2024-06-30_fb02382c4ca422c93f06c4b60deb8d0b_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-06-30_fb02382c4ca422c93f06c4b60deb8d0b_mafia
Size

3.8MB
MD5

fb02382c4ca422c93f06c4b60deb8d0b
SHA1

769b4b4f2dabe686062cb96f43fc27a7609fc21f
SHA256

21467e11759ae563223494401d434c06e11314f7127b67579512e74228444cdd
SHA512

7381061e211aa0bf9bc920e2eab1970e1a7e5b5f38b8b2380282bcc91aa2ea9efab93c50bcef2a8d29799855f7caf5596eddfe5cdd45c1e69028110001636d84
SSDEEP

98304:Jp8R5cibyVSsWrIq9gKSdieNaQb3/cZBYDJRE7jcEr9WL977iQv:D8R5PuVSsCIq9gKiPD2jciWL9777

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-30_fb02382c4ca422c93f06c4b60deb8d0b_mafia

Files

2024-06-30_fb02382c4ca422c93f06c4b60deb8d0b_mafia
.exe windows:5 windows x86 arch:x86

334720d9af30db5dae438cfde11c1e43

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

kernel32

ExitThread
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
IsValidCodePage
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
GetLocaleInfoW
LCMapStringW
GetCommandLineA
HeapCreate
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
WriteConsoleW
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryW
GetProcessHeap
SetEnvironmentVariableA
ExitProcess
GetDateFormatA
GetTimeFormatA
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
HeapFree
HeapReAlloc
DecodePointer
EncodePointer
SearchPathA
GetNumberFormatA
GetWindowsDirectoryA
SetErrorMode
GetVolumeInformationA
MoveFileA
GetStringTypeExA
GetFileSizeEx
GetFileAttributesExA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
GlobalHandle
GlobalReAlloc
GetACP
FindResourceExW
GlobalFlags
GetThreadLocale
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
GetModuleHandleW
FindFirstFileA
FindNextFileA
FindClose
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
ReplaceFileA
GetUserDefaultLCID
LocalAlloc
FileTimeToLocalFileTime
GetProfileIntA
GetCurrentProcessId
SetThreadPriority
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
CopyFileA
FormatMessageA
LocalFree
lstrlenW
MulDiv
RaiseException
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
FreeResource
RtlUnwind
GetStartupInfoW
VirtualProtect
ExpandEnvironmentStringsA
AreFileApisANSI
GetSystemTime
GetTempPathA
DeleteFileW
TlsAlloc
LockFileEx
GetTempPathW
FlushFileBuffers
GetFileAttributesW
GetFileAttributesA
LoadLibraryW
TlsSetValue
GetSystemTimeAsFileTime
LockFile
UnlockFile
SetEndOfFile
TlsGetValue
GetFullPathNameA
GetFullPathNameW
CreateThread
GetVersion
GetVersionExA
GetTickCount
GetFileInformationByHandle
CreateFileMappingA
GetLocalTime
FileTimeToSystemTime
UnmapViewOfFile
MapViewOfFile
GetFileSize
LocalFileTimeToFileTime
DuplicateHandle
GetCurrentDirectoryA
GlobalFree
lstrcmpiA
CreateFileW
ReadFile
SetFileTime
IsBadReadPtr
CreateDirectoryW
GetCurrentProcess
SystemTimeToFileTime
lstrcmpA
FindResourceA
GetPrivateProfileSectionA
lstrcpyA
ResumeThread
PulseEvent
WriteFile
SetFilePointer
CreateFileA
GetPrivateProfileIntA
InitializeCriticalSectionAndSpinCount
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetExitCodeThread
Sleep
SuspendThread
CloseHandle
lstrlenA
InterlockedExchange
GetPrivateProfileStringA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
RemoveDirectoryA
DeleteFileA
GlobalSize
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalAlloc
CreateDirectoryA
ActivateActCtx
DeactivateActCtx
SetEvent
WaitForSingleObject
CreateEventA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetProcAddress
LoadLibraryA
FreeLibrary
SetLastError
GetCurrentThreadId
GetLastError
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalGetAtomNameA
HeapSetInformation
GetStringTypeW

user32

FrameRect
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
GetWindowRgn
HideCaret
InvertRect
GetMenuDefaultItem
SetWindowRgn
UnionRect
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
PostThreadMessageA
SetLayeredWindowAttributes
EnumDisplayMonitors
LoadAcceleratorsW
CharUpperA
UnregisterClassA
SetCursorPos
RealChildWindowFromPoint
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
NotifyWinEvent
CharNextA
WaitMessage
ShowOwnedPopups
SetWindowContextHelpId
IsRectEmpty
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
GrayStringA
DrawTextExA
DrawTextA
GetWindowThreadProcessId
RemoveMenu
IsDialogMessageA
IsDlgButtonChecked
GetDlgItemTextA
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
ScrollWindow
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CreateDialogIndirectParamA
EndDialog
GetActiveWindow
GetAsyncKeyState
IsWindowEnabled
DrawIconEx
ShowScrollBar
DrawTextW
TabbedTextOutA
SetActiveWindow
SetParent
FindWindowA
SetMenuDefaultItem
LoadIconA
LoadImageA
MoveWindow
ValidateRect
ShowWindow
DestroyCursor
GetCapture
GetMessageA
GetDlgCtrlID
LoadBitmapA
FillRect
InflateRect
GetWindowDC
ReleaseCapture
SetCapture
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
SetMenu
LoadMenuA
GetMenuStringA
GetMenu
GetMenuState
SystemParametersInfoA
PtInRect
DrawStateA
DrawFocusRect
OffsetRect
SetRect
MapWindowPoints
IntersectRect
SetRectEmpty
SetWindowPos
SetPropA
CallWindowProcA
RemovePropA
GetPropA
EndPaint
BeginPaint
GetUpdateRect
GetFocus
GetComboBoxInfo
TranslateMessage
GetDesktopWindow
SetDlgItemTextA
IsWindowVisible
MessageBeep
GetSysColorBrush
GetParent
GetScrollBarInfo
CheckMenuItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindow
GetMessagePos
GetMenuItemID
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
LoadCursorA
DrawFrameControl
KillTimer
TrackPopupMenu
SetForegroundWindow
DestroyIcon
CreateIconIndirect
IsZoomed
CopyRect
DeleteMenu
InsertMenuA
CreatePopupMenu
DrawIcon
GetSystemMetrics
IsIconic
RedrawWindow
SetTimer
GetSystemMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
IsMenu
MonitorFromPoint
UpdateLayeredWindow
MapVirtualKeyExA
IsCharLowerA
LoadImageW
LockWindowUpdate
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
LoadIconW
GetMenuItemCount
EnumChildWindows
GetWindowInfo
SetWindowTextA
GetWindowTextA
GetClassNameA
WindowFromPoint
RegisterClipboardFormatA
GetDlgItem
SetClipboardData
ToAsciiEx
DrawEdge
SetClassLongA
DestroyAcceleratorTable
CopyImage
GetIconInfo
DrawAnimatedRects
EnableScrollBar
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
wsprintfA
SetFocus
GetNextDlgTabItem
GetKeyState
GetMenuItemInfoA
ModifyMenuA
SetMenuItemInfoA
AppendMenuA
CreateMenu
EnableMenuItem
GetSubMenu
LoadMenuW
IsClipboardFormatAvailable
ClientToScreen
ScreenToClient
GetCursorPos
UpdateWindow
GetWindowRect
SendMessageA
GetSysColor
IsWindow
SetCursor
InvalidateRect
PostQuitMessage
ReleaseDC
GetDC
GetClientRect
LoadBitmapW
LoadCursorW
RegisterWindowMessageA
MessageBoxA
PostMessageA
DefWindowProcA
GetWindowLongA
DestroyWindow
SetWindowLongA
CreateWindowExA
RegisterClassExA
EnableWindow
MapDialogRect

gdi32

ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
GetCharWidthA
GetBkColor
GetTextColor
EnumFontFamiliesExA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetRgnBox
CreateEllipticRgn
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
SetWindowExtEx
GetSystemPaletteEntries
OffsetWindowOrgEx
CreateRoundRectRgn
CreatePolygonRgn
Polyline
StretchBlt
SetPixel
OffsetRgn
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
GetClipBox
SetMapMode
RealizePalette
ExcludeClipRect
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
DeleteObject
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
CreateBitmap
SetBkColor
SetTextColor
StretchDIBits
CreatePen
GetViewportOrgEx
Rectangle
Polygon
CreateFontA
CreateCompatibleBitmap
GetTextMetricsA
Ellipse
CreateSolidBrush
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
DPtoLP
GetDeviceCaps
CreateRectRgn
EnumFontsA
GetTextExtentPoint32A
LPtoDP
SetDIBColorTable
CreateDIBSection
DeleteDC
SelectObject
CreateFontIndirectA
GetStockObject
GetObjectA
GetPixel
BitBlt
CreateCompatibleDC
IntersectClipRect

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
SetFileSecurityA
RegEnumKeyExA
RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
GetFileSecurityA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
DragQueryFileA
DragFinish
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteA
SHGetFileInfoA
SHAddToRecentDocs
SHAppBarMessage

comctl32

ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

ole32

OleUninitialize
CoFreeUnusedLibraries
CoCreateGuid
CLSIDFromProgID
CoInitializeEx
CoCreateInstance
CoUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleInitialize
CoTaskMemFree
CLSIDFromString
OleGetClipboard
CreateStreamOnHGlobal
CoInitialize
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor

oleaut32

SysFreeString
SysAllocString
VarBstrFromDate
SafeArrayDestroy
VariantCopy
SysStringLen
OleCreateFontIndirect
SysAllocStringByteLen
VariantChangeType
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
VarDateFromStr
SysAllocStringLen
VariantInit

oledlg

ord8

ws2_32

WSAStartup
WSACleanup
select
sendto
recvfrom
ntohl
ioctlsocket
accept
connect
WSAAsyncGetHostByName
send
recv
WSACancelAsyncRequest
closesocket
bind
htonl
WSAAsyncSelect
socket
WSASetLastError
htons
gethostbyname
WSAGetLastError
inet_addr

gdiplus

GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

InternetGetLastResponseInfoA
InternetSetOptionExA
HttpOpenRequestA
InternetConnectA
FtpFindFirstFileA
FtpCommandA
FtpOpenFileA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetQueryDataAvailable
InternetCloseHandle
InternetFindNextFileA
HttpQueryInfoA
FtpGetFileA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpDeleteFileA

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 526KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

334720d9af30db5dae438cfde11c1e43

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

ws2_32

gdiplus

oleacc

wininet

imm32

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 514KB - Virtual size: 514KB

.data Size: 82KB - Virtual size: 122KB

.rsrc Size: 526KB - Virtual size: 526KB

.reloc Size: 243KB - Virtual size: 243KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 514KB - Virtual size: 514KB

.data
Size: 82KB - Virtual size: 122KB

.rsrc
Size: 526KB - Virtual size: 526KB

.reloc
Size: 243KB - Virtual size: 243KB