2024-04-22_dbfa5fd2f67f83a3a463f40c00a59626_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-22_dbfa5fd2f67f83a3a463f40c00a59626_mafia
Size

1.7MB
MD5

dbfa5fd2f67f83a3a463f40c00a59626
SHA1

7503f1b0ae74d113086b97bc49f06cb0e0bb979e
SHA256

5d03eac4705ac661b30e0f1f884aa103b5cf0d5cd06289343d4ba2151b3f5252
SHA512

42c204c26a12eb1180746bab931bac8c05f011977dfaa2fc98f02b139ed138c49a30d896ea11a4a5ce41ef9e4cf53cd9f27dc7aaf5c645df86150f1c777ced2d
SSDEEP

49152:o93Kn51Xkpdvpe6LI1Txjh2RIdPXGKy+uzNsPQBTF9A1sd1SF+yNn:aevkpdU6LI1TxcRIdPXGKy+uzNsPQJQb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-22_dbfa5fd2f67f83a3a463f40c00a59626_mafia

Files

2024-04-22_dbfa5fd2f67f83a3a463f40c00a59626_mafia
.exe windows:5 windows x86 arch:x86

c137858088cbbc5ca1f4bb0c1ed4c3dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\luofuyou\IE&Clinet&Param\Client\DVRClient\binRelease\DVRPlay.pdb

Imports

kernel32

WriteConsoleW
LCMapStringW
SetEnvironmentVariableA
GetStringTypeW
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetTimeZoneInformation
IsProcessorFeaturePresent
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsValidCodePage
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
CreateThread
ExitThread
ExitProcess
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
CreateDirectoryA
HeapFree
HeapAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
EncodePointer
RtlUnwind
VirtualProtect
SearchPathA
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetTempPathA
SetErrorMode
GetNumberFormatA
GetWindowsDirectoryA
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
FileTimeToLocalFileTime
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
CreateFileA
lstrcmpiA
GetStringTypeExA
lstrcpyA
DeleteFileA
GetCurrentDirectoryA
FileTimeToSystemTime
GetThreadLocale
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
GetConsoleMode
GetConsoleCP
FindResourceExW
CompareStringW
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetACP
GlobalFlags
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
ReplaceFileA
GetFileAttributesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
lstrcmpW
FreeLibrary
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
FreeResource
SystemTimeToFileTime
Sleep
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
GetLocalTime
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetTickCount
CreateFileW

user32

DefFrameProcA
WaitMessage
IsMenu
MonitorFromPoint
UpdateLayeredWindow
MapVirtualKeyExA
IsCharLowerA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawEdge
DrawStateA
SetClassLongA
DestroyAcceleratorTable
SetWindowRgn
DrawIconEx
CopyImage
GetIconInfo
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
RedrawWindow
WindowFromPoint
UnionRect
GetSystemMenu
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
SetCapture
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
LoadMenuW
LoadAcceleratorsW
CharUpperA
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
KillTimer
DeleteMenu
SystemParametersInfoA
UnregisterClassA
LoadCursorA
GetSysColorBrush
RealChildWindowFromPoint
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadImageA
DestroyIcon
ReleaseCapture
LoadAcceleratorsA
IsIconic
InsertMenuItemA
CreatePopupMenu
OffsetRect
BringWindowToTop
TranslateAcceleratorA
DefMDIChildProcA
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
IntersectRect
InflateRect
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconW
LoadIconA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
DefWindowProcA
CallWindowProcA
GetMenu
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
DestroyCursor
GetWindowRgn
SetRectEmpty
TabbedTextOutA
FillRect
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetDC
CopyRect
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetFocus
ShowWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
InvalidateRect
UpdateWindow
GetSystemMetrics
SetWindowPos
RegisterHotKey
ScreenToClient
MoveWindow
UnregisterHotKey
SetParent
GetWindowRect
EnableWindow
GetParent
SetTimer
GetClientRect
PostMessageA
SendMessageA
LoadBitmapW
GetMenuItemInfoA

gdi32

GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
GetPaletteEntries
GetRgnBox
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
FrameRgn
CreatePalette
GetTextColor
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
StretchDIBits
CreateFontA
GetCharWidthA
GetTextExtentPoint32A
GetTextMetricsA
CreateCompatibleBitmap
DPtoLP
GetMapMode
CombineRgn
GetStockObject
SetRectRgn
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
GetBoundsRect
CreateRectRgnIndirect
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectA
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
PatBlt
SelectPalette

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumValueA
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegOpenKeyExW
RegCloseKey
GetFileSecurityA
SetFileSecurityA

shell32

SHBrowseForFolderA
DragQueryFileA
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHAppBarMessage
DragFinish
ShellExecuteA
SHGetSpecialFolderLocation

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathFileExistsA
PathIsUNCA

ole32

OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
IsAccelerator
RevokeDragDrop
CoLockObjectExternal
CoUninitialize
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
RegisterDragDrop
OleLockRunning
DoDragDrop
CoCreateInstance
OleGetClipboard
CoInitializeEx

oleaut32

VariantClear
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
SystemTimeToVariantTime

oledlg

ord8

madvsplaydll

MAPLAY_SetEndCallBack
MAPLAY_SetVolume
MAPLAY_SetPlayTime
MAPLAY_PlaySound
MAPLAY_StopSound
MAPLAY_SetPlayRate
MAPLAY_ClosePlayHandle
MAPLAY_CloseFile
MAPLAY_CaptureBMP
MAPLAY_OpenPlayHandle
MAPLAY_SetPlayWnd
MAPLAY_OpenFile
MAPLAY_Pause
MAPLAY_GetFileInfo
MAPLAY_Stop
MAPLAY_GetPlayTime
MAPLAY_Play

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c137858088cbbc5ca1f4bb0c1ed4c3dc

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

madvsplaydll

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 283KB - Virtual size: 282KB

.data Size: 25KB - Virtual size: 54KB

.rsrc Size: 48KB - Virtual size: 47KB

.reloc Size: 165KB - Virtual size: 165KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 283KB - Virtual size: 282KB

.data
Size: 25KB - Virtual size: 54KB

.rsrc
Size: 48KB - Virtual size: 47KB

.reloc
Size: 165KB - Virtual size: 165KB