2024-06-28_ce8c9450736e3f8e0bb6e94ce1e63e2d_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-28_ce8c9450736e3f8e0bb6e94ce1e63e2d_mafia
Size

2.3MB
MD5

ce8c9450736e3f8e0bb6e94ce1e63e2d
SHA1

ceb6559afc3eababe865aa53df8ee176001aff69
SHA256

50297474c2267e337ea9bfb3defebb9608947ded105950001700aa97bbeeb9e2
SHA512

61842b68adfec32fbaf93eff8a2326af76d496889beab5fc175f0287141c19aa423757fc6f31f08a39777685664c8aeb3f74a74c34dad4d4a5e6e1400468a4e7
SSDEEP

49152:VBwmntSamypwUwYijcUqvNDyETLST4JlebX7yzujXnJsuvKD9QTX60nITJl:pdp1ijcUqNtTLST4JlebXJjXnJjKD9QI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-28_ce8c9450736e3f8e0bb6e94ce1e63e2d_mafia

Files

2024-06-28_ce8c9450736e3f8e0bb6e94ce1e63e2d_mafia
.exe windows:5 windows x86 arch:x86

c201fca92f7daefb742f9b3452291438

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ZB_tool_build\CP_DownToolsPlatform\Download_UI_2.0\Release\YGDP_UI.pdb

Imports

kernel32

GetConsoleCP
GetConsoleMode
WriteConsoleW
GetStringTypeW
SetEnvironmentVariableA
LCMapStringW
GetTimeZoneInformation
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
SizeofResource
VirtualAlloc
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
ExitProcess
RaiseException
RtlUnwind
CreateThread
ExitThread
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetNumberFormatW
GetWindowsDirectoryW
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
GetCurrentDirectoryW
GetTempFileNameW
GetFileTime
GetFileAttributesW
GetUserDefaultLCID
lstrcpyW
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
DeleteFileW
lstrcmpiW
GetThreadLocale
SuspendThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetTickCount
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
GlobalGetAtomNameW
CopyFileW
GlobalSize
FormatMessageW
LocalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
lstrcmpW
ResetEvent
SetEvent
WaitForSingleObject
FreeResource
ResumeThread
MulDiv
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GlobalUnlock
GlobalLock
GetModuleFileNameW
GlobalFree
GlobalAlloc
lstrlenA
CloseHandle
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
lstrlenW
CreateDirectoryW
GetLocalTime
GetCommandLineW
ReleaseMutex
CreateMutexW
ActivateActCtx
GetModuleHandleW
GetLastError
DeactivateActCtx
SetLastError
Sleep
MultiByteToWideChar
GetProcAddress
LoadLibraryW
FreeLibrary
FindResourceW
LoadResource
LockResource

