2024-05-02_7499e78da1028b422971e86d84c51870_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-02_7499e78da1028b422971e86d84c51870_mafia
Size

1.9MB
MD5

7499e78da1028b422971e86d84c51870
SHA1

0e79a5ebf0e00be2e4a70651ea54d6852cd0e166
SHA256

6fdba7fe185beb1411017f92de228fe2d8fcb3938c535c09f6c8e185fc9b4f6e
SHA512

59a362c0a10bfd8ea50e5046925e61109976652ef508e3cafa1f6d2082ee4a98430a4c1928bab00a6cfd36a5a17aea806f8b103fb0c92f481ab46c237aca7709
SSDEEP

49152:LSsyxCTjVFcxvki7/Mrj4OYch4qJOGxiIc+nAOmzv2CpM8YBm/+RGbIzjzIMS:LSsfFcGi7/M3wchvJOciIc+nAHzvVbYu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-02_7499e78da1028b422971e86d84c51870_mafia

Files

2024-05-02_7499e78da1028b422971e86d84c51870_mafia
.exe windows:5 windows x86 arch:x86

1f5febee81719aeb8873b38cb2e8195b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardDisconnect
SCardFreeMemory
SCardListReadersA
SCardGetStatusChangeA
SCardConnectA
SCardBeginTransaction
SCardEstablishContext
SCardReleaseContext
SCardEndTransaction

mdinfo

mp_info_read_card_info
mp_info_check_atr_is_md
mp_info_open_log
mp_info_close_log

kernel32

LCMapStringW
GetLocaleInfoW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
CompareStringW
GetTimeZoneInformation
WriteConsoleW
EnumSystemLocalesA
IsValidLocale
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
CreateMutexA
GetLastError
GetProcAddress
GetModuleHandleA
GetVersionExA
InterlockedIncrement
WaitForSingleObject
ReleaseMutex
CloseHandle
InterlockedDecrement
Sleep
IsValidCodePage
WriteFile
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
DebugBreak
FreeLibrary
GetModuleFileNameA
LoadLibraryA
SizeofResource
LockResource
LoadResource
FindResourceW
LocalAlloc
WideCharToMultiByte
GetPrivateProfileStringA
lstrlenW
LocalFree
ReadFile
IsProcessorFeaturePresent
HeapDestroy
HeapCreate
GetConsoleMode
GetConsoleCP
GetStdHandle
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapQueryInformation
CreateThread
ExitThread
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapSize
DecodePointer
EncodePointer
HeapReAlloc
RaiseException
RtlUnwind
HeapFree
GetLocalTime
HeapAlloc
CreateFileA
lstrlenA
MulDiv
MultiByteToWideChar
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
GetTempPathA
GetTempFileNameA
SetErrorMode
GetOEMCP
GetCPInfo
GetACP
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiA
DeleteFileA
GlobalFlags
lstrcpyA
GetSystemDirectoryW
GetCurrentDirectoryA
TlsFree
LocalReAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
GlobalGetAtomNameA
GlobalFindAtomA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
GetModuleFileNameW
ReleaseActCtx
GlobalSize
CreateActCtxW
FindResourceA
FreeResource
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileIntA
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
CompareStringA
ActivateActCtx
DeactivateActCtx
lstrcmpA
GetModuleHandleW
InterlockedExchange
GlobalFree
CopyFileA

user32

OpenClipboard
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
PostThreadMessageA
CreateMenu
IsMenu
UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetNextDlgGroupItem
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
CopyAcceleratorTableA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateA
MessageBeep
GetSystemMenu
LoadMenuW
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
CopyImage
DestroyMenu
GetMenuItemInfoA
UnregisterClassA
IntersectRect
InflateRect
CharUpperA
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
KillTimer
SetTimer
InvalidateRect
RealChildWindowFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
SetRectEmpty
DeleteMenu
LoadCursorA
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetClipboardData
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetWindowRect
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
CopyRect
PtInRect
GetWindow
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
CloseClipboard
EmptyClipboard
GetWindowRgn
DestroyCursor
MapDialogRect
SubtractRect
MapVirtualKeyExA
GetKeyNameTextA
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
IsCharLowerA
GetDoubleClickTime
CharUpperBuffA
CopyIcon
RegisterClipboardFormatA
LoadImageW
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
EnableWindow
GetSystemMetrics
LoadIconW
GetClientRect
IsIconic
SendMessageA
DrawIcon
wsprintfA
LoadCursorW

gdi32

CreateRectRgn
GetObjectA
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateDIBitmap
CreateFontIndirectA
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
SetRectRgn
CombineRgn
PatBlt
SelectClipRgn
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
GetTextExtentPoint32A
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
CreateDCA
CopyMetaFileA
GetDeviceCaps
DPtoLP
CreateSolidBrush

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegEnumKeyA
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptVerifySignatureA
CryptHashData
CryptCreateHash
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
CryptAcquireContextA
CryptImportKey

shell32

SHAppBarMessage
SHGetFileInfoA
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
DoDragDrop
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CreateStreamOnHGlobal
RevokeDragDrop

oleaut32

VariantTimeToSystemTime
SysStringLen
VariantChangeType
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SystemTimeToVariantTime
VarBstrFromDate
SysFreeString

ws2_32

closesocket
sendto
WSAStartup
WSACleanup
socket
gethostbyname
htons
inet_addr

winmm

PlaySoundA

wininet

InternetOpenA
InternetSetOptionA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
InternetConnectA

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f5febee81719aeb8873b38cb2e8195b

Headers

DLL Characteristics

File Characteristics

Imports

winscard

mdinfo

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

winmm

wininet

oleacc

gdiplus

imm32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 287KB - Virtual size: 286KB

.data Size: 25KB - Virtual size: 60KB

.rsrc Size: 194KB - Virtual size: 193KB

.reloc Size: 169KB - Virtual size: 169KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 287KB - Virtual size: 286KB

.data
Size: 25KB - Virtual size: 60KB

.rsrc
Size: 194KB - Virtual size: 193KB

.reloc
Size: 169KB - Virtual size: 169KB