2024-04-25_d270362dcd3836baf0b2e54fe1d3e443_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-25_d270362dcd3836baf0b2e54fe1d3e443_mafia
Size

2.7MB
MD5

d270362dcd3836baf0b2e54fe1d3e443
SHA1

03d47f26e74d5e88872d32b193ed6fedd4572269
SHA256

bddb2a9fb64b19b7a6e9fa3b34eef19689d97b2d0727c58c5274fa6c5733fe4e
SHA512

c58dde01bf776071faf12d33044b7dfadfd1282407a98f5014dd642f6749dd3ac65ca471a2914d0c7456421b8804acd85826ddec98b7a4ec2c8b9b3dcf5f3240
SSDEEP

49152:pxrfflnZxEC/9Xkz/g1ibfDfP/k1RBIxQxQzZ++rTVm1gQZh1MGSLTiXQHTDZS:tvVXkbgyfDfPkjevZ++rTYFh1kLTiXQg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-25_d270362dcd3836baf0b2e54fe1d3e443_mafia

Files

2024-04-25_d270362dcd3836baf0b2e54fe1d3e443_mafia
.exe windows:5 windows x86 arch:x86

0c203798f5b218b4931be12d9cc89fc3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
IsValidCodePage
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetACP
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
CreateFileA
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
ExitThread
ExitProcess
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
EncodePointer
DecodePointer
HeapAlloc
HeapFree
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
HeapSetInformation
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetTempFileNameW
GetNumberFormatW
GetWindowsDirectoryW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetCurrentDirectoryW
GetFileAttributesW
lstrcpyW
lstrlenA
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
FindNextFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
lstrcmpiW
LocalAlloc
FileTimeToLocalFileTime
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
SuspendThread
ResumeThread
SetThreadPriority
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
InterlockedIncrement
GetThreadLocale
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
GetModuleHandleW
CompareStringW
ActivateActCtx
DeactivateActCtx
lstrcmpW
FileTimeToSystemTime
GlobalSize
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
SizeofResource
SetLastError
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetTimeZoneInformation
GetStartupInfoW
CreateProcessW
TerminateProcess
GetSystemDirectoryW
GetLogicalDriveStringsW
GetDriveTypeW
CreateEventW
GetSystemTime
GetTempPathW
CreateDirectoryW
TerminateThread
MoveFileW
CopyFileW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
WritePrivateProfileStringW
GetPrivateProfileStringW
LoadLibraryW
GetProcAddress
FreeLibrary
GetCommandLineW
DeleteFileW
GetLocalTime
SetThreadUILanguage
CreateMutexW
GetCurrentProcess
SetProcessWorkingSetSize
WideCharToMultiByte
GetModuleFileNameW
GetPrivateProfileIntW
CreateThread
Sleep
CloseHandle
ReleaseMutex
MultiByteToWideChar
GetTickCount
SetEvent
WaitForSingleObject
FindResourceW
LoadResource
LockResource
GetLocaleInfoA

