2024-07-05_9ecdf23a769fd88a147318ce45164e61_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-05_9ecdf23a769fd88a147318ce45164e61_mafia
Size

7.2MB
MD5

9ecdf23a769fd88a147318ce45164e61
SHA1

1a849a37a0ceefea3cded153aab61a669d227477
SHA256

4ae5f59cd14c3cec3ab46c3906945e2dd3efba7846db5db3d836bad1a2bda698
SHA512

98d6bd235d54fa7177f8f2c23149f8f2f70e6ff8ea89c07bbdd6c5d43c5c95b89e9842a09c2583d21a7896939ce453f562600a0b9c5f26408d87b9e3d6dd47ff
SSDEEP

98304:YmhWkVXcnwQojLDYNuVEFkuK0Yy7W8S3VTOJj5EZM1hpH1pcIh9L35Zuuq3CdGRJ:P7LDYY3VeEZwh9IznGCAjLFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-05_9ecdf23a769fd88a147318ce45164e61_mafia

Files

2024-07-05_9ecdf23a769fd88a147318ce45164e61_mafia
.exe windows:5 windows x86 arch:x86

fea74c6877fda1368aad6baf91869f25

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

pthread

pthread_cond_timedwait
pthread_cond_wait
pthread_cond_broadcast
pthread_cond_signal
pthread_cond_destroy
pthread_cond_init
pthread_attr_setstacksize
pthread_attr_setdetachstate
pthread_create
pthread_attr_init
pthread_attr_destroy
pthread_self
pthread_equal
pthread_mutex_unlock
pthread_mutex_trylock
pthread_mutex_lock
pthread_mutex_destroy
pthread_mutexattr_init
pthread_mutexattr_settype
pthread_mutex_init
pthread_mutexattr_destroy
sem_post
sem_trywait
sem_wait
sem_destroy
sem_init

kernel32

GetProcAddress
GetModuleHandleW
GlobalAlloc
lstrcmpA
GlobalLock
LoadLibraryA
SetLastError
MultiByteToWideChar
LoadLibraryExA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetModuleFileNameA
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalAddAtomA
FreeResource
FindResourceA
GlobalFree
GlobalUnlock
MulDiv
lstrlenW
GlobalSize
CopyFileA
lstrcmpW
LoadLibraryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
GlobalFindAtomA
GlobalGetAtomNameA
LocalAlloc
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
LocalReAlloc
GetCurrentDirectoryA
GetSystemDirectoryW
lstrcpyA
GlobalFlags
InterlockedIncrement
DeleteFileA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
CreateFileA
MoveFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
GetACP
GetCPInfo
GetOEMCP
GetAtomNameA
FileTimeToSystemTime
SystemTimeToFileTime
SetErrorMode
GetTempFileNameA
GetTempPathA
GetFileAttributesExA
SetFileAttributesA
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetWindowsDirectoryA
InterlockedExchange
GetTickCount
GetProfileIntA
SearchPathA
VirtualProtect
GetUserDefaultLCID
ReplaceFileA
GetDiskFreeSpaceA
FindResourceExW
LocalUnlock
LocalLock
RtlUnwind
RaiseException
ExitProcess
DecodePointer
EncodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
HeapAlloc
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FatalAppExitA
SetConsoleCtrlHandler
GetLocaleInfoW
GetStdHandle
IsValidCodePage
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeW
CompareStringW
EnumSystemLocalesA
IsValidLocale
GetProcessHeap
SetEnvironmentVariableA
WriteConsoleW
CreateFileW
InterlockedCompareExchange
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
QueryPerformanceCounter
QueryPerformanceFrequency
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
CreateEventA
SetEvent
Sleep
ResumeThread
SuspendThread
GetCurrentProcess
GetCurrentThread
SetEnvironmentVariableW
DuplicateHandle
SetThreadPriority
GetThreadPriority
GetLastError
FormatMessageA
LocalFree
CloseHandle
FreeLibrary
InterlockedDecrement
GetNumberFormatA
GetModuleFileNameW
OutputDebugStringA
SleepEx
GetComputerNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
WideCharToMultiByte
WaitForSingleObject
FindResourceW
LoadResource
LockResource
SizeofResource
CompareStringA

