2024-05-15_2f2002608e842a0569c3a29c8c66c286_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-15_2f2002608e842a0569c3a29c8c66c286_mafia
Size

2.8MB
MD5

2f2002608e842a0569c3a29c8c66c286
SHA1

e23d707e9c57ccbbc79b1d95d9422996a9b899b2
SHA256

58947d90e53212a9f0e67b5c5277e5d40f464d3368c5fec9cc031b2d40dbb17c
SHA512

2ba0bd2dd56ec83b6d5a272710999aee9c3acae74b5c54db46af9ed3f6ed2d74b972af53611a0b2226d330b1eb73ee706e73266c56d42452549d14cec482675d
SSDEEP

49152:i/ILLQ/rgSY2cacxVsu40MCvBtOQySksGdTNwW0yuVVRMoDf9pB3vZVTcOhJ4QPS:d8gSYXassu403BtOQySGdT/WVVRMKf9a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-15_2f2002608e842a0569c3a29c8c66c286_mafia

Files

2024-05-15_2f2002608e842a0569c3a29c8c66c286_mafia
.exe windows:5 windows x86 arch:x86

9fecfb03af5a070711094bd8f6c55ec8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateDIBitmap
DPtoLP
PatBlt
CombineRgn
CreateBitmap
SetTextColor
SetBkColor
GetObjectW
DeleteObject
CreateFontIndirectW
CreateCompatibleDC
BitBlt
ExtTextOutW
GetTextExtentPoint32W
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
ExtFloodFill
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SetPaletteEntries
SetPixelV
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
GetTextFaceW
CreateDCW
CopyMetaFileW
GetDeviceCaps
CreateCompatibleBitmap
CreateRectRgnIndirect
SetBkMode
CreateSolidBrush
CreateHatchBrush
GetStockObject
SetRectRgn

user32

CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
WaitMessage
GetWindow
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
MapVirtualKeyExW
IsCharLowerW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetKeyNameTextW
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
DrawFrameControl
SetMenuDefaultItem
DrawStateW
GetSystemMenu
SetClassLongW
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
WindowFromPoint
SetRect
UnpackDDElParam
ReuseDDElParam
LoadMenuW
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
CreateDialogIndirectParamW
EndDialog
DrawIconEx
GetNextDlgGroupItem
LoadImageW
CopyImage
GetIconInfo
OffsetRect
GetNextDlgTabItem
MessageBeep
NotifyWinEvent
IsClipboardFormatAvailable
GetWindowThreadProcessId
GetTopWindow
EndPaint
GetWindowRgn
DestroyCursor
DrawIcon
MapDialogRect
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
RegisterClipboardFormatW
GetUpdateRect
DrawEdge
FrameRect
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
ReleaseCapture
GetDC
ReleaseDC
PostThreadMessageW
GetAsyncKeyState
SetCapture
MapVirtualKeyW
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
RedrawWindow
SetLayeredWindowAttributes
EnumDisplayMonitors
KillTimer
SetTimer
DeleteMenu
ShowOwnedPopups
SetCursor
IntersectRect
InvalidateRect
SetRectEmpty
IsIconic
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
CharUpperW
DestroyIcon
GetDesktopWindow
RealChildWindowFromPoint
ClientToScreen
IsDialogMessageW
GetMessageW
DispatchMessageW
TranslateMessage
LoadIconW
LoadCursorW
RegisterClassExW
UpdateWindow
GetSystemMetrics
CreateWindowExW
SetWindowTextW
DestroyWindow
GetClientRect
MoveWindow
PostQuitMessage
DefWindowProcW
ShowWindow
MessageBoxW
SendMessageW
BeginPaint
UnhookWindowsHookEx
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
GetActiveWindow
CallNextHookEx
SetWindowsHookExW
GetSysColorBrush
GetSysColor
GetWindowTextW
GetWindowTextLengthW
CheckMenuItem
EnableMenuItem
ModifyMenuW
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
SetWindowPos
SetWindowLongW
GetMenu
CallWindowProcW
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
PtInRect
CopyRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
GetWindowRect
AdjustWindowRectEx
RegisterClassW
GetClassInfoW
GetClassInfoExW
PostMessageW
ShowScrollBar
SetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
SetMenu
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
GetMessagePos
GetMessageTime
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
GetForegroundWindow
SetFocus
IsWindow
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RegisterWindowMessageW
CheckDlgButton