user32

SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
DrawStateW
MapVirtualKeyW
GetKeyNameTextW
LoadImageW
GetIconInfo
CopyImage
DrawIconEx
DestroyIcon
GetNextDlgGroupItem
SetRectEmpty
IsRectEmpty
WindowFromPoint
GetWindowThreadProcessId
LoadMenuW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
ValidateRect
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
DefMDIChildProcW
CharNextW
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
CopyRect
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
SetFocus
GetMenuState
GetMenuStringW
InsertMenuW
RemoveMenu
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
InflateRect
RedrawWindow
MessageBoxExW
RegisterWindowMessageW
GetWindowLongW
GetSysColor
GetParent
DrawFocusRect
DrawFrameControl
DrawTextW
RegisterClassW
LoadCursorW
SetCursor
FillRect
RegisterHotKey
UnregisterHotKey
UpdateWindow
GetCursorPos
DefFrameProcW
MapVirtualKeyExW
IsCharLowerW
PtInRect
SetWindowPos
PostThreadMessageW
CharUpperBuffW
EnableWindow
SendMessageW
OffsetRect
ReleaseCapture
GetSystemMetrics
LoadIconW
SetParent
GetDesktopWindow
SetCapture
GetActiveWindow
ScreenToClient
ClientToScreen
IsZoomed
IsIconic
AppendMenuW
CreatePopupMenu
DrawIcon
IsWindowVisible
IsWindow
PostQuitMessage
TranslateMessage
GetMessageW
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
WaitMessage
CharUpperW
IntersectRect
RealChildWindowFromPoint
GetWindowRgn
GetSubMenu
GetMenuItemID
GetMenuItemCount
KillTimer
SetTimer
GetSystemMenu
EnableMenuItem
ReleaseDC
GetDC
GetClientRect
DestroyCursor
SubtractRect
GetUpdateRect
CreateMenu
TranslateMDISysAccel
EqualRect
DrawMenuBar
GetWindowRect
FrameRect
RegisterClipboardFormatW
UnpackDDElParam
ReuseDDElParam
InvalidateRect
PostMessageW
InsertMenuItemW
TranslateAcceleratorW
GetDoubleClickTime
CopyIcon
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
SetClassLongW
DestroyAcceleratorTable
HideCaret
InvertRect
UnregisterClassW
IsClipboardFormatAvailable
InvalidateRgn
SetRect
CopyAcceleratorTableW
GetMenuDefaultItem
SetMenuDefaultItem
NotifyWinEvent
MessageBeep
DeleteMenu
GetSysColorBrush
IsMenu
GetAsyncKeyState
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetWindowRgn
DrawEdge
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
SetLayeredWindowAttributes
EnumDisplayMonitors
AdjustWindowRectEx

gdi32

SetStretchBltMode
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
GetTextExtentPoint32W
CreateRectRgnIndirect
PatBlt
SetROP2
GetBkColor
GetTextColor
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
StretchBlt
SetPixel
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
CreateRoundRectRgn
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
OffsetRgn
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
GetTextFaceW
RestoreDC
SetPolyFillMode
SaveDC
CreateBitmap
SetBkColor
CreateDCW
CopyMetaFileW
GetDeviceCaps
Rectangle
CreateSolidBrush
CreateDIBSection
DeleteObject
GetObjectW
SetDIBColorTable
DeleteDC
CreateFontW
SetTextColor
SetBkMode
CreatePen
SelectObject
MoveToEx
LineTo
StretchDIBits
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectW
PtVisible
GetStockObject

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegEnumValueW
RegQueryValueW
RegEnumKeyW

shell32

DragQueryFileW
SHBrowseForFolderW
Shell_NotifyIconW
ShellExecuteW
SHGetFileInfoW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
DragFinish
SHAppBarMessage

comctl32

ImageList_GetIconSize

shlwapi

PathFileExistsW
PathRemoveFileSpecW
PathFindFileNameW
PathIsDirectoryW
PathFindExtensionW
PathStripToRootW
PathIsUNCW

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoRegisterMessageFilter
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
CoInitialize
CLSIDFromProgID
CoCreateGuid
CLSIDFromString
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
CoRevokeClassObject

oleaut32

SysAllocStringLen
VariantChangeType
VariantInit
VariantCopy
SystemTimeToVariantTime
SysAllocString
SafeArrayDestroy
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
VariantTimeToSystemTime
VariantClear
SysFreeString

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

ws2_32

socket
WSASetLastError
WSAAsyncSelect
send
getsockopt
WSACleanup
recv
WSAGetLastError
select
__WSAFDIsSet
accept
ioctlsocket
connect
bind
htonl
WSAStartup
gethostname
recvfrom
gethostbyname
inet_addr
ntohl
ntohs
htons
inet_ntoa
getsockname
closesocket
sendto

gdiplus

GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat

iphlpapi

GetAdaptersInfo

wpcap

pcap_next_ex
pcap_close
pcap_open_live
pcap_sendpacket
pcap_setfilter
pcap_compile

