2024-05-30_44aa5f7bf21e68a45967e6222a4fed83_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-30_44aa5f7bf21e68a45967e6222a4fed83_mafia
Size

20.3MB
MD5

44aa5f7bf21e68a45967e6222a4fed83
SHA1

4902e010d12aedaa0c2c86124d216d3f5f390207
SHA256

6a2157e011b0b1dcb24e8bf780d03c21669c3d4c1588178426cea183c2b83977
SHA512

084dee3113ccacd4505d2b1abdac3a7a7b44a8a8859564d31297694c83a82a445209726f9c78ae0e5a84f378ef9e857b55ea7d9e94f8fc431ec92092018791a7
SSDEEP

196608:3vvoop1xJBo7m4KsxP8wtibUgoX4aUWs4W+Ituq7uVMRZaoU4ouw/Ure0f0oi0dt:/vooTxro7m4KsdfUB4auVKVXI8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-30_44aa5f7bf21e68a45967e6222a4fed83_mafia

Files

2024-05-30_44aa5f7bf21e68a45967e6222a4fed83_mafia
.exe windows:5 windows x86 arch:x86

8cd3c2f5320c6b8abd1cb09ef3b28f47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Honza\Desktop\CVC_5.60.xxx\Tmp\Output\Win32\Release\Cue Visual Composer.pdb

Imports

d3d9

Direct3DCreate9

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo

ws2_32

getsockname
recvfrom
WSAIoctl
shutdown
sendto
getsockopt
listen
bind
WSAGetLastError
socket
ioctlsocket
closesocket
setsockopt
htons
ntohs
htonl
ntohl
select
__WSAFDIsSet
recv
send
connect
WSAStartup
WSACleanup
accept
inet_addr
getpeername

uxtheme

GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData

winmm

timeGetTime
PlaySoundW
timeEndPeriod
timeBeginPeriod
timeGetDevCaps

wininet

InternetSetOptionW
InternetCloseHandle
HttpSendRequestW
InternetReadFile
InternetConnectW
InternetOpenW
HttpOpenRequestW

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CertOpenSystemStoreW
CertCloseStore

iphlpapi

GetAdaptersInfo
GetNetworkParams

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shell32

SHGetFileInfoW
ShellExecuteExW
SHFileOperationW
DuplicateIcon
SHAddToRecentDocs
SHGetDesktopFolder
SHAppBarMessage
SHGetMalloc
SHGetSpecialFolderPathW
SHCreateDirectoryExW
DragFinish
DragQueryFileW
ExtractIconExW
ShellExecuteW
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW

gdi32

GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
GetStretchBltMode
FrameRgn
FillRgn
GetTextAlign
GetTextFaceW
GetBoundsRect
PtInRegion
SetPaletteEntries
ExtFloodFill
GetViewportOrgEx
CreateFontIndirectW
Rectangle
SelectObject
GetTextMetricsW
GetTextExtentPoint32W
CreateSolidBrush
SetTextColor
GetStockObject
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateBitmap
SetBkColor
DeleteDC
SetBkMode
GetFontUnicodeRanges
CreateBrushIndirect
SetPixelV
ExtTextOutW
GetTextColor
GetBkColor
CreatePen
Polyline
GetDeviceCaps
GetWindowOrgEx
SetPixel
GetDIBits
GetPixel
SetStretchBltMode
StretchBlt
SetDIBColorTable
OffsetRgn
GetSystemPaletteEntries
RealizePalette
CreateRectRgnIndirect
LPtoDP
GetMapMode
GetWindowExtEx
GetViewportExtEx
DPtoLP
PtVisible
RectVisible
TextOutW
Escape
GetGlyphOutlineW
GetCharWidth32W
GetKerningPairsW
GetTextCharsetInfo
SetMapMode
SetTextCharacterExtra
SetTextJustification
GetNearestPaletteIndex
MoveToEx
LineTo
GetCurrentObject
ExtCreatePen
CreateRectRgn
GetClipBox
RoundRect
CreateDCW
GetObjectW
GetDCOrgEx
SetDIBits
CopyMetaFileW
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
StartDocW
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
SetRectRgn
CombineRgn
PatBlt
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateEllipticRgn
Ellipse
CreateDIBSection
CreateDIBitmap
EnumFontFamiliesW
EnumFontFamiliesExW
GetCharWidthW
CreateRoundRectRgn
GetPaletteEntries
GetRgnBox
CreatePalette
CreatePolygonRgn
Polygon