user32

MoveWindow
ShowWindow
ScrollWindowEx
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
UnregisterClassA
DeleteMenu
SetRectEmpty
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
SetCapture
WindowFromPoint
ReleaseCapture
WaitMessage
DestroyIcon
CharUpperA
GetDialogBaseUnits
CharNextA
OffsetRect
CopyAcceleratorTableA
IsRectEmpty
SetRect
IntersectRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
CopyImage
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
CreatePopupMenu
NotifyWinEvent
GetAsyncKeyState
SetClassLongA
LoadMenuW
DrawStateA
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
ToAsciiEx
MapVirtualKeyA
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
BringWindowToTop
LockWindowUpdate
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
LoadImageA
GetMenuBarInfo
LoadMenuA
ReuseDDElParam
UnpackDDElParam
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
RegisterClipboardFormatA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CheckRadioButton
SetWindowTextA
UpdateLayeredWindow
IsMenu
InSendMessage
GetWindowTextLengthA
PostThreadMessageA
SetMenuDefaultItem
IsClipboardFormatAvailable
SendNotifyMessageA
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
GetKeyNameTextA
MapVirtualKeyExA
SubtractRect
DestroyCursor
WindowFromDC
GetWindowRgn
EnumChildWindows
GetDCEx
GetTabbedTextExtentW
GetTabbedTextExtentA
GetSubMenu
RemoveMenu
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
UnhookWindowsHookEx
CheckDlgButton
RegisterWindowMessageA
LoadIconA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
SendDlgItemMessageA
WinHelpA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
UnionRect
GetDlgItemInt
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetTopWindow
GetMessageTime
GetMessagePos
GetPropA
RemovePropA
MonitorFromPoint
SetFocus
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
LoadCursorA
RegisterClassA
DefWindowProcA
InvalidateRect
GetDC
GetSystemMetrics
EnableWindow
LoadIconW
KillTimer
SetTimer
GetClientRect
IsIconic
GetSystemMenu
PostMessageA
SendMessageA
AppendMenuA
DrawIcon
GetClassInfoA
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
PtInRect
GetSysColor
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
CopyRect
GetMenuStringA
GetMenuItemID
InsertMenuA
CreateMenu
GetMenuItemCount
DispatchMessageA

gdi32

CreateDCA
GetObjectA
CreateFontIndirectA
CreateCompatibleDC
BitBlt
ExtTextOutA
GetTextExtentPoint32A
SetTextColor
SetBkColor
SaveDC
RestoreDC
OffsetRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Polygon
Ellipse
Polyline
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
GetCurrentObject
DPtoLP
PatBlt
GetMapMode
CombineRgn
SelectObject
Rectangle
GetTextMetricsA
CreateSolidBrush
SetRectRgn
StretchDIBits
CreateFontA
GetCharWidthA
GetRgnBox
CopyMetaFileA
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateDIBitmap
CreateHatchBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetDeviceCaps
SetDIBColorTable
GetDIBits
StretchBlt
SetPixel
RoundRect
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextColor
GetTextFaceA
SetPixelV
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
GetTextExtentPoint32W
GetTextExtentPointA
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
CreateBitmap

ws2_32

getsockname
listen
bind
htonl
accept
send
ntohs
inet_ntoa
gethostname
htons
WSAStartup
WSACleanup
WSAGetLastError
socket
inet_addr
gethostbyname
closesocket
recv
connect
setsockopt

msimg32

TransparentBlt
AlphaBlend

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ImageList_GetIconSize
ImageList_DrawEx
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_GetImageCount
ImageList_Create
ImageList_GetIcon
ImageList_ReplaceIcon

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathRemoveExtensionA

oledlg

ord8

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

comdlg32

GetFileTitleA

advapi32

RegEnumKeyExA
GetUserNameA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegEnumValueA
RegOpenKeyExW
GetFileSecurityA
SetFileSecurityA

shell32

SHBrowseForFolderA
SHGetMalloc
SHAppBarMessage
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
DragQueryFileA
DragFinish
SHGetFileInfoA
ExtractIconA
SHAddToRecentDocs
ShellExecuteExA

ole32

OleDuplicateData
CoCreateInstance
CoInitialize
CoUninitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
StringFromGUID2
CoDisconnectObject
CoInitializeEx
OleRun
CoTaskMemAlloc
CoFreeUnusedLibraries
OleInitialize
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
ReleaseStgMedium
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
PropVariantCopy
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
OleRegEnumVerbs
OleRegGetMiscStatus
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleQueryCreateFromData
OleQueryLinkFromData
OleIsRunning
GetRunningObjectTable
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CreateStreamOnHGlobal
OleUninitialize

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SysReAllocStringLen
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
SafeArrayAccessData
VarBstrFromDate

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fea74c6877fda1368aad6baf91869f25

Headers

DLL Characteristics

File Characteristics

Imports

pthread

kernel32

user32

gdi32

ws2_32

msimg32

winspool.drv

comctl32

shlwapi

oledlg

oleacc

gdiplus

imm32

winmm

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 5.3MB - Virtual size: 5.3MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 76KB - Virtual size: 114KB

.idata Size: 25KB - Virtual size: 24KB

.rsrc Size: 24KB - Virtual size: 24KB

.reloc Size: 409KB - Virtual size: 408KB

.text
Size: 5.3MB - Virtual size: 5.3MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 76KB - Virtual size: 114KB

.idata
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 24KB - Virtual size: 24KB

.reloc
Size: 409KB - Virtual size: 408KB