2024-05-22_02638c2f59d7818be7bb0ea4dc4abfe8_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-22_02638c2f59d7818be7bb0ea4dc4abfe8_mafia
Size

11.3MB
MD5

02638c2f59d7818be7bb0ea4dc4abfe8
SHA1

5e826f1795e7448c1ac138c5b30091e5febaae7c
SHA256

c611aa2d89b66dc48e1e37b51851d4868daf9077ade4c891ad2636de0165a5bd
SHA512

0f0a5a7d047e15570d48b2da0993038bc04e42443a8c9258e997ef414fc08a238bbb2c6b74f22002c53b5c587181970641a90922e0225f0e4946d6c77b5c109b
SSDEEP

196608:fTzSmNHeqiByc1wzOcaOHEYIBwZyr8Z8AJsv6tWKFdu9Co4EZqE:fCm2iJsv6tWKFdu9CLG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-22_02638c2f59d7818be7bb0ea4dc4abfe8_mafia

Files

2024-05-22_02638c2f59d7818be7bb0ea4dc4abfe8_mafia
.exe windows:5 windows x86 arch:x86

ab27c0f40e2d335a32762ad19c63e988

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
SystemTimeToVariantTime
SysStringLen

imm32

ImmSetCandidateWindow
ImmSetCompositionWindow
ImmGetDefaultIMEWnd
ImmAssociateContext
ImmGetCompositionStringW
ImmGetContext
ImmNotifyIME
ImmReleaseContext
ImmGetVirtualKey

winmm

PlaySoundW

opengl32

glFinish
glFlush
glFrontFace
glGenTextures
glGetBooleanv
glGetError
glGetFloatv
glGetIntegerv
glGetString
glGetTexParameterfv
glGetTexParameteriv
glHint
glIsEnabled
glIsTexture
glLineWidth
glPixelStorei
glPolygonOffset
glReadPixels
glEnable
glStencilFunc
glDeleteTextures
glCullFace
glCopyTexSubImage2D
glCopyTexImage2D
glColorMask
glClearStencil
glClearColor
glClear
glBlendFunc
glBindTexture
glStencilMask
glStencilOp
glTexImage2D
glTexParameterf
glTexParameterfv
glTexParameteri
glTexParameteriv
glTexSubImage2D
glViewport
glDepthRange
glClearDepth
glDrawElements
glDrawArrays
glDisable
glDepthMask
glDepthFunc
glScissor

gdi32

AddFontMemResourceEx
CreateBitmap
GetObjectW
GetDIBits
SelectClipRgn
GetRegionData
GetTextFaceW
SetTextColor
SetBkMode
SetTextAlign
ExtTextOutW
GetCharABCWidthsW
GetCharABCWidthsI
GetCharABCWidthsFloatW
SetGraphicsMode
SetWorldTransform
GetTextExtentPoint32W
GetGlyphOutlineW
GetOutlineTextMetricsW
CreateDCW
CreateCompatibleBitmap
GetBitmapBits
GetPixelFormat
DescribePixelFormat
SwapBuffers
ChoosePixelFormat
SetPixelFormat
BitBlt
GetTextMetricsW
AddFontResourceExW
RemoveFontResourceExW
RemoveFontMemResourceEx
EnumFontFamiliesExW
CreateFontIndirectW
GetFontData
GetStockObject
OffsetRgn
GetDeviceCaps
DeleteDC
SelectObject
CreateCompatibleDC
CreateDIBSection
DeleteObject
CombineRgn
CreateRectRgn
GdiFlush

kernel32

SetEnvironmentVariableA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualFree
VirtualAlloc
RaiseException
RtlUnwind
DecodePointer
EncodePointer
GetCommandLineA
HeapSetInformation
HeapFree
HeapAlloc
HeapReAlloc
ExitThread
InterlockedExchange
SetStdHandle
InitializeCriticalSectionAndSpinCount
SetFileAttributesW
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WaitForSingleObject
GetLastError
OpenMutexW
CreateMutexW
ReleaseMutex
GetCurrentProcessId
WaitForMultipleObjects
Sleep
GetVolumeInformationW
GetProcAddress
GetModuleHandleW
GetLongPathNameW
GetDriveTypeW
lstrcmpW
HeapSize
GetModuleHandleA
ExitProcess
DisconnectNamedPipe
WaitNamedPipeW
CreateFileW
LoadLibraryW
SetEvent
GetModuleFileNameA
CreateNamedPipeW
GetCurrentProcess
CreateEventW
GetOverlappedResult
ResetEvent
SetHandleInformation
CompareStringW
GetUserDefaultLCID
VerifyVersionInfoW
VerSetConditionMask
GetVersionExW
LocalFree
FormatMessageW
GetCommandLineW
GetLocalTime
GetSystemTime
TlsFree
TlsSetValue
GetCurrentThreadId
GetSystemInfo
SwitchToThread
SetThreadPriority
GetCurrentThread
TlsAlloc
TerminateThread
TlsGetValue
ResumeThread
GetThreadPriority
CreateThread
DuplicateHandle
OutputDebugStringW
QueryPerformanceFrequency
GetTickCount
QueryPerformanceCounter
GetSystemDirectoryW
CancelIo
PeekNamedPipe
ReadFile
WriteFile
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileInformationByHandle
SetErrorMode
FindClose
FindFirstFileW
CreateDirectoryW
RemoveDirectoryW
GetFileAttributesW
CopyFileW
MoveFileW
DeleteFileW
DeviceIoControl
GetFullPathNameW
GetTempPathW
GetCurrentDirectoryW
GetLogicalDrives
GetFileAttributesExW
FlushFileBuffers
GetFileType
SetFilePointerEx
MoveFileExW
SetEndOfFile
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetStdHandle
TerminateProcess
GetExitCodeProcess
SetFilePointer
CreateProcessW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStartupInfoW
GetModuleFileNameW
FreeLibrary
GetCurrencyFormatW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetUserDefaultUILanguage
MultiByteToWideChar
WideCharToMultiByte
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
FindNextFileW
FindFirstFileExW
PostQueuedCompletionStatus
CreateIoCompletionPort
CreateSemaphoreW
ReleaseSemaphore
GetQueuedCompletionStatus
GetGeoInfoW
GetUserGeoID
GetTimeZoneInformation
LoadLibraryA
IsValidLocale
IsValidLanguageGroup
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetUserDefaultLangID
ExpandEnvironmentStringsW
CheckRemoteDebuggerPresent
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetHandleCount
HeapCreate
ConnectNamedPipe
GetSystemTimeAsFileTime
WriteConsoleW
GetLocaleInfoA
EnumSystemLocalesA
GetStringTypeW
CreateFileA
GetProcessHeap
GetConsoleWindow
InitializeCriticalSection

user32

GetKeyState
TrackPopupMenuEx
SetMenuItemInfoW
IsZoomed
MapVirtualKeyW
GetKeyboardState
GetMenu
ToAscii
LoadIconW
SetCaretPos
DestroyCaret
HideCaret
CreateCaret
ChangeClipboardChain
DestroyCursor
GetAsyncKeyState
LoadCursorW
NotifyWinEvent
GetMonitorInfoW
EnumDisplayMonitors
TrackMouseEvent
BeginPaint
GetCursorInfo
SetCursorPos
CreateCursor
GetCursor
GetWindowTextW
RealGetWindowClassW
ToUnicode
GetClipboardFormatNameW
RegisterClipboardFormatW
IsIconic
SetWindowPlacement
MoveWindow
SetParent
SetClipboardViewer
GetUpdateRect
EndPaint
SetCapture
SetForegroundWindow
SetFocus
SetWindowTextW
AdjustWindowRectEx
GetWindowPlacement
GetWindowRect
ShowWindow
DestroyWindow
SetWindowPos
InvalidateRect
FlashWindowEx
SetCursor
ReleaseCapture
GetForegroundWindow
IsChild
IsWindowVisible
GetAncestor
RegisterWindowMessageW
CreateWindowExW
DefWindowProcW
GetWindowThreadProcessId
SendMessageW
DestroyIcon
GetSystemMetrics
EnableMenuItem
GetSystemMenu
ReleaseDC
GetDC
GetDesktopWindow
GetCapture
GetSysColorBrush
GetClassInfoW
LoadImageW
RegisterClassExW
ClientToScreen
GetCursorPos
GetFocus
ChildWindowFromPointEx
GetParent
GetKeyboardLayoutList
GetClientRect
ScreenToClient
GetCaretBlinkTime
GetDoubleClickTime
MessageBeep
CharNextExA
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageW
SetWindowLongW
RegisterClassW
GetWindowLongW
SetWindowsHookExW
GetQueueStatus
CallNextHookEx
UnhookWindowsHookEx
PeekMessageW
KillTimer
SetTimer
UnregisterClassW
EnumWindows
PostThreadMessageW
PostMessageW
GetIconInfo
DrawIconEx
CreateIconIndirect
MessageBoxW
SetWindowRgn
SystemParametersInfoW
GetSysColor
GetMessageExtraInfo

shell32

SHGetMalloc
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
CommandLineToArgvW
SHGetSpecialFolderPathW
Shell_NotifyIconW
SHBrowseForFolderW

ole32

CoGetMalloc
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
ReleaseStgMedium
CoLockObjectExternal
RevokeDragDrop
CoTaskMemAlloc
OleUninitialize
OleInitialize
CoCreateGuid
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemFree
RegisterDragDrop

advapi32

SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
FreeSid
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
InitializeSecurityDescriptor
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorGroup
CopySid
RegCreateKeyExW
RegFlushKey
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW

ws2_32

inet_addr
gethostbyaddr
gethostbyname
WSASendTo
ntohl
bind
WSAConnect
getsockname
getpeername
WSAHtons
WSAHtonl
WSANtohs
WSANtohl
WSAAsyncSelect
WSASocketW
closesocket
select
__WSAFDIsSet
WSARecv
WSARecvFrom
WSAAccept
listen
setsockopt
WSAIoctl
WSACleanup
WSAStartup
WSAGetLastError
getsockopt
htonl
WSASend

psapi

GetModuleFileNameExW

Exports

Exports

z_adler32
z_adler32_combine
z_adler32_combine64
z_compress
z_compress2
z_compressBound
z_crc32
z_crc32_combine
z_crc32_combine64
z_deflate
z_deflateBound
z_deflateCopy
z_deflateEnd
z_deflateInit2_
z_deflateInit_
z_deflateParams
z_deflatePrime
z_deflateReset
z_deflateSetDictionary
z_deflateSetHeader
z_deflateTune
z_get_crc_table
z_inflate
z_inflateCopy
z_inflateEnd
z_inflateGetHeader
z_inflateInit2_
z_inflateInit_
z_inflateMark
z_inflatePrime
z_inflateReset
z_inflateReset2
z_inflateSetDictionary
z_inflateSync
z_inflateSyncPoint
z_inflateUndermine
z_uncompress
z_zError
z_zlibCompileFlags
z_zlibVersion

Sections

.text
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab27c0f40e2d335a32762ad19c63e988

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

imm32

winmm

opengl32

gdi32

kernel32

user32

shell32

ole32

advapi32

ws2_32

psapi

Exports

Exports

Sections

.text Size: 6.8MB - Virtual size: 6.8MB

.rdata Size: 4.1MB - Virtual size: 4.1MB

.data Size: 62KB - Virtual size: 106KB

.qtmetad Size: 1KB - Virtual size: 1KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 293KB - Virtual size: 293KB

.text
Size: 6.8MB - Virtual size: 6.8MB

.rdata
Size: 4.1MB - Virtual size: 4.1MB

.data
Size: 62KB - Virtual size: 106KB

.qtmetad
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 293KB - Virtual size: 293KB