2024-05-09_35327f07f5dd3ca73073f30f3bc2a171_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-09_35327f07f5dd3ca73073f30f3bc2a171_mafia
Size

3.5MB
MD5

35327f07f5dd3ca73073f30f3bc2a171
SHA1

899d1cb57e1c8beebece603c128077bf9389a812
SHA256

e697422d336479b7dec174116cd474cb9ec02ed6bd9d690fc9317172ae79e762
SHA512

0cdf45733d9d7f69251859aec8a6ab108302b9162471133c6fa2ff587ef1d1e1d63ab4e2a273565d04aadc1e1a7b44c36683ec92928a138fbb755005946e9e66
SSDEEP

98304:HEYriqlYDvQFDzUJDKmndNLGXP6uwhnoqFqlPZw4Ve0:HDYkwndc6PoqKPZw4Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-09_35327f07f5dd3ca73073f30f3bc2a171_mafia

Files

2024-05-09_35327f07f5dd3ca73073f30f3bc2a171_mafia
.exe windows:5 windows x86 arch:x86

81a3e2d88b4205d9cbaca9a84899a9f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
MulDiv
lstrlenW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CopyFileA
GlobalFree
CreateActCtxW
ReleaseActCtx
GlobalDeleteAtom
GetCurrentProcessId
InterlockedExchange
GetModuleHandleW
lstrcmpA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
SetThreadPriority
ResumeThread
SetEvent
CreateEventA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetSystemDirectoryW
lstrcpyA
GetACP
lstrcmpiA
LockFile
UnlockFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetWindowsDirectoryA
GetNumberFormatA
SetErrorMode
GetFileAttributesExA
FileTimeToLocalFileTime
GetFileSizeEx
GetProfileIntA
SearchPathA
GetUserDefaultLCID
VirtualProtect
FindResourceExW
RtlUnwind
DecodePointer
EncodePointer
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetTimeFormatA
GetDateFormatA
VirtualAlloc
VirtualQuery
HeapFree
HeapAlloc
HeapReAlloc
ExitThread
CreateThread
HeapQueryInformation
GetCurrentThreadId
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetLocaleInfoW
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
LCMapStringW
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
CompareStringW
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
CompareStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryW
ActivateActCtx
DeactivateActCtx
lstrcmpW
FreeResource
GetSystemTime
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FindFirstFileA
FindNextFileA
FindClose
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
LoadLibraryExA
FindResourceA
FreeLibrary
GetTimeZoneInformation
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreA
MultiByteToWideChar
GetVersionExA
GetModuleHandleA
GetTempFileNameA
GetTempPathA
SetCurrentDirectoryA
GetEnvironmentVariableA
CreateDirectoryA
GetFullPathNameA
GetCurrentDirectoryA
GetFileAttributesA
SetEnvironmentVariableA
MoveFileA
GetSystemInfo
RemoveDirectoryA
DeleteFileA
GetTickCount
Sleep
FormatMessageA
LocalFree
GetLastError
SetLastError
CreateFileA
GetFileTime
FileTimeToSystemTime
FlushFileBuffers
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetEndOfFile
GetFileSize
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime
GlobalGetAtomNameA
GlobalAddAtomA
HeapSize
GlobalFindAtomA
PurgeComm
GetCommModemStatus
SetCommState
GetCommState
SetCommTimeouts
GetModuleFileNameA
ExitProcess
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
FindResourceW
LoadResource
LockResource
GetModuleFileNameW
SizeofResource
ResetEvent

user32

SetRect
IsRectEmpty
OffsetRect
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
CreatePopupMenu
NotifyWinEvent
GetAsyncKeyState
SetClassLongA
LoadMenuW
GetSystemMenu
DrawStateA
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
LoadImageA
GetNextDlgGroupItem
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageA
SetMenuDefaultItem
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
RegisterClipboardFormatA
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
MapDialogRect
DestroyCursor
GetWindowRgn
RemoveMenu
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
MessageBeep
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
CopyRect
PtInRect
GetWindow
GetMenu
GetSystemMetrics
GetClientRect
IsIconic
GetSubMenu
GetMenuItemID
GetMenuItemCount
DrawIcon
PeekMessageA
GetActiveWindow
GetForegroundWindow
MessageBoxA
SendMessageA
EnableWindow
LoadIconW
KillTimer
SetTimer
InvalidateRect
DeleteMenu
UnregisterClassA
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
LoadCursorA
GetSysColorBrush
CopyImage
RealChildWindowFromPoint
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
PostQuitMessage
IntersectRect
InsertMenuA
GetWindowThreadProcessId
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
IsClipboardFormatAvailable
CharUpperA
DestroyIcon
WaitMessage
ReleaseCapture
SetActiveWindow
WindowFromPoint
EndDialog
MapVirtualKeyA
GetKeyNameTextA
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetMenuState
GetMenuStringA
GetCapture
AppendMenuA
InflateRect

wininet

InternetDialA
InternetHangUp

rasapi32

RasGetErrorStringA

ws2_32

inet_ntoa
htonl
getservbyname
htons
gethostbyaddr
getservbyport
ntohs
WSASetLastError
socket
select
closesocket
ioctlsocket
getsockopt
setsockopt
WSACleanup
__WSAFDIsSet
listen
gethostname
getpeername
getsockname
accept
recv
send
gethostbyname
connect
bind
WSAStartup
WSAStringToAddressA
WSAAddressToStringA
WSAGetLastError
inet_addr

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipDrawImageRectI
GdipCloneImage
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipSetInterpolationMode
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipGetImageWidth

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

gdi32

SetMapMode
GetClipBox
SetPixelV
GetTextFaceA
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
GetObjectA
SetTextColor
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
EnumFontFamiliesExA
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
GetRgnBox
OffsetRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
GetBkColor
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
GetTextCharsetInfo
EnumFontFamiliesA
ExcludeClipRect
IntersectClipRect
LineTo
GetTextMetricsA
CreateCompatibleBitmap
MoveToEx
SetTextAlign
GetLayout
SetLayout
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
CreateFontIndirectA
SetRectRgn
CombineRgn
DPtoLP
GetTextExtentPoint32A
CreateDIBitmap
SetBkColor

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
SHAppBarMessage

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
ProgIDFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysFreeString
VariantInit
VariantClear
VariantCopy
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SystemTimeToVariantTime
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
SafeArrayPutElement
VarBstrFromDate
SysAllocString
SafeArrayCreate

comdlg32

GetFileTitleA

advapi32

RegCloseKey
RegEnumValueA
RegEnumKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 775KB - Virtual size: 775KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81a3e2d88b4205d9cbaca9a84899a9f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

wininet

rasapi32

ws2_32

msimg32

comctl32

shlwapi

oleacc

gdiplus

imm32

winmm

gdi32

winspool.drv

shell32

ole32

oleaut32

comdlg32

advapi32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 775KB - Virtual size: 775KB

.data Size: 32KB - Virtual size: 63KB

.rsrc Size: 166KB - Virtual size: 165KB

.reloc Size: 256KB - Virtual size: 255KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 775KB - Virtual size: 775KB

.data
Size: 32KB - Virtual size: 63KB

.rsrc
Size: 166KB - Virtual size: 165KB

.reloc
Size: 256KB - Virtual size: 255KB