2024-04-26_7bd29bc2d2bcdc0a5694c87dafc74c15_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-26_7bd29bc2d2bcdc0a5694c87dafc74c15_mafia
Size

10.8MB
MD5

7bd29bc2d2bcdc0a5694c87dafc74c15
SHA1

a22505ca82e4917911c7252d76cd0587946a3d29
SHA256

17615f6be34d1113b5a43d5dd59b9d9af17039a3a09c3c2e5f41584e44491283
SHA512

6f28c432cb665ed31eaba4a99b035703c22f47d43331b35aff677689de45c7c8b56146025f9e89821f14a19bd3c1862218c7e45537b7630e65d7fabbb962f742
SSDEEP

196608:z2+eo4Kh8CP2/NMnaOHFCZVl73MdUKZ+SlJjkRbo4E1ZJVeVHNO41xB:qt/Nwa2dUF5x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-26_7bd29bc2d2bcdc0a5694c87dafc74c15_mafia

Files

2024-04-26_7bd29bc2d2bcdc0a5694c87dafc74c15_mafia
.exe windows:5 windows x86 arch:x86

3191bdffeabd1042040ed5c7b4aa211e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

ddraw

DirectDrawCreateEx

gdiplus

GdipReleaseDC
GdiplusShutdown
GdiplusStartup
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetDC
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipFree
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipCreateFromHDC

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

CreateThread
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
VirtualAlloc
VirtualQuery
HeapSize
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
GetLocaleInfoW
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetTimeZoneInformation
LCMapStringW
HeapCreate
SetHandleCount
GetStringTypeW
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDriveTypeW
CompareStringW
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryW
SetEnvironmentVariableA
GetSystemDefaultLangID
ExitThread
GetModuleFileNameA
SizeofResource
LockResource
GetTimeFormatA
LoadResource
FindResourceW
WideCharToMultiByte
CloseHandle
WriteFile
CreateFileA
MultiByteToWideChar
GetModuleFileNameW
GetCurrentProcessId
CreateFileW
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
SetUnhandledExceptionFilter
FreeLibrary
LoadLibraryA
QueryPerformanceCounter
GetLastError
SetLastError
FormatMessageA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
SetEvent
TerminateThread
WaitForSingleObject
CreateProcessA
lstrlenA
GetSystemTimeAsFileTime
RaiseException
GetProcAddress
FreeResource
FindResourceA
CreateDirectoryA
GetConsoleMode
GetConsoleCP
GetCurrentDirectoryA
GetDateFormatA
EnumResourceLanguagesA
RtlUnwind
EncodePointer
DecodePointer
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
SetErrorMode
GetACP
GetSystemDirectoryW
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
EnumResourceNamesA
EnumResourceTypesA
GetLocalTime
GlobalHandle
TlsGetValue
Sleep
RemoveDirectoryA
GetDiskFreeSpaceExA
GetDriveTypeA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
GetModuleHandleW
InterlockedExchange
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetFileAttributesExA
FileTimeToLocalFileTime
FindNextFileA
FileTimeToSystemTime
InterlockedIncrement
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
MoveFileA
DeleteFileA
lstrcmpiA
GetThreadLocale
CreateEventA
SuspendThread
ResumeThread
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
lstrcmpW
CopyFileA
lstrcpynA
GlobalSize
lstrlenW
MulDiv
SetThreadPriority
SetThreadExecutionState
lstrcmpA
GetProcessHeap
HeapAlloc
HeapFree
OpenMutexA
CreateMutexA
ExitProcess
LocalAlloc
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetSystemInfo
GlobalMemoryStatus
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
ActivateActCtx
DeactivateActCtx
GetModuleHandleA
lstrcpyA

