2024-06-27_7be977f27c1c77caf7356b3ef1919786_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-27_7be977f27c1c77caf7356b3ef1919786_mafia
Size

7.3MB
MD5

7be977f27c1c77caf7356b3ef1919786
SHA1

5b96f12b865c77eb584a861d53844d2b16e9c20c
SHA256

a9220091d28e0568d92ffa79ab6ce0695c0d6748c8bd742445725cbb4dc89ea7
SHA512

fcfdf6bf0a38b4cd2c2c4d5b98def1107588beff75476ec8d79f877b547b2f68ecc5b55588851c8646b1f33437a103c3a6a015ed8a8fc8ffc1ebf2410aad6013
SSDEEP

98304:mfrEJc6Z4q/x48sndSht7QTVOMFxlJtw9B/4iJTS1Pe6MUut/I6hw+e6/cQTL/C8:mY+n0t7elziCHupW60Oowc663GW8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-27_7be977f27c1c77caf7356b3ef1919786_mafia

Files

2024-06-27_7be977f27c1c77caf7356b3ef1919786_mafia
.exe windows:5 windows x86 arch:x86

679118320baf179283c7cf003cb1d6f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

pthread

pthread_cond_timedwait
pthread_cond_wait
pthread_cond_broadcast
pthread_cond_signal
pthread_cond_destroy
pthread_cond_init
pthread_attr_setstacksize
pthread_attr_setdetachstate
pthread_create
pthread_attr_init
pthread_attr_destroy
sem_post
sem_trywait
sem_wait
sem_destroy
sem_init
pthread_self
pthread_equal
pthread_mutex_unlock
pthread_mutex_trylock
pthread_mutex_lock
pthread_mutex_destroy
pthread_mutexattr_init
pthread_mutexattr_settype
pthread_mutex_init
pthread_mutexattr_destroy

kernel32

FreeLibrary
GetModuleHandleA
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
ActivateActCtx
FindResourceA
CreateSemaphoreA
ReleaseSemaphore
CreateMutexA
ReleaseMutex
WaitForMultipleObjects
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
GetModuleFileNameA
GetUserDefaultLCID
GetFileAttributesA
SystemTimeToFileTime
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
GetModuleHandleW
lstrcmpA
InterlockedExchange
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
LocalReAlloc
DeleteCriticalSection
GetAtomNameA
GetThreadLocale
FileTimeToSystemTime
GlobalFlags
GetCPInfo
GetOEMCP
GetACP
lstrcpyA
GetStringTypeExA
lstrcmpiA
CreateFileA
DeleteFileA
MoveFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
FindClose
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
GetFileAttributesExA
SetFileAttributesA
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSizeEx
GetCurrentDirectoryA
GetWindowsDirectoryA
GetNumberFormatA
GetTempPathA
SetErrorMode
InitializeCriticalSectionAndSpinCount
VirtualProtect
GetTickCount
GetProfileIntA
GetProcAddress
FindResourceExW
LocalUnlock
LocalLock
RtlUnwind
RaiseException
DecodePointer
EncodePointer
GetTimeFormatA
GetDateFormatA
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
HeapAlloc
ExitThread
CreateThread
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
HeapQueryInformation
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
GetStdHandle
GetLocaleInfoW
GetTimeZoneInformation
GetStringTypeW
FatalAppExitA
SetConsoleCtrlHandler
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
CompareStringW
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
WriteConsoleW
CreateFileW
InterlockedCompareExchange
DeactivateActCtx
lstrcmpW
SetLastError
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
QueryPerformanceCounter
QueryPerformanceFrequency
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
CreateEventA
SetEvent
ResumeThread
SuspendThread
GetCurrentProcess
GetCurrentThread
SetEnvironmentVariableW
DuplicateHandle
SetThreadPriority
GetThreadPriority
GetLastError
FormatMessageA
LocalFree
CloseHandle
CompareStringA
LoadLibraryW
SearchPathA
LoadLibraryA
OutputDebugStringA
GetComputerNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
SleepEx
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
Sleep
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
FreeResource

