCreate9

dinput8

DirectInput8Create

x3daudio1_5

X3DAudioInitialize
X3DAudioCalculate

d3dx9_40

D3DXFileCreate
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPlaneFromPoints
D3DXCreateFontIndirectW
D3DXVec3TransformNormalArray
D3DXVec4Transform
D3DXCreateTexture
D3DXMatrixMultiplyTranspose
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXSaveTextureToFileW
D3DXFloat32To16Array
D3DXMatrixOrthoLH
D3DXCreateTextureFromFileInMemoryEx
D3DXLoadSkinMeshFromXof
D3DXComputeTangentFrameEx
D3DXMatrixMultiply
D3DXVec3TransformCoord
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXVec3Normalize
D3DXVec4TransformArray
D3DXPlaneFromPointNormal
D3DXMatrixRotationZ
D3DXMatrixRotationX
D3DXMatrixRotationQuaternion
D3DXMatrixRotationYawPitchRoll
D3DXQuaternionRotationMatrix
D3DXVec3TransformNormal
D3DXVec2Normalize
D3DXMatrixRotationY
D3DXQuaternionSlerp
D3DXPlaneIntersectLine
D3DXMatrixTranspose
D3DXVec3TransformArray
D3DXMatrixRotationAxis
D3DXMatrixScaling
D3DXMatrixTranslation
D3DXMatrixReflect
D3DXVec2TransformArray
D3DXVec3Transform
D3DXSaveSurfaceToFileW
D3DXVec3TransformCoordArray
D3DXMatrixInverse

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 946KB - Virtual size: 945KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.5MB - Virtual size: 67.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 573KB - Virtual size: 573KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a04c8b27018a61d5184dae8076c96d22

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

wsock32

winmm

imm32

iphlpapi

msacm32

imagehlp

d3d9

dinput8

x3daudio1_5

d3dx9_40

version

oleacc

gdiplus

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 946KB - Virtual size: 945KB

.data Size: 5.5MB - Virtual size: 67.7MB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 573KB - Virtual size: 573KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 946KB - Virtual size: 945KB

.data
Size: 5.5MB - Virtual size: 67.7MB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 573KB - Virtual size: 573KB