draw

draw_destroy
draw_create
draw_display_yuv420
draw_display_bgr24_part

swscale-2

sws_freeContext
sws_scale
sws_getContext

ice_ipcsdk

ICE_IPCSDK_SetOffline_UART
ICE_IPCSDK_SetUARTCfg
ICE_IPCSDK_SetLEDPro1Param
ICE_IPCSDK_SetSDCfg
ICE_IPCSDK_SDUnload
ICE_IPCSDK_GetSDCfg
ICE_IPCSDK_GetTime
ICE_IPCSDK_GetNTPCfg
ICE_IPCSDK_SetNTPCfg
ICE_IPCSDK_GetEncoderSettings
ICE_IPCSDK_SetEncoderSettings
ICE_IPCSDK_GetExpAttr
ICE_IPCSDK_SetExpAttr
ICE_IPCSDK_GetImagingSettings
ICE_IPCSDK_SetImagingSettings
ICE_IPCSDK_GetLEDPro1Param
ICE_IPCSDK_GetUARTCfg
ICE_IPCSDK_Capture
ICE_IPCSDK_SetOSDCfg
ICE_IPCSDK_GetOSDCfg
ICE_IPCSDK_SetPhyChnCfg
ICE_IPCSDK_GetPhyChnCfg
ICE_IPCSDK_SetOfflineMulticast_Config
ICE_IPCSDK_GetOfflineMulticast_Config
ICE_IPCSDK_Delete_OfflineInfo
ICE_IPCSDK_SetOfflineCharge_Rule
ICE_IPCSDK_GetOfflineCharge_Rule
ICE_IPCSDK_GetLedCreen_Config
ICE_IPCSDK_SetLedCreen_Config
ICE_IPCSDK_SetDNSAddr
ICE_IPCSDK_SetIPAddr
ICE_IPCSDK_GetIPAddr
ICE_IPCSDK_GetDNSAddr
ICE_IPCSDK_GetStatus
ICE_IPCSDK_SetTime
ICE_IPCSDK_SetVDCParam
ICE_IPCSDK_GetVDCParam
ICE_IPCSDK_GetHDTriggerParam
ICE_IPCSDK_SetHDTriggerParam
ICE_IPCSDK_SetARegCfg
ICE_IPCSDK_GetARegCfg
ICE_IPCSDK_Fini
ICE_IPCSDK_Init
ICE_IPCSDK_LogConfig
ICE_IPCSDK_StartRecord
ICE_IPCSDK_StopRecord
ICE_IPCSDK_TriggerExt
ICE_IPCSDK_GetStrobeLightParam
ICE_IPCSDK_SetStrobeLightParam
ICE_IPCSDK_ControlAlarmOut
ICE_IPCSDK_SetLEDParam
ICE_IPCSDK_GetLEDParam
ICE_SDK_GetParam
ICE_SDK_SetParam
ICE_IPCSDK_SetDeviceEventCallBack
ICE_IPCSDK_SetFlasePlateCallback
ICE_IPCSDK_SetPlateCallback
ICE_IPCSDK_Open_Passwd_Ex
ICE_IPCSDK_Close
ICE_IPCSDK_SetMainSubModeParam
ICE_IPCSDK_GetMainSubModeParam
ICE_IPCSDK_GetUID
ICE_IPCSDK_GetAutoRebootParam
ICE_IPCSDK_SetAutoRebootParam
ICE_IPCSDK_Reboot
ICE_IPCSDK_SyncTime

zlibwapi

ord61
ord63
ord62
ord79
ord68
ord66
ord72
ord67
ord64

version

VerQueryValueW
GetFileVersionInfoW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

wininet

InternetQueryDataAvailable
InternetQueryOptionW
DeleteUrlCacheEntryW
HttpQueryInfoW
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetSetStatusCallbackW
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpSendRequestW
InternetConnectW
HttpOpenRequestW

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 464KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c203798f5b218b4931be12d9cc89fc3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

ws2_32

gdiplus

iphlpapi

wpcap

draw

swscale-2

ice_ipcsdk

zlibwapi

version

oleacc

wininet

imm32

winmm

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 464KB - Virtual size: 464KB

.data Size: 29KB - Virtual size: 72KB

.rsrc Size: 93KB - Virtual size: 92KB

.reloc Size: 228KB - Virtual size: 227KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 464KB - Virtual size: 464KB

.data
Size: 29KB - Virtual size: 72KB

.rsrc
Size: 93KB - Virtual size: 92KB

.reloc
Size: 228KB - Virtual size: 227KB