D:\data\Software.MFC\iALotOfPathAndFileOperations\Ver32\iALotOfPathAndFileOperations.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-24_a0aa3dfb2d1ab3c7ab3a925838a0ee26_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-24_a0aa3dfb2d1ab3c7ab3a925838a0ee26_mafia.exe
Resource
win10v2004-20240611-en
General
-
Target
2024-06-24_a0aa3dfb2d1ab3c7ab3a925838a0ee26_mafia
-
Size
13.9MB
-
MD5
a0aa3dfb2d1ab3c7ab3a925838a0ee26
-
SHA1
e17500c349b64bb1bc249c0d1d884f3a5ac457d8
-
SHA256
8058b1a407e171aac3cadd3a677edbe522281f7f27e358e72f376a4b012b4251
-
SHA512
028a7ad238e462d6e9e7cbd9fc19549ac0d43367caa5ced495a8922989620e856b89b011d62df997618ce411dea2c79c78f77aa98e4d49722af33ca22dc6c93f
-
SSDEEP
196608:o0LvMrphmH9oTMayUFGu7g13ORMhnOMGExcqnpKI1sVbJdLrejzQO5GX7UDic:o0N9Ggh9hxcqnpKgsNJdnCEwD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-24_a0aa3dfb2d1ab3c7ab3a925838a0ee26_mafia
Files
-
2024-06-24_a0aa3dfb2d1ab3c7ab3a925838a0ee26_mafia.exe windows:5 windows x86 arch:x86
dd7af24d62296255e4cfd802fceeb41f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
query
LoadIFilter
mpr
WNetGetConnectionA
WNetAddConnection3A
WNetConnectionDialog
WNetDisconnectDialog
WNetGetUniversalNameA
crypt32
CertOpenStore
CertCloseStore
CertFindCertificateInStore
fontsub
CreateFontPackage
kernel32
ExitThread
GetTimeFormatA
FindFirstFileExA
HeapQueryInformation
HeapSize
SetStdHandle
SetUnhandledExceptionFilter
IsValidCodePage
IsProcessorFeaturePresent
HeapCreate
HeapReAlloc
FreeEnvironmentStringsW
GetFileType
SetHandleCount
WriteConsoleW
GetLocaleInfoW
CompareStringW
LCMapStringW
SetConsoleCtrlHandler
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
GetConsoleMode
GetConsoleCP
HeapAlloc
FlushConsoleInputBuffer
ReadConsoleInputA
SetConsoleMode
PeekNamedPipe
GetFileInformationByHandle
GetStartupInfoW
HeapSetInformation
GetDriveTypeW
SetEnvironmentVariableA
HeapFree
DecodePointer
EncodePointer
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetNumberFormatA
GetSystemDirectoryW
GetOEMCP
GlobalFlags
LocalReAlloc
FindNextFileA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
lstrcmpA
InterlockedExchange
DuplicateHandle
GetFileSize
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiA
GetFileAttributesExA
GetProfileIntA
lstrlenW
ReleaseActCtx
CreateActCtxW
SuspendThread
ResumeThread
GlobalFindAtomA
InitializeCriticalSectionAndSpinCount
ActivateActCtx
DeactivateActCtx
SetLastError
lstrcmpW
CreateDirectoryA
SetVolumeLabelA
GetFileAttributesA
SetFileAttributesA
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
CreateEventA
DisableThreadLibraryCalls
EnumCalendarInfoA
FileTimeToDosDateTime
GetACP
GetCPInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLastError
GetDateFormatA
GetDiskFreeSpaceA
GetFullPathNameA
GetFullPathNameW
GetProfileStringA
GetStringTypeExA
GlobalHandle
LoadLibraryW
LocalFileTimeToFileTime
ResetEvent
SetErrorMode
SetEvent
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetStdHandle
RaiseException
RtlUnwind
UnhandledExceptionFilter
GetCommandLineA
GetLocaleInfoA
GetStartupInfoA
GetThreadLocale
LoadLibraryExA
VirtualQuery
GetVersion
LocalAlloc
VirtualAlloc
VirtualFree
DeleteCriticalSection
OpenProcess
BackupRead
BackupSeek
GlobalSize
GlobalReAlloc
lstrcpynA
GetFileAttributesExW
MoveFileWithProgressA
CopyFileExA
GetFileSizeEx
SetFilePointerEx
ReadFile
FindResourceA
FreeResource
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentProcess
CreateProcessA
GetBinaryTypeA
CompareStringA
MulDiv
GetSystemTime
GetLocalTime
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
WritePrivateProfileStringA
CopyFileA
MoveFileA
GetWindowsDirectoryA
GetPrivateProfileStringA
GetSystemInfo
GetSystemTimeAsFileTime
GetComputerNameA
GetVersionExA
ReleaseSemaphore
GetProcessHeap
HeapLock
HeapWalk
HeapUnlock
GlobalMemoryStatus
FindNextFileW
GetCurrentDirectoryW
GetTimeZoneInformation
SystemTimeToFileTime
TerminateProcess
GetExitCodeProcess
CreateProcessW
WaitForSingleObject
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
ReleaseMutex
CreateMutexA
RemoveDirectoryW
CreateDirectoryW
DeleteFileW
MoveFileW
CopyFileW
GetFileTime
SetFileTime
GetTempPathW
SetFileAttributesW
GetFileAttributesW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FormatMessageA
LocalFree
SetEndOfFile
IsBadReadPtr
IsBadWritePtr
LoadLibraryA
GetProcAddress
QueryPerformanceCounter
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GetCurrentProcessId
CreateFileW
SetFilePointer
WriteFile
LoadResource
LockResource
SizeofResource
FindResourceW
GetModuleFileNameA
IsDebuggerPresent
DebugBreak
SetVolumeMountPointA
CreateHardLinkA
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
CreateThread
GetDiskFreeSpaceExA
FindFirstFileA
GetVolumePathNameA
GetVolumeNameForVolumeMountPointA
RemoveDirectoryA
DeleteFileA
SetThreadPriority
lstrlenA
GlobalAlloc
GlobalLock
GlobalFree
lstrcpyA
GlobalUnlock
FindFirstFileW
FindClose
CreateFileA
DeviceIoControl
CloseHandle
WinExec
GetDriveTypeA
GetTickCount
GetVolumeInformationA
GetLogicalDrives
InitializeCriticalSection
FindCloseChangeNotification
FindFirstChangeNotificationA
WaitForMultipleObjects
FindNextChangeNotification
Sleep
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceFrequency
GetEnvironmentStringsW
user32
DrawTextA
TabbedTextOutA
MapVirtualKeyA
GetKeyNameTextA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SystemParametersInfoA
DestroyMenu
GetActiveWindow
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
RedrawWindow
IsWindowVisible
ValidateRect
GetMenuItemID
GetMenuItemCount
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
CharUpperBuffA
CharLowerBuffA
CharUpperBuffW
CreateIcon
DrawIconEx
wvsprintfA
CharNextA
LoadStringA
GetKeyboardType
PostMessageA
GetWindowThreadProcessId
UpdateLayeredWindow
DrawTextExA
GetWindowTextA
GetClassNameA
LoadIconA
GetDesktopWindow
GetMessageA
GetDlgCtrlID
GetWindow
LockWindowUpdate
MonitorFromRect
MonitorFromWindow
EnumDisplayMonitors
UnionRect
GetMonitorInfoA
GetComboBoxInfo
SetRect
GetDC
ReleaseDC
ShowScrollBar
SendMessageW
MonitorFromPoint
IsMenu
CreatePopupMenu
SetMenuDefaultItem
GetMenuDefaultItem
WaitMessage
PostThreadMessageA
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetWindowTextLengthA
GetWindowLongA
GetSysColor
EnumChildWindows
GetDialogBaseUnits
MapDialogRect
GetWindowTextW
SetWindowTextW
CharLowerA
CharUpperA
CharToOemA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
IsZoomed
RemoveMenu
EnableMenuItem
SetForegroundWindow
BringWindowToTop
wsprintfA
TranslateAcceleratorA
LoadAcceleratorsA
GetDoubleClickTime
ScreenToClient
PtInRect
