2024-07-06_d3a2908dd95845ed554027268e41d36b_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-07-06_d3a2908dd95845ed554027268e41d36b_mafia
Size

4.4MB
MD5

d3a2908dd95845ed554027268e41d36b
SHA1

c46dcaa40721fed4751f01cf87f9e392b9ddbea3
SHA256

25774f9bc8ce26ee2ac568e727f9dd1a24fbae220aaeaa21604f935e36f7c954
SHA512

73f468ed88addaf9c5b781fa2099be2917e7adca12533661398591035dc09694daf32a4435eb059841cd63ea114eb976325f31d1397621f9c2ead00921081492
SSDEEP

98304:nW31/jBVPUbchRP+rk000JqhRAyaoUsqHgyttp+IcXp4UJoHogzb9a2bBB2JGhth:wjBVW3qwVoAHgytsngz5a2NB2UhtBqnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-06_d3a2908dd95845ed554027268e41d36b_mafia

Files

2024-07-06_d3a2908dd95845ed554027268e41d36b_mafia
.exe windows:5 windows x86 arch:x86

e53bf291c92118a6a55d7753f198d3d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleCount
GetStdHandle
HeapCreate
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
CreateFileW
GetStringTypeW
EnumSystemLocalesA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
WriteConsoleW
GetProcessHeap
GetCurrentDirectoryW
IsProcessorFeaturePresent
IsValidCodePage
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetStdHandle
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
ExitProcess
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
DecodePointer
EncodePointer
RaiseException
ExitThread
RtlUnwind
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathA
SetErrorMode
GetTempPathA
GetTempFileNameA
GetNumberFormatA
GetWindowsDirectoryA
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
MoveFileA
GetTickCount
GetSystemDirectoryW
GetOEMCP
GetCPInfo
GetACP
GlobalFlags
FileTimeToLocalFileTime
GetProfileIntA
GetThreadLocale
GetPrivateProfileStringA
GetPrivateProfileIntA
SetThreadPriority
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
GetModuleHandleW
InterlockedExchange
InterlockedIncrement
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalSize
GlobalAlloc
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
FreeResource
GetCurrentDirectoryA
GetSystemTime
WritePrivateProfileStringA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
FileTimeToDosDateTime
DosDateTimeToFileTime
GetCurrentProcess
DuplicateHandle
GetFileType
SetFilePointer
GetLocalTime
ActivateActCtx
DeactivateActCtx
SetLastError
LocalAlloc
lstrlenW
lstrlenA
MultiByteToWideChar
FormatMessageA
LocalFree
ReadFile
LoadLibraryA
FreeLibrary
MulDiv
OutputDebugStringA
WriteFile
CreateThread
ResumeThread
CreateDirectoryA
SetFileTime
CreateFileA
GetFileSize
FileTimeToSystemTime
SystemTimeToFileTime
GetModuleHandleA
GetProcAddress
GetVersionExA
lstrcmpiA
GetExitCodeProcess
OpenMutexA
SetCurrentDirectoryA
GetModuleFileNameA
ReleaseMutex
CopyFileA
FindFirstFileA
GetFileAttributesA
SetFileAttributesA
FindNextFileA
FindClose
SetEnvironmentVariableA
GetEnvironmentStrings
CreateProcessA
lstrcpyA
lstrcatA
WinExec
DeleteFileA
CreateMutexA
GetLastError
CompareStringA
CreateEventA
SetEvent
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
WaitForSingleObject
CloseHandle
IsValidLocale
Sleep