gdiplus

GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateFromHDC
GdipDrawImageRectI
GdipCloneImage
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipLoadImageFromStreamICM
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipDeleteFont
GdipSetImageAttributesColorMatrix
GdipAlloc
GdipSetStringFormatAlign
GdipDrawString
GdipDrawImageRectRectI
GdipCreateFont
GdipCloneBrush
GdiplusShutdown
GdiplusStartup
GdipLoadImageFromStream
GdipDeleteBrush
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipCreateSolidFill
GdipFree
GdipDrawImageI

kernel32

GetFileAttributesW
GetFileSizeEx
GetFileTime
GetCurrentDirectoryW
lstrcpyW
GetNumberFormatW
GetTempFileNameW
InitializeCriticalSectionAndSpinCount
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
GetUserDefaultLCID
FindResourceExW
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
FindFirstFileExA
FindNextFileA
DeleteFileA
GetFileType
ExitProcess
DecodePointer
EncodePointer
GetCommandLineA
HeapSetInformation
HeapReAlloc
ExitThread
HeapSize
HeapQueryInformation
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
IsProcessorFeaturePresent
GetStdHandle
HeapCreate
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStartupInfoW
GetTimeZoneInformation
GetCPInfo
GetOEMCP
IsValidCodePage
GetProcessHeap
GetStringTypeW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringW
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FileTimeToLocalFileTime
GetFileAttributesExW
GetUserDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
lstrcmpiW
GlobalFlags
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
lstrcmpW
FileTimeToSystemTime
lstrlenA
lstrcmpA
GlobalGetAtomNameW
CompareStringW
InterlockedIncrement
GetProcAddress
GetCurrentThreadId
SetThreadPriority
CopyFileW
GlobalSize
FormatMessageW
MulDiv
lstrlenW
GetCurrentProcessId
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
SetLastError
GetACP
SetEnvironmentVariableW
GetModuleHandleW
Sleep
GetVersionExW
WideCharToMultiByte
GetTempPathW
MultiByteToWideChar
CreateFileW
ReadFile
BeginUpdateResourceW
SetFilePointer
UpdateResourceW
EndUpdateResourceW
CreateThread
ResumeThread
WaitForSingleObject
CloseHandle
SetEvent
CreateEventW
FindResourceW
GetLastError
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
GetDriveTypeW
GetFullPathNameA
RemoveDirectoryA
GetWindowsDirectoryW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW

shell32

ShellExecuteExW
SHGetFileInfoW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
DragFinish
DragQueryFileW
SHBrowseForFolderW
SHAppBarMessage

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW
PathFindFileNameW

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
DoDragDrop
OleGetClipboard
RegisterDragDrop
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateStreamOnHGlobal
RevokeDragDrop
CoLockObjectExternal

oleaut32

SysAllocString
VariantInit
VarBstrFromDate
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
SysFreeString
VariantClear
VariantChangeType
VariantTimeToSystemTime

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 663KB - Virtual size: 662KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fecfb03af5a070711094bd8f6c55ec8

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

gdiplus

kernel32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 321KB - Virtual size: 321KB

.data Size: 24KB - Virtual size: 55KB

.rsrc Size: 663KB - Virtual size: 662KB

.reloc Size: 166KB - Virtual size: 165KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 321KB - Virtual size: 321KB

.data
Size: 24KB - Virtual size: 55KB

.rsrc
Size: 663KB - Virtual size: 662KB

.reloc
Size: 166KB - Virtual size: 165KB