user32

IsCharLowerW
LockWindowUpdate
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DestroyAcceleratorTable
NotifyWinEvent
EnableScrollBar
HideCaret
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
IsClipboardFormatAvailable
GetNextDlgGroupItem
CopyAcceleratorTableW
CharNextW
PostThreadMessageW
UnregisterClassW
SetParent
DeleteMenu
EnumDisplayMonitors
GetSysColorBrush
RealChildWindowFromPoint
CharUpperW
ShowOwnedPopups
GetMessageW
ValidateRect
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
PostQuitMessage
MapVirtualKeyW
GetKeyNameTextW
EndPaint
BeginPaint
GetMenuItemInfoW
IsZoomed
DrawIcon
SystemParametersInfoW
SetCursorPos
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
GetWindowThreadProcessId
LoadAcceleratorsW
IsIconic
InsertMenuItemW
CreatePopupMenu
IntersectRect
TranslateAcceleratorW
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
DestroyWindow
GetMessageTime
MapVirtualKeyExW
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
GetMenu
GetWindowTextLengthW
GetWindowTextW
SetWindowPos
IsWindowEnabled
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetDlgItem
CheckDlgButton
GetWindow
GrayStringW
DrawTextExW
TabbedTextOutW
SetRect
SetFocus
ReleaseCapture
GetCapture
SetCapture
EnableWindow
GetWindowLongW
SetWindowLongW
SetLayeredWindowAttributes
GetClientRect
TrackMouseEvent
SetClassLongW
GetClassLongW
ScreenToClient
GetDlgCtrlID
IsRectEmpty
SetRectEmpty
CopyImage
DestroyCursor
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
DefWindowProcW
GetClassInfoW
IsWindowVisible
UpdateLayeredWindow
MonitorFromPoint
IsMenu
WaitMessage
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
GetWindowRgn
MoveWindow
MapWindowPoints
DrawFrameControl
UnionRect
MessageBeep
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
DispatchMessageW
TranslateMessage
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
GetMessagePos
GetUpdateRect
SendMessageW
GetWindowRect
RedrawWindow
LoadIconW
UpdateWindow
GetSystemMetrics
GetMenuItemCount
GetSystemMenu
EnableMenuItem
ModifyMenuW
GetSubMenu
GetMenuItemID
LoadBitmapW
InvalidateRgn
InvalidateRect
PostMessageW
OffsetRect
GetParent
IsWindow
GetFocus
GetDC
GetIconInfo
CreateIconIndirect
ReleaseDC
DestroyIcon
LoadImageW
CopyRect
GetWindowDC
DrawStateW
GetSysColor
InflateRect
FillRect
FrameRect
DrawEdge
DrawFocusRect
ClientToScreen
PtInRect
DrawIconEx
DrawTextW
GetCursorPos
WindowFromPoint
SetTimer
KillTimer
SetWindowRgn
FindWindowW
ShowWindow
BringWindowToTop
EqualRect
BeginDeferWindowPos
EndDeferWindowPos
LoadCursorW
SetCursor
CreateAcceleratorTableW

gdi32

ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
GetMapMode
GetCharWidthW
StretchDIBits
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
Polyline
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExW
GetWindowOrgEx
GetViewportOrgEx
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
GetClipBox
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
CreateRectRgn
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextMetricsW
CreateDIBSection
Ellipse
LPtoDP
DPtoLP
CreateEllipticRgn
PatBlt
CreateDCW
CopyMetaFileW
CreateBitmap
SetBkColor
SetTextColor
GetDeviceCaps
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetTextExtentPoint32W
DeleteDC
SetPixelV
Polygon
PtInRegion
RoundRect
SelectObject
CreatePen
FrameRgn
FillRgn
CombineRgn
CreatePolygonRgn
CreateRoundRectRgn
GetStockObject
CreateFontIndirectW
GetCurrentObject
GetBkColor
GetTextColor
CreateSolidBrush
BitBlt
CreateCompatibleDC
DeleteObject
SetDIBits
CreateCompatibleBitmap
GetDIBits
CreateFontW
GetObjectW
ExcludeClipRect

msimg32

AlphaBlend
TransparentBlt
GradientFill

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumKeyExW
RegCloseKey

shell32

SHGetDesktopFolder
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW
DragFinish
SHAppBarMessage
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetFileInfoW
DragQueryFileW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CoInitializeEx
CLSIDFromString
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CLSIDFromProgID
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
OleUninitialize

oleaut32

VariantCopy
SysFreeString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocString
OleLoadPicture

oledlg

OleUIBusyW

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdiplusShutdown
GdiplusStartup
GdipDeleteRegion
GdipCreateRegionHrgn
GdipFillRegion
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetLinePresetBlend
GdipCreateLineBrushFromRect
GdipCloneBrush
GdipDeleteBrush
GdipAlloc
GdipFree
GdipDrawImageI

winmm

PlaySoundW

netapi32

NetApiBufferFree
NetGetJoinInformation

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c201fca92f7daefb742f9b3452291438

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

winmm

netapi32

oleacc

imm32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 347KB - Virtual size: 347KB

.data Size: 28KB - Virtual size: 60KB

.rsrc Size: 268KB - Virtual size: 268KB

.reloc Size: 186KB - Virtual size: 186KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 347KB - Virtual size: 347KB

.data
Size: 28KB - Virtual size: 60KB

.rsrc
Size: 268KB - Virtual size: 268KB

.reloc
Size: 186KB - Virtual size: 186KB