user32

CreatePopupMenu
BringWindowToTop
TranslateAcceleratorA
IsZoomed
GetDCEx
SetRectEmpty
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
CharNextA
WaitMessage
ShowOwnedPopups
GetMessageA
TranslateMessage
MessageBeep
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SetCapture
InvalidateRgn
IntersectRect
IsRectEmpty
CopyAcceleratorTableA
GetWindowThreadProcessId
MapVirtualKeyA
GetKeyNameTextA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetMenuStringA
InsertMenuA
RemoveMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
LoadBitmapA
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
ValidateRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuItemA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
PtInRect
GetWindow
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
DrawFocusRect
GetCursor
SetCursor
GetCursorPos
GetNextDlgGroupItem
ClientToScreen
WindowFromPoint
LoadCursorW
GetDC
DrawEdge
GetCapture
ReleaseCapture
LoadCursorA
IsWindowVisible
EqualRect
SetRect
RealChildWindowFromPoint
GetSysColor
GrayStringA
LoadBitmapW
PostMessageA
SetWindowRgn
GetWindowRgn
DrawTextExA
DrawTextA
TabbedTextOutA
SetActiveWindow
GetWindowRect
FillRect
OffsetRect
InflateRect
CopyRect
LoadImageA
GetWindowLongA
SetWindowLongA
RedrawWindow
IsWindow
GetParent
InvalidateRect
GetSystemMetrics
LoadIconW
DestroyCursor
CopyImage
SubtractRect
GetDoubleClickTime
CharUpperBuffA
CopyIcon
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
UpdateWindow
GetClientRect
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
SendMessageA
MessageBoxA
EnableWindow
KillTimer
SetTimer
LoadAcceleratorsA
DestroyIcon
LoadMenuA
ReuseDDElParam
CreateWindowExA
UnpackDDElParam
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
IsMenu
MonitorFromPoint
UpdateLayeredWindow
MapVirtualKeyExA
IsCharLowerA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
PostThreadMessageA
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawStateA
LoadMenuW
SetClassLongA
DestroyAcceleratorTable
DrawIconEx
GetIconInfo
NotifyWinEvent
EnableScrollBar
HideCaret
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
UnionRect
SetParent
CharUpperA
DeleteMenu
RegisterClipboardFormatA
UnregisterClassA
SetLayeredWindowAttributes
EnumDisplayMonitors
GetSysColorBrush
SetScrollRange
CreateMenu

gdi32

SelectClipRgn
SetTextColor
SetBkColor
CreateBitmap
CopyMetaFileA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CombineRgn
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
GetRgnBox
GetTextColor
Rectangle
SetRectRgn
EnumFontFamiliesA
GetTextCharsetInfo
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
OffsetRgn
EnumFontFamiliesExA
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
SetPixel
CreateDIBitmap
GetPixel
GetBitmapBits
CreateBitmapIndirect
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetStockObject
GetTextMetricsA
LPtoDP
DPtoLP
GetMapMode
GetBkColor
CreateCompatibleBitmap
CreateFontIndirectA
CreateDCA
GetDeviceCaps
DeleteDC
SelectObject
GetObjectA
StretchBlt
BitBlt
CreateCompatibleDC
DeleteObject
CreateRectRgn
CreateSolidBrush
CreateRoundRectRgn

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegFlushKey
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegEnumValueA
RegQueryValueA
RegEnumKeyA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetFileInfoA
DragQueryFileA
DragAcceptFiles
ShellExecuteA
SHBrowseForFolderA
SHAppBarMessage
DragFinish

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW

ole32

OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoInitializeEx
CoFreeUnusedLibraries
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CreateStreamOnHGlobal
OleUninitialize
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoTaskMemFree
CoUninitialize
CoInitialize
DoDragDrop
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleLockRunning

oleaut32

SysAllocStringByteLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SafeArrayDestroy
OleCreateFontIndirect
SysFreeString
VarBstrFromDate
VariantCopy
SysAllocStringLen
VariantChangeType
VariantClear
SysAllocString
VariantInit

oledlg

ord8

wsock32

WSAStartup
WSACleanup
WSASetLastError

msi

ord112

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoA
HttpSendRequestExA
HttpEndRequestA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetAttemptConnect
InternetWriteFile
InternetConnectA
InternetCloseHandle

winmm

PlaySoundA
timeGetTime

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e53bf291c92118a6a55d7753f198d3d2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

wsock32

msi

wininet

winmm

oleacc

gdiplus

imm32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 306KB - Virtual size: 305KB

.data Size: 31KB - Virtual size: 62KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 184KB - Virtual size: 184KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 306KB - Virtual size: 305KB

.data
Size: 31KB - Virtual size: 62KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 184KB - Virtual size: 184KB