GetIconInfo
DestroyIcon
GetFocus
KillTimer
SetTimer
InvalidateRect
UpdateWindow
GetWindowRect
IsClipboardFormatAvailable
IsWindow
OpenClipboard
GetClipboardData
EmptyClipboard
CloseClipboard
SetClipboardData
GetAsyncKeyState
AppendMenuW
RegisterClipboardFormatA
CreateMenu
SetMenuItemInfoA
GetCursor
LoadCursorA
SetCursor
CopyRect
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
InsertMenuA
IsRectEmpty
SetCapture
ReleaseCapture
DrawStateA
PostQuitMessage
MessageBeep
OffsetRect
ShowOwnedPopups
SetWindowContextHelpId
RealChildWindowFromPoint
GetSysColorBrush
SetRectEmpty
SetLayeredWindowAttributes
FillRect
DrawTextW
DrawFocusRect
InflateRect
GetMenuItemInfoA
GetKeyState
GetMenuStringA
LoadBitmapA
LoadIconW
GetClientRect
IsIconic
LoadCursorW
IntersectRect
UnregisterClassA
GetSystemMenu
SetWindowRgn
WindowFromPoint
NotifyWinEvent
CreateWindowExA
EnableScrollBar
GetKeyboardState
DestroyAcceleratorTable
LoadAcceleratorsW
CreateAcceleratorTableA
SetParent
SetClassLongA
InsertMenuItemA
LoadImageA
GetProcessWindowStation
GetUserObjectInformationW
SendMessageA
DrawIcon
GetSystemMetrics
EnableWindow
GetParent
LoadMenuW
LoadMenuA
ReuseDDElParam
UnpackDDElParam
LoadImageW
InvalidateRgn
GetNextDlgGroupItem
DrawEdge
DrawFrameControl
SetCursorPos
InvertRect
HideCaret
FrameRect
CopyIcon
IsCharLowerA
MapVirtualKeyExA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
GetUpdateRect
SubtractRect
DestroyCursor
GetWindowRgn
LoadBitmapW
GetCursorPos
DeleteMenu
AppendMenuA
GetSubMenu
CopyImage
gdi32
GetEnhMetaFileBits
GetDeviceCaps
GetDIBColorTable
GetCurrentPositionEx
GetCharWidthW
GetCharWidth32W
GetBrushOrgEx
GetBitmapBits
GdiFlush
FillPath
ExtTextOutA
ExtEscape
EnumFontsA
EnumFontFamiliesExA
EnumEnhMetaFile
EndPath
EndPage
EndDoc
DeleteEnhMetaFile
CreateScalableFontResourceW
CreatePenIndirect
CreatePalette
CreateICA
CreateEnhMetaFileA
CreateDIBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CombineTransform
CloseFigure
CloseEnhMetaFile
BeginPath
AddFontResourceW
CreateRectRgnIndirect
SaveDC
RestoreDC
SetPolyFillMode
SetMapMode
GetClipBox
ExcludeClipRect
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
GetKerningPairs
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
GetObjectType
CreateHatchBrush
CopyMetaFileA
EnumFontFamiliesA
GetTextCharsetInfo
GetEnhMetaFileDescriptionA
GetMapMode
DPtoLP
CreateRoundRectRgn
OffsetRgn
GetRgnBox
GetTextColor
GetBkColor
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
GetNearestPaletteIndex
Rectangle
ExtFloodFill
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
SetPixelV
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetFontData
GetFontLanguageInfo
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetPaletteEntries
GetPixel
GetSystemPaletteEntries
GetTextFaceA
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
MaskBlt
PatBlt
PlayEnhMetaFile
PolyBezierTo
RemoveFontResourceW
SetAbortProc
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetICMMode
SetPaletteEntries
SetPixel
SetROP2
SetStretchBltMode
SetWinMetaFileBits
StartDocA
StartDocW
StartPage
StretchDIBits
StrokeAndFillPath
StrokePath
UnrealizeObject
FloodFill
SelectPalette
RealizePalette
GetDIBits
CreateDIBSection
CombineRgn
CreatePen
MoveToEx
LineTo
BitBlt
StretchBlt
DeleteDC
GetStockObject