rpcrt4

UuidToStringA
RpcStringFreeA

kernel32

VirtualFree
lstrcpynW
GetConsoleMode
InterlockedCompareExchange
GetLocaleInfoA
GetTimeFormatA
SetEnvironmentVariableW
InterlockedPopEntrySList
GetDateFormatA
WriteConsoleW
EnumSystemLocalesA
IsValidLocale
InterlockedPushEntrySList
SetEnvironmentVariableA
ExpandEnvironmentStringsA
LoadLibraryA
CreateFileMappingW
MapViewOfFile
MapViewOfFileEx
UnmapViewOfFile
GetExitCodeProcess
CreateProcessW
DebugBreak
OutputDebugStringW
OpenFileMappingW
GetOEMCP
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
GetTickCount
Sleep
CreateFileW
CloseHandle
GetSystemTime
LocalFree
WriteFile
GetFileSizeEx
ReadFile
DeleteFileW
GetCurrentThreadId
MultiByteToWideChar
SetFileAttributesW
WaitForSingleObject
CreateEventW
InitializeCriticalSection
SetEvent
EnterCriticalSection
LeaveCriticalSection
FindFirstFileW
FindNextFileW
GetLastError
FindClose
DeleteCriticalSection
WideCharToMultiByte
SetThreadPriority
ResumeThread
InterlockedIncrement
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetVersionExW
LoadLibraryW
GetProcAddress
MulDiv
GetLocalTime
CreateDirectoryW
TerminateThread
SetLastError
DeactivateActCtx
GetModuleHandleW
ActivateActCtx
lstrcpyW
CopyFileW
GetTempFileNameW
GetLongPathNameW
GetTempPathW
GetCurrentDirectoryW
SetCurrentDirectoryW
ReplaceFileW
GetFileAttributesW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
InterlockedDecrement
SetFilePointerEx
SetEndOfFile
GetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
FreeLibrary
SetFilePointer
ResetEvent
FreeResource
SetCommState
SetCommTimeouts
GetCurrentProcess
FlushInstructionCache
RaiseException
lstrlenW
GetCurrentProcessId
GetVersionExA
SystemTimeToTzSpecificLocalTime
GetCurrentThread
TryEnterCriticalSection
WaitForSingleObjectEx
FlushFileBuffers
FindFirstFileExW
HeapAlloc
GetProcessHeap
HeapSize
HeapFree
FormatMessageW
GlobalSize
lstrcmpW
InitializeCriticalSectionAndSpinCount
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
CreateActCtxW
ReleaseActCtx
VirtualProtect
lstrcmpA
lstrlenA
GlobalGetAtomNameW
GetUserDefaultLCID
SystemTimeToFileTime
GetFullPathNameW
GetProfileIntW
GetThreadLocale
InterlockedExchange
LoadLibraryExW
GetLocaleInfoW
CompareStringA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
SuspendThread
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetSystemDirectoryW
FindResourceExW
GetStringTypeExW
lstrcmpiW
LockFile
UnlockFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetShortPathNameW
GetFileAttributesExW
GetWindowsDirectoryW
GetNumberFormatW
SetErrorMode
SearchPathW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapReAlloc
ExitThread
CreateThread
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
GetDriveTypeW
RtlUnwind
ExitProcess
HeapQueryInformation
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetConsoleCP
IsValidCodePage
GetStringTypeW
IsProcessorFeaturePresent
LCMapStringW
GetTimeZoneInformation
GetFileInformationByHandle
PeekNamedPipe
SetConsoleCtrlHandler