user32

SetCursor
GetWindowThreadProcessId
DestroyIcon
LoadImageA
GetMenuBarInfo
DestroyMenu
LoadMenuA
ReuseDDElParam
UnpackDDElParam
ValidateRect
GetCursorPos
TranslateMessage
GetMessageA
IsZoomed
IsRectEmpty
DeleteMenu
GetSystemMenu
SetParent
PostQuitMessage
ShowOwnedPopups
LoadAcceleratorsW
LoadMenuW
SystemParametersInfoA
FillRect
DrawIcon
SetWindowRgn
SetTimer
KillTimer
SetCapture
LoadCursorW
SetRect
DestroyCursor
LoadCursorA
GetSysColorBrush
InflateRect
GetMenuItemInfoA
RealChildWindowFromPoint
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
GetDialogBaseUnits
EnumDisplayMonitors
SetLayeredWindowAttributes
UnionRect
UnregisterClassA
CharUpperA
WindowFromPoint
GetDCEx
LockWindowUpdate
InSendMessage
WindowFromDC
CopyAcceleratorTableA
CreateMenu
PostThreadMessageA
GetTabbedTextExtentW
GetMenuDefaultItem
GetAsyncKeyState
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
MessageBeep
GetIconInfo
CopyImage
GetNextDlgGroupItem
DrawIconEx
DrawStateA
DrawEdge
DrawFrameControl
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetClassLongA
DestroyAcceleratorTable
SetCursorPos
ToAsciiEx
GetKeyboardLayout
OffsetRect
ReleaseCapture
SetMenuItemBitmaps
WaitMessage
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
MapVirtualKeyExA
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
GetUpdateRect
RegisterClipboardFormatA
CharUpperBuffA
SubtractRect
FrameRect
SendNotifyMessageA
MapDialogRect
EnumChildWindows
GetWindowRgn
GetTabbedTextExtentA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetClientRect
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
GetWindow
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
SetRectEmpty
RedrawWindow
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
TranslateAcceleratorA
TranslateMDISysAccel
LoadAcceleratorsA
InvalidateRect
IsIconic
InsertMenuItemA
CreatePopupMenu
CreateAcceleratorTableA
IntersectRect
BringWindowToTop
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
MsgWaitForMultipleObjectsEx
ScrollWindowEx
ShowWindow
MoveWindow
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetKeyboardState
GetDC
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
CheckMenuItem
PeekMessageA
UpdateWindow
PostMessageA
ClientToScreen
EnableWindow
GetSystemMetrics
SendMessageA
GetWindowRect
LoadIconW
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
IsClipboardFormatAvailable
GetDlgItem
GetParent

gdi32

SetTextColor
SetBkColor
GetObjectA
CreateBitmap
CreateRectRgnIndirect
PatBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
GetCharWidthA
SelectObject
CreateFontA
DeleteDC
StretchDIBits
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetCurrentObject
GetMapMode
CreateSolidBrush
CombineRgn
SetRectRgn
CreateHatchBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
CreateDCA
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
CopyMetaFileA
GetStretchBltMode
GetTextColor
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
CreatePalette
GetPaletteEntries
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetLayout
GetLayout
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
Polyline
Polygon
CreateRoundRectRgn
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
SetDIBColorTable
GetDIBits
StretchBlt
SetPixel
OffsetRgn
GetRgnBox
EnumFontFamiliesExA
SelectPalette
RoundRect
SetPixelV
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetTextMetricsA
GetTextExtentPoint32A
CreateFontIndirectA
CreateEllipticRgn
SetPaletteEntries
ExtFloodFill
DPtoLP
LPtoDP
Ellipse
BitBlt
CreateDIBSection
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreatePen
GetViewportOrgEx
Rectangle
GetStockObject
ExtTextOutA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
GetDeviceCaps

ws2_32

getsockname
listen
bind
htonl
accept
send
ntohs
inet_ntoa
htons
gethostname
WSAStartup
WSACleanup
WSAGetLastError
socket
inet_addr
gethostbyname
closesocket
recv
connect
setsockopt

msimg32

TransparentBlt
AlphaBlend

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ImageList_GetIconSize
ImageList_DrawEx
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_GetImageCount
ImageList_Create
ImageList_GetIcon
ImageList_ReplaceIcon

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA
PathRemoveExtensionA

oledlg

ord8

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

comdlg32

GetFileTitleA

advapi32

RegOpenKeyExW
GetUserNameA
RegCloseKey
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegEnumValueA

shell32

SHBrowseForFolderA
SHGetMalloc
SHAppBarMessage
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs
SHGetFileInfoA
DragQueryFileA
DragFinish
ShellExecuteExA

ole32

CoCreateGuid
CoUninitialize
CoCreateInstance
CoInitializeEx
StringFromGUID2
CoDisconnectObject
CLSIDFromString
CoInitialize
CreateStreamOnHGlobal
OleRegEnumVerbs
OleRegGetMiscStatus
OleTranslateAccelerator
PropVariantCopy
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
StgCreateDocfile
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
StgCreateDocfileOnILockBytes
OleSave
WriteClassStm
OleSaveToStream
OleDuplicateData
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
OleIsRunning
GetRunningObjectTable
CoLockObjectExternal
OleRun
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetClipboard
OleSetMenuDescriptor
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleQueryCreateFromData
OleQueryLinkFromData
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
RegisterDragDrop
RevokeDragDrop
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleLockRunning
IsAccelerator

oleaut32

SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
VarDateFromStr
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysFreeString
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
SafeArrayCreate
SysAllocString

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

679118320baf179283c7cf003cb1d6f4

Headers

DLL Characteristics

File Characteristics

Imports

pthread

kernel32

user32

gdi32

ws2_32

msimg32

winspool.drv

comctl32

shlwapi

oledlg

oleacc

gdiplus

imm32

winmm

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 5.4MB - Virtual size: 5.4MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 75KB - Virtual size: 116KB

.idata Size: 25KB - Virtual size: 24KB

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 416KB - Virtual size: 416KB

.text
Size: 5.4MB - Virtual size: 5.4MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 75KB - Virtual size: 116KB

.idata
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 416KB - Virtual size: 416KB