2024-08-28_48bb2f8f69e79c2ef17fbbafce8cd569_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-28_48bb2f8f69e79c2ef17fbbafce8cd569_mafia
Size

9.1MB
MD5

48bb2f8f69e79c2ef17fbbafce8cd569
SHA1

80d87a79b697b1ed489d129aba13ce38275e4908
SHA256

48217c08aca3c342e608bf714766bba120b1f47bc2ec863d3aefbeeb09a61ee5
SHA512

6cfd2054b808da272ee616ee164387eb1148dc8b58716d6383efccd2b42a23aaa8a2520673c2baa01d7729e5339705820fb0f22b1c9f1379e765536031caef1f
SSDEEP

196608:RDI8DWFd8YB3/9+Mk9Kl3K2Ek9Kl3K2Ek9Kl3K2Ek9Kl3K2Eb:9+839Klj9Klj9Klj9Klo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-28_48bb2f8f69e79c2ef17fbbafce8cd569_mafia

Files

2024-08-28_48bb2f8f69e79c2ef17fbbafce8cd569_mafia
.exe windows:5 windows x86 arch:x86

da07ba15fb39a93dec96dcf008ef3c31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Connect_MachineA
CM_Locate_DevNode_ExA
CM_Disconnect_Machine
CM_Get_Sibling_Ex
CM_Get_Child_Ex
CM_Get_DevNode_Registry_Property_ExA

rpcrt4

UuidFromStringA

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
CompareStringW
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
Sleep
GetComputerNameA
CloseHandle
SystemTimeToFileTime
GetLastError
DeviceIoControl
LCMapStringW
GetLocalTime
CreateFileA
GlobalUnlock
GlobalSize
GlobalLock
GlobalAlloc
VirtualAlloc
VirtualFree
FindResourceA
GetModuleHandleA
GetTickCount
WriteFile
SetFilePointer
FreeLibrary
GetProcAddress
GetTimeZoneInformation
lstrcmpA
InterlockedExchange
SetLastError
DeactivateActCtx
LoadLibraryA
ActivateActCtx
CompareStringA
GetLocaleInfoA
GetModuleFileNameA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
MultiByteToWideChar
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
SetThreadPriority
IsProcessorFeaturePresent
GetStringTypeW
IsValidCodePage
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
VirtualQuery
GetSystemInfo
CreateThread
ExitThread
ExitProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapReAlloc
RaiseException
GetDateFormatA
GetTimeFormatA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
DecodePointer
ResumeThread
GetStdHandle
GetModuleHandleW
HeapCreate
EncodePointer
RtlUnwind
WaitForSingleObject
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
GetOEMCP
GetCPInfo
GetACP
FileTimeToSystemTime
lstrcpyA
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetCurrentDirectoryA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
DeleteFileