2024-08-21_8f4222f448be47476c7937b4107edd99_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-21_8f4222f448be47476c7937b4107edd99_mafia
Size

2.4MB
MD5

8f4222f448be47476c7937b4107edd99
SHA1

10134f25e3ddc43f46243dea9ef93773d482e98b
SHA256

fdd966db123979b979b600b2f3ab70a39daf783613f3af914cfbb1eb99bac609
SHA512

53284250c417ea56ba24c86244e821eedf60fe12dcb695883c88fec207514a2e856633bbe363d89f45f3e3ab7e85fb3633c23a4fbd686383df4d19c25990637c
SSDEEP

49152:7wZ2VBVlXXQPcUPvOA5pLj64Q71ToBw9YkMvOU7r5SyaGG5Tv7Gf/s7dMu9EdCJ2:6ohQ5PGQLj64O1ToBw9YkBU7FhG5nGf5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-21_8f4222f448be47476c7937b4107edd99_mafia

Files

2024-08-21_8f4222f448be47476c7937b4107edd99_mafia
.exe windows:5 windows x86 arch:x86

016ba0cf873c58e3cd1b81b8a7dfbcdf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\jnks\workspace\Singapore_Fusion_8\build\SxS\src\Release\InstanceFinderDlg.pdb

Imports

msimg32

AlphaBlend
TransparentBlt

comctl32

ImageList_GetIconSize

shlwapi

PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathIsFileSpecW
PathFindExtensionW
PathStripToRootW

psapi

EnumProcessModules
EnumProcesses
GetModuleFileNameExW
GetModuleBaseNameW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipCreateBitmapFromStream
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipDrawImageI
GdipGetImagePalette

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

kernel32

RtlUnwind
RaiseException
HeapReAlloc
ExitThread
CreateThread
HeapSize
HeapQueryInformation
ExitProcess
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
InterlockedCompareExchange
ReleaseSemaphore
CreateSemaphoreW
SetHandleInformation
WritePrivateProfileStringA
GetPrivateProfileStringA
RemoveDirectoryW
MoveFileExW
DeviceIoControl
ProcessIdToSessionId
GetUserDefaultLangID
SetCurrentDirectoryW
GetComputerNameExW
FindNextFileW
GetSystemDefaultLCID
FlushViewOfFile
OpenFileMappingW
GlobalMemoryStatusEx
CreatePipe
WaitForMultipleObjects
TryEnterCriticalSection
GetEnvironmentVariableW
PeekNamedPipe
CreateDirectoryW
OpenMutexW
GetSystemTime
GetLocalTime
ResetEvent
OpenEventW
TerminateThread
GetExitCodeProcess
GetExitCodeThread
GetDiskFreeSpaceExW
CreateProcessW
GetLastError
SetLastError
QueryPerformanceCounter
GetModuleFileNameW
ExpandEnvironmentStringsW
InitializeCriticalSection
GetCurrentProcessId
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetTickCount
CreateFileW
Sleep
SetFilePointer
WriteFile
CloseHandle
OutputDebugStringW
GetCurrentThreadId
OpenProcess
GetFileAttributesExW
GetCommandLineW
GetTempFileNameW
GetLongPathNameW
SearchPathW
FormatMessageW
LocalFree
CreateMutexW
WaitForSingleObject
CreateFileMappingW
MapViewOfFile
ReleaseMutex
UnmapViewOfFile
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceFrequency
LocalAlloc
TlsGetValue
GlobalLock
GlobalReAlloc
GlobalUnlock
GlobalHandle
GlobalAlloc
TlsAlloc
TlsSetValue
LocalReAlloc
GlobalFree
TlsFree
DeactivateActCtx
ReleaseActCtx
ActivateActCtx
InterlockedDecrement
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
lstrlenW
MulDiv
GlobalSize
CopyFileW
SetThreadPriority
ResumeThread
SetEvent
CreateEventW
GetModuleHandleW
InterlockedIncrement
CompareStringW
GlobalGetAtomNameW
lstrcmpA
lstrlenA
FileTimeToSystemTime
lstrcmpW
InitializeCriticalSectionAndSpinCount
GetVersionExW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
GlobalFlags
lstrcmpiW
DeleteFileW
ReadFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
GetShortPathNameW
InterlockedExchange
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetSystemDirectoryW
lstrcpyW
SetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetCurrentDirectoryW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetTempPathW
GetWindowsDirectoryW
GetNumberFormatW
GetProfileIntW
VirtualProtect
GetUserDefaultLCID
FindResourceExW
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
HeapFree
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
HeapAlloc

user32

MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
UpdateWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
RealChildWindowFromPoint
RegisterClassW
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
SetCursorPos
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
BringWindowToTop
LockWindowUpdate
GetDesktopWindow
DestroyIcon
CharUpperW
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSystemMetrics
InflateRect
GetMenuItemInfoW
SetRect
DestroyMenu
SystemParametersInfoW
FillRect
GetWindowRgn
SendMessageCallbackW
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
PostQuitMessage
CopyImage
SetRectEmpty
EnumDisplayMonitors
SetLayeredWindowAttributes
IsIconic
InvalidateRect
IntersectRect
SetCursor
AllowSetForegroundWindow
ExitWindowsEx
CloseDesktop
OpenDesktopW
SetThreadDesktop
GetThreadDesktop
SetProcessWindowStation
GetProcessWindowStation
CloseWindowStation
OpenWindowStationW
GetDlgCtrlID
ClientToScreen
ShowOwnedPopups
DeleteMenu
SetTimer
KillTimer
IsRectEmpty
OffsetRect
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
CreatePopupMenu
WindowFromPoint
NotifyWinEvent
GetAsyncKeyState
SetClassLongW
LoadMenuW
GetSystemMenu
SetCapture
ReleaseCapture
MessageBeep
DrawStateW
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
GetMenuDefaultItem
CopyAcceleratorTableW
ToUnicodeEx
MapVirtualKeyW
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
GetClassInfoW
DestroyCursor
DrawIcon
MapDialogRect
MsgWaitForMultipleObjects
wsprintfW
WaitForInputIdle
MsgWaitForMultipleObjectsEx
ShowWindow
SetForegroundWindow
UnhookWindowsHookEx
MessageBoxW
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
SendMessageW
GetWindowThreadProcessId
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
SubtractRect
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetDoubleClickTime
CharUpperBuffW
CopyIcon
RegisterClipboardFormatW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
WaitMessage
PostThreadMessageW
CreateMenu
IsMenu
UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
CreateDialogIndirectParamW
EndDialog
GetNextDlgGroupItem
LoadImageW
GetIconInfo
GetNextDlgTabItem
EnableScrollBar
HideCaret
InvertRect
GetWindowPlacement
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExW
CallNextHookEx

gdi32

SaveDC
GetTextExtentPoint32W
ExtTextOutW
BitBlt
CreateCompatibleDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
CreateFontIndirectW
DeleteObject
GetObjectW
SetBkColor
SetTextColor
CreateBitmap
CopyMetaFileW
CreateDCW
SetPixelV
GetTextFaceW
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
EnumFontFamiliesExW
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
GetRgnBox
OffsetRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
GetBkColor
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
DPtoLP
PatBlt
CombineRgn
SetRectRgn
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateDIBitmap
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
GetDeviceCaps

winspool.drv

ClosePrinter
GetJobW
DocumentPropertiesW
FindClosePrinterChangeNotification
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
EndDocPrinter
EndPagePrinter
WritePrinter
StartPagePrinter
StartDocPrinterW
EnumPortsW
EnumMonitorsW
DeleteMonitorW
AddMonitorW
ord203
ord204
EnumJobsW
SetJobW
SetPrinterW
EnumPrinterDriversW
GetPrinterDriverDirectoryW
DeletePrinterDriverExW
GetPrinterW
XcvDataW
GetPrinterDriverW
AddPrinterDriverW
SetPrinterDataExW
GetPrinterDataExW
EnumPrintersW
DeletePrinter
AddPrinterW
OpenPrinterW

comdlg32

GetFileTitleW

advapi32

AllocateAndInitializeSid
RegEnumKeyExW
OpenProcessToken
CheckTokenMembership
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceStatus
StartServiceW
ControlService
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
GetUserNameW
RegQueryInfoKeyW
SetEntriesInAclW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
BackupEventLogW
CloseEventLog
OpenEventLogW
FreeSid
QueryServiceConfigW
CreateProcessAsUserW
ChangeServiceConfigW
RegEnumValueW

shell32

ShellExecuteExW
SHBrowseForFolderW
SHAppBarMessage
DragQueryFileW
DragFinish
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetFileInfoW
ExtractIconW
CommandLineToArgvW
SHGetFolderPathW
SHGetSpecialFolderPathW

ole32

PropVariantClear
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleUninitialize
OleInitialize
CoCreateInstance
CLSIDFromString
CoUninitialize
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CoInitializeSecurity
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CreateStreamOnHGlobal
CoInitialize
DoDragDrop

oleaut32

SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
VarBstrFromDate
VariantClear
SysFreeString
SysAllocString
VariantInit
VariantChangeType

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

setupapi

CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_DevNode_Registry_PropertyW
CM_Set_DevNode_Registry_PropertyW
CM_Disable_DevNode
SetupDiGetClassDevsW
SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiCallClassInstaller
SetupDiOpenClassRegKey
SetupDiCreateDevRegKeyW
SetupDiOpenDevRegKey
SetupDiBuildDriverInfoList
SetupDiDestroyDriverInfoList
SetupDiRemoveDevice
SetupDiGetSelectedDriverW
SetupDiGetDriverInfoDetailW
SetupOpenInfFileW
SetupFindFirstLineW
SetupGetLineTextW
SetupCloseInfFile
CMP_WaitNoPendingInstallEvents
SetupDiSetClassInstallParamsW

ws2_32

WSACreateEvent
WSAAddressToStringW
freeaddrinfo
getaddrinfo
send
recv
accept
listen
bind
WSADuplicateSocketW
WSACloseEvent
closesocket
shutdown
WSAResetEvent
WSAEnumNetworkEvents
WSAConnect
WSAEventSelect
setsockopt
WSASocketW
WSACleanup
WSAStringToAddressW
WSAStartup
WSAGetLastError

secur32

GetUserNameExW

iphlpapi

GetAdaptersAddresses
GetIfEntry
GetInterfaceInfo
IpReleaseAddress
GetAdaptersInfo
AddIPAddress
DeleteIPAddress
IcmpCreateFile
IcmpSendEcho
IcmpCloseHandle
NotifyAddrChange
IpRenewAddress

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 752KB - Virtual size: 756KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

016ba0cf873c58e3cd1b81b8a7dfbcdf

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msimg32

comctl32

shlwapi

psapi

oleacc

gdiplus

imm32

winmm

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

version

setupapi

ws2_32

secur32

iphlpapi

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 361KB - Virtual size: 361KB

.data Size: 28KB - Virtual size: 66KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 752KB - Virtual size: 756KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 361KB - Virtual size: 361KB

.data
Size: 28KB - Virtual size: 66KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 752KB - Virtual size: 756KB