user32

ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
RegisterClipboardFormatA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongA
DestroyAcceleratorTable
GetNextDlgGroupItem
WaitMessage
InvalidateRgn
CopyAcceleratorTableA
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsRectEmpty
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
DeleteMenu
UnregisterClassA
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
RealChildWindowFromPoint
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
CharNextA
GetMenuItemInfoA
CharUpperA
GetMessageA
MapVirtualKeyA
GetKeyNameTextA
CreateDialogIndirectParamA
EndDialog
IntersectRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
WinHelpA
IsChild
UnpackDDElParam
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
ValidateRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
PtInRect
GetWindow
GetWindowThreadProcessId
IsWindowEnabled
MessageBoxA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RegisterWindowMessageA
SystemParametersInfoA
LoadIconA
ChangeDisplaySettingsExA
GetKeyState
SetWindowRgn
GetSystemMetrics
EnumDisplayDevicesA
EnumDisplaySettingsA
SetRect
CopyIcon
CharUpperBuffA
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
GetWindowRgn
LoadIconW
GetLastActivePopup
FindWindowA
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
TranslateMessage
DispatchMessageA
PeekMessageA
GetDesktopWindow
SubtractRect
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
GetUpdateRect
GetCapture
IsClipboardFormatAvailable
GetForegroundWindow
SetForegroundWindow
ReleaseCapture
LoadCursorA
SetCapture
LoadBitmapA
IsWindowVisible
GetCursorPos
SetParent
ScreenToClient
LoadMenuW
RemoveMenu
IsWindow
KillTimer
SetTimer
RedrawWindow
UpdateWindow
DestroyMenu
LoadMenuA
DestroyCursor
LoadImageA
GetSysColor
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
GetWindowLongA
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
OffsetRect
InflateRect
CopyRect
DrawStateA
GetIconInfo
CreateIconIndirect
DestroyIcon
wsprintfA
ReleaseDC
GetDC
FillRect
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
SetDlgItemTextA

gdi32

CombineRgn
GetDeviceCaps
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateFontIndirectA
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
GetMapMode
PatBlt
GetBitmapBits
GetTextExtentPoint32A
GetBkColor
GetTextColor
CreateDIBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetRgnBox
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
GetDIBits
SetDIBits
CreateDIBSection
GetObjectA
CreateCompatibleBitmap
GetPixel
SetPixel
CreateBitmap
CreateCompatibleDC
CreatePen
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
SetBitmapBits
StretchBlt
GetStockObject
SetStretchBltMode
StretchDIBits
SetBkMode
SetTextAlign
ExtTextOutA
RoundRect
CreateFontA
GetViewportOrgEx
SetViewportOrgEx
DPtoLP
Rectangle
CreateSolidBrush
DeleteObject

msimg32

GradientFill
AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

shell32

SHGetSpecialFolderLocation
ShellExecuteA
SHGetSpecialFolderPathA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFolderPathA
SHAppBarMessage
SHGetMalloc
DragQueryFileA
DragFinish
ShellExecuteExA
SHGetDesktopFolder
SHGetFileInfoA

comctl32

ImageList_Destroy
ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA
PathIsDirectoryA
PathFindFileNameA

ole32

OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
CoTaskMemFree
CoCreateInstance
OleRun
CoInitialize
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CLSIDFromString
CoCreateGuid
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleUninitialize
CoFreeUnusedLibraries
OleInitialize

oleaut32

SysFreeString
VarBstrFromDate
SysStringLen
SafeArrayDestroy
VariantCopy
SafeArrayUnaccessData
OleCreateFontIndirect
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VariantInit
SysAllocStringLen
GetErrorInfo
VarUdateFromDate
SafeArrayAccessData

oledlg

ord8

wsock32

WSACleanup
recvfrom
sendto
send
ntohl
recv
socket
setsockopt
htons
inet_ntoa
connect
getsockopt
shutdown
closesocket
accept
select
__WSAFDIsSet
ioctlsocket
gethostbyname
WSAGetLastError
WSAStartup

vcomp100

_vcomp_barrier
_vcomp_fork
_vcomp_set_num_threads
_vcomp_for_static_simple_init
_vcomp_for_static_end

cms_401g_dll

GetMainAddress

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

Exports

Exports

CREATE_ISF_CMS_DEV_INFO_CONVERTOR_INTERFACE
CREATE_ISF_DEV_EVENT_INFO_INTERFACE
CREATE_ISF_DEV_INFO_INTERFACE
CREATE_ISF_DISPLAY_OSD_RENDER_INTERFACE
CREATE_ISF_ENV_COMMON_INTERFACE
CREATE_ISF_ENV_OSD_POS_TEXT_INFO_INTERFACE
CREATE_ISF_UTIL_FUNC_INTERFACE
CreateIsCheckerUrlIpInterface

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 538KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 325KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3191bdffeabd1042040ed5c7b4aa211e

Headers

DLL Characteristics

File Characteristics

Imports

winmm

ddraw

gdiplus

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

wsock32

vcomp100

cms_401g_dll

oleacc

imm32

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 538KB - Virtual size: 538KB

.data Size: 36KB - Virtual size: 89KB

.rsrc Size: 6.5MB - Virtual size: 6.5MB

.reloc Size: 325KB - Virtual size: 324KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 538KB - Virtual size: 538KB

.data
Size: 36KB - Virtual size: 89KB

.rsrc
Size: 6.5MB - Virtual size: 6.5MB

.reloc
Size: 325KB - Virtual size: 324KB