user32

LockWindowUpdate
LoadAcceleratorsW
TranslateAcceleratorW
FindWindowExW
GetClassNameW
BringWindowToTop
CreatePopupMenu
AppendMenuW
GetWindow
GetDlgCtrlID
EqualRect
MapWindowPoints
GetComboBoxInfo
SetWindowPos
GetAsyncKeyState
TrackMouseEvent
GetWindowTextLengthW
GetWindowTextW
CreateWindowExW
PeekMessageW
DestroyWindow
SetActiveWindow
MessageBeep
GetKeyState
BeginPaint
EndPaint
LoadIconW
GetMessageW
DestroyAcceleratorTable
DrawIconEx
IsClipboardFormatAvailable
GetCapture
TabbedTextOutW
DrawTextExW
GrayStringW
SetFocus
SendMessageTimeoutW
RemoveMenu
GetMenuItemCount
GetMenuItemID
TranslateMessage
DispatchMessageW
ShowWindow
PostQuitMessage
LoadBitmapW
CloseWindow
GetWindowDC
RegisterWindowMessageW
SetScrollPos
IsRectEmpty
MessageBoxW
ShowCaret
DestroyCaret
CreateCaret
GetCaretPos
CallWindowProcW
MonitorFromWindow
GetDialogBaseUnits
DialogBoxIndirectParamW
GetDlgItem
CheckDlgButton
EnableMenuItem
GetSystemMenu
MoveWindow
EndDialog
IsIconic
GetWindowPlacement
SystemParametersInfoA
RegisterClassExW
SetPropW
InsertMenuW
GetMenuStringW
GetMenuState
GetMenu
SetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
AdjustWindowRectEx
GetClassInfoExW
ValidateRect
GetScrollPos
GetScrollRange
SetScrollRange
SetMenu
TrackPopupMenu
ScrollWindow
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
RemovePropW
GetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
SetWindowLongW
IsWindowEnabled
CheckMenuItem
ReleaseCapture
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CreateDialogIndirectParamW
GetKeyNameTextW
MapVirtualKeyW
MapDialogRect
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
GetMenuItemInfoW
DrawIcon
SetWindowRgn
SetCursorPos
SetWindowContextHelpId
ShowOwnedPopups
RealChildWindowFromPoint
CopyImage
EnumDisplayMonitors
SetLayeredWindowAttributes
UnregisterClassW
DeleteMenu
SetParent
UnionRect
IsZoomed
CharUpperW
GetTabbedTextExtentW
NotifyWinEvent
UpdateLayeredWindow
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
SetClassLongW
DrawEdge
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
InvertRect
HideCaret
CopyIcon
CharUpperBuffW
WaitMessage
CreateMenu
SendNotifyMessageW
GetUpdateRect
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
SubtractRect
EnumChildWindows
GetWindowRgn
LoadStringW
GetDC
KillTimer
ScreenToClient
GetCursorPos
SetTimer
SetRect
FrameRect
LoadMenuW
LoadImageW
GetIconInfo
DrawStateW
GetDesktopWindow
GetWindowRect
PtInRect
GetFocus
DrawFrameControl
InflateRect
GetSystemMetrics
GetClientRect
GetWindowLongW
CopyRect
LoadCursorW
DefWindowProcW
GetClassInfoW
InvalidateRect
GetSysColor
GetParent
SendMessageW
EnableWindow
SetForegroundWindow
AllowSetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
IsWindow
IntersectRect
SystemParametersInfoW
MonitorFromPoint
GetMonitorInfoW
SetWindowTextW
OffsetRect
TrackPopupMenuEx
GetSubMenu
GetActiveWindow
WindowFromPoint
SetCapture
GetClipboardData
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClipboardFormatW
RegisterClassW
EnableScrollBar
ModifyMenuW
ShowScrollBar
SetCursor
GetNextDlgTabItem
DestroyIcon
DestroyMenu
DestroyCursor
ClientToScreen
DrawTextW
IsChild
UpdateWindow
SetRectEmpty
CountClipboardFormats
SetCaretPos
UnregisterClassA
DrawFocusRect
FillRect
IsWindowVisible
GetSysColorBrush
RedrawWindow
IsDialogMessageW
ReleaseDC
PostMessageW

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

EnumPrintersW
ord203
GetJobW
OpenPrinterW
ClosePrinter
DocumentPropertiesW
DeviceCapabilitiesW

advapi32

RegEnumValueW
IsTextUnicode
RegOpenKeyExA
RegCreateKeyW
RegOverridePredefKey
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueW
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
RegQueryValueExA

comctl32

ImageList_Destroy
_TrackMouseEvent
ImageList_Draw
InitCommonControlsEx
ord413
ord410
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_DrawEx

shlwapi

PathStripToRootW
PathFindFileNameW
PathRemoveFileSpecW
ord12
PathFileExistsW
PathFindExtensionW
PathRemoveExtensionW
PathAppendW
PathIsUNCW

ole32

OleCreateMenuDescriptor
CreateFileMoniker
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoTaskMemFree
CoCreateGuid
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
CoRevokeClassObject
CreateStreamOnHGlobal
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitialize
CoGetClassObject
CLSIDFromString
CoDisconnectObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
OleDraw
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

VarBstrCmp
OleCreateFontIndirect
LoadTypeLi
VarBstrFromDate
SysStringLen
SafeArrayDestroy
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysAllocString
VariantClear
VariantCopy
VariantInit

oledlg

OleUIBusyW
OleUIObjectPropertiesW
OleUIInsertObjectW
OleUIPasteSpecialW

gdiplus

GdipDeleteGraphics
GdipDrawImageI
GdipGetImageGraphicsContext
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromFile
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdiplusShutdown

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.6MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10.7MB - Virtual size: 10.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 664KB - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8cd3c2f5320c6b8abd1cb09ef3b28f47

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d9

setupapi

ws2_32

uxtheme

winmm

wininet

crypt32

iphlpapi

version

shell32

gdi32

rpcrt4

kernel32

user32

msimg32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

Sections

.text Size: 5.9MB - Virtual size: 5.9MB

.rdata Size: 1.4MB - Virtual size: 1.4MB

.data Size: 1.6MB - Virtual size: 6.7MB

.rsrc Size: 10.7MB - Virtual size: 10.7MB

.reloc Size: 664KB - Virtual size: 664KB

.text
Size: 5.9MB - Virtual size: 5.9MB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 1.6MB - Virtual size: 6.7MB

.rsrc
Size: 10.7MB - Virtual size: 10.7MB

.reloc
Size: 664KB - Virtual size: 664KB