2024-07-04_e19cfeb8b3bf2027a5570cfa9ef3dcdb_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-07-04_e19cfeb8b3bf2027a5570cfa9ef3dcdb_mafia
Size

5.7MB
MD5

e19cfeb8b3bf2027a5570cfa9ef3dcdb
SHA1

7d5a2fa56b5097c9fa8639cd479b3522f730b0cd
SHA256

75faf4b58e8c1be230e0b7e89b69913498ccfdeaa116c4db9c12070d9d26e720
SHA512

3ed07f460a17b0c0b526ed01fc8e638a233f72e9a79bc94516eef9fee044eb87817a178febbea08dd02149444c0c183eaf3d60fe7d9b4147024e57f8ed893a07
SSDEEP

98304:X+RRqJ9FF8h2t8KHLJyGNyVS3206E0VKUzD1e7L7ig6w/FoPGsedyyQoh:X+RqPLJo0qKUn1UtFoPGskyyQoh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-04_e19cfeb8b3bf2027a5570cfa9ef3dcdb_mafia

Files

2024-07-04_e19cfeb8b3bf2027a5570cfa9ef3dcdb_mafia
.exe windows:5 windows x86 arch:x86

e090cb5d60ddefdb005ce1bc5bc79d29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iq_ui

ui_FinalResult
ui_Result
ui_save_serial_number
ui_save_mac_address
ui_get_mac_address
ui_get_mac_addr_vendor_id
ui_uCurrentFlow
ui_RES_BT
GUI_ui_init_system
get_ui_setup
ui_Read_Setup
ui_Init
ui_TestName
ui_Progress
ui_move_log
OTP_Control_DLL
SB_Control_DLL
ui_FLOW
ui_End

kernel32

GetLocaleInfoW
GetDriveTypeW
FatalAppExitA
SetConsoleCtrlHandler
CompareStringW
GetConsoleCP
GetConsoleMode
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryW
SetCurrentDirectoryW
WriteConsoleW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
MultiByteToWideChar
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
GetVersionExA
GetVersion
FindResourceA
lstrcmpiA
lstrlenA
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetLastError
DeactivateActCtx
GetLastError
ActivateActCtx
GetCPInfo
lstrlenW
CloseHandle
WriteFile
CreateFileA
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
GetFileAttributesA
LocalFree
FormatMessageA
MoveFileA
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
CopyFileA
CreateDirectoryA
Sleep
GetCurrentThreadId
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
CreatePipe
ReadFile
WaitForSingleObject
ReleaseMutex
ResumeThread
TerminateThread
SleepEx
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GlobalFree
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
InterlockedDecrement
FreeLibrary
SetThreadPriority
SetEvent
SuspendThread
CreateEventA
lstrcmpW
LoadLibraryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
lstrcmpA
GetModuleFileNameA
GetCurrentProcessId
FileTimeToSystemTime
FileTimeToLocalFileTime
InterlockedExchange
GetModuleHandleW
LoadLibraryExA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetOEMCP
GetAtomNameA
GetSystemDirectoryW
lstrcpyA
GetACP
GetThreadLocale
SystemTimeToFileTime
GetStringTypeExA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetNumberFormatA
SetErrorMode
GetFileAttributesExA
LocalFileTimeToFileTime
SetFileTime
GetFileSizeEx
GetFileTime
GetTickCount
GetProfileIntA
SearchPathA
VirtualProtect
GetUserDefaultLCID
ReplaceFileA
GetDiskFreeSpaceA
FindResourceExW
LocalUnlock
LocalLock
HeapFree
HeapAlloc
RtlUnwind
EncodePointer
DecodePointer
RaiseException
GetSystemTimeAsFileTime
FindFirstFileExA
GetTimeZoneInformation
ExitThread
CreateThread
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapReAlloc
ExitProcess
HeapSize
HeapQueryInformation
SetStdHandle
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsValidCodePage
LCMapStringW
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter

user32

EnumDisplayMonitors
CopyImage
UnregisterClassA
LoadCursorA
RealChildWindowFromPoint
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
EndDialog
IntersectRect
MapVirtualKeyA
GetKeyNameTextA
GetWindowThreadProcessId
ScrollWindowEx
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
KillTimer
SetTimer
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
SetRectEmpty
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SendNotifyMessageA
SetWindowPos
SetLayeredWindowAttributes
EndPaint
BeginPaint
GetWindowDC
SetWindowsHookExA
CallNextHookEx
GetMessageA
IsWindowVisible
GetKeyState
ValidateRect
UnhookWindowsHookEx
GetMenuStringA
DestroyMenu
SendMessageTimeoutA
GetCursorPos
ScreenToClient
ReleaseCapture
GetFocus
SetCapture
UpdateWindow
PtInRect
PeekMessageA
TranslateMessage
DispatchMessageA
FindWindowA
MessageBoxA
LoadIconW
IsIconic
DrawIcon
IsWindow
SetWindowLongA
RedrawWindow
DestroyCursor
LoadImageA
GetIconInfo
CreateIconIndirect
PostMessageA
SetCursor
IsMenu
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
OffsetRect
IsClipboardFormatAvailable
SetMenuDefaultItem
PostThreadMessageA
InflateRect
DrawStateA
SetRect
CopyRect
LoadBitmapW
InSendMessage
UpdateLayeredWindow
GetMenuItemInfoA
GetSystemMetrics
SystemParametersInfoA
DrawIconEx
DestroyIcon
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetSysColorBrush
GetSysColor
EnableWindow
GetDesktopWindow
ReleaseDC
GetDC
RemoveMenu
LoadCursorW
TranslateAcceleratorA
GetTabbedTextExtentA
GetTabbedTextExtentW
EnumChildWindows
GetWindowRgn
WindowFromDC
SubtractRect
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
CharUpperBuffA
CopyIcon
ModifyMenuA
InsertMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
DrawEdge
FillRect
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetWindow
GetUpdateRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
RegisterClipboardFormatA
GetDCEx
UnionRect
EnableScrollBar
BringWindowToTop
InvertRect
GetMenuDefaultItem
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
LoadMenuW
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
DestroyAcceleratorTable
SetWindowRgn
IsZoomed
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
CharUpperA
WaitMessage
GetDialogBaseUnits
SetParent
GetSystemMenu
IsRectEmpty
UnpackDDElParam
ReuseDDElParam
LoadMenuA
GetMenuBarInfo
LoadAcceleratorsA
GetMenu
InsertMenuItemA
HideCaret

gdi32

TextOutA
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetTextExtentPoint32A
SetPixel
GetPixel
BitBlt
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
GetTextMetricsA
SetPixelV
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetNearestColor
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
EnumFontFamiliesExA
RoundRect
GetDIBits
SetDIBColorTable
OffsetRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Polyline
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
GetCurrentObject
GetRgnBox
GetTextColor
GetTextCharsetInfo
EnumFontFamiliesA
CreatePen
CreateDIBitmap
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
GetBkColor
StretchDIBits
GetCharWidthA
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetLayout
GetLayout
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
Polygon
CreateRectRgnIndirect
CreateFontA
StretchBlt
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
GetTextExtentPoint32W
Escape
ExtTextOutA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

GetJobA
DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

SetFileSecurityA
GetFileSecurityA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegOpenKeyExW
RegEnumKeyExA

shell32

ShellExecuteA
DragFinish
DragQueryFileA
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
SHBrowseForFolderA
SHGetMalloc
SHAppBarMessage
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

ImageList_GetImageCount
ImageList_AddMasked
ImageList_GetIconSize
_TrackMouseEvent
ord17
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_DrawEx
ImageList_Remove
ImageList_Destroy
ImageList_Create

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
OleCreateFromData
ReadClassStg
ReadFmtUserTypeStg
CLSIDFromString
WriteClassStg
WriteFmtUserTypeStg
OleSaveToStream
WriteClassStm
OleSave
PropVariantCopy
StringFromGUID2
CoDisconnectObject
CoCreateInstance
CoInitialize
CoUninitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoInitializeEx
OleRun
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
CreateStreamOnHGlobal
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
SetConvertStg
CoTaskMemFree
CoRegisterMessageFilter
CoRevokeClassObject
CreateDataAdviseHolder
CreateOleAdviseHolder
CoGetMalloc
GetRunningObjectTable
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleRegGetMiscStatus
OleRegEnumVerbs
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleRegGetUserType
OleCreateLinkFromData
StringFromCLSID
CoRegisterClassObject

oleaut32

SysStringLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SysStringByteLen
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
VariantChangeType
VariantInit
VariantClear
SafeArrayPtrOfIndex
SysFreeString
VarDateFromStr

oledlg

ord8

winmm

PlaySoundA

wsock32

recvfrom
getservbyname
gethostbyname
gethostname
accept
closesocket
shutdown
getsockname
getpeername
getsockopt
ntohl
ioctlsocket
htons
htonl
listen
bind
setsockopt
socket
WSACleanup
WSAStartup
connect
sendto
send
select
__WSAFDIsSet
recv
ntohs
WSAGetLastError

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 539KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e090cb5d60ddefdb005ce1bc5bc79d29

Headers

DLL Characteristics

File Characteristics

Imports

iq_ui

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

winmm

wsock32

oleacc

gdiplus

imm32

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 539KB - Virtual size: 538KB

.data Size: 36KB - Virtual size: 174KB

.rsrc Size: 2.6MB - Virtual size: 2.6MB

.reloc Size: 204KB - Virtual size: 204KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 539KB - Virtual size: 538KB

.data
Size: 36KB - Virtual size: 174KB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

.reloc
Size: 204KB - Virtual size: 204KB