GetTextMetricsA
CreateCompatibleDC
GetGlyphIndicesA
CreateHalftonePalette
CreateCompatibleBitmap
SetBkColor
GetGlyphIndicesW
SetRectRgn
GetGlyphOutlineW
CreateFontIndirectA
GetTextExtentPoint32A
SelectObject
CreateDCA
DeleteObject
CreateSolidBrush
SetTextColor
SetBkMode
TextOutA
GetTextExtentPointW
GetObjectA
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
winspool.drv
EnumPrintersW
OpenPrinterA
DocumentPropertiesA
DeviceCapabilitiesA
ClosePrinter
SetJobA
EnumPrintersA
GetJobA
ord203
advapi32
CryptAcquireContextA
ReportEventA
RegisterEventSourceA
RegQueryValueA
RegEnumKeyA
EnumDependentServicesA
ControlService
QueryServiceConfigA
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
CloseServiceHandle
IsValidSecurityDescriptor
LookupPrivilegeValueA
AdjustTokenPrivileges
DeregisterEventSource
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
CryptGetHashParam
OpenProcessToken
GetTokenInformation
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
RegEnumValueA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetMalloc
DragQueryFileA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteExA
Shell_NotifyIconA
ShellExecuteA
SHAppBarMessage
DragFinish
ExtractIconExA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoA
SHFileOperationA
comctl32
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
ole32
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoRegisterMessageFilter
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CLSIDFromProgID
CoCreateInstance
CoInitializeEx
CoUninitialize
CoCreateGuid
CoTaskMemFree
CoInitialize
oleaut32
SysFreeString
VariantInit
VariantClear
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
GetErrorInfo
SysAllocStringByteLen
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
oledlg
ord8
gdiplus
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetCompositingMode
GdipSetInterpolationMode
GdipSetPageUnit
GdipFillRectangle
GdipDrawString
GdipMeasureString
GdipDrawImageRectRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipDeleteStringFormat
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipDrawImageI
GdipAlloc
GdipFree
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetImageAttributesColorKeys
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdiplusShutdown
GdiplusStartup
GdipCreateStringFormat
netapi32
NetDfsEnum
NetApiBufferFree
NetShareEnum
ws2_32
bind
listen
getsockopt
__WSAFDIsSet
ioctlsocket
setsockopt
htonl
ntohs
inet_ntoa
inet_addr
WSACleanup
recv
WSASetLastError
WSAStartup
socket
WSAGetLastError
htons
gethostbyname
connect
gethostname
closesocket
select
accept
shutdown
send
winmm
PlaySoundA
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
wininet
InternetQueryOptionA
InternetSetCookieA
InternetQueryDataAvailable
FtpSetCurrentDirectoryA
HttpOpenRequestA
InternetConnectA
FtpFindFirstFileA
HttpSendRequestExA
FtpGetCurrentDirectoryA
FtpPutFileA
HttpAddRequestHeadersA
HttpQueryInfoA
InternetFindNextFileA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpEndRequestA
InternetSetOptionExA
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CODE Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 412KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 508KB - Virtual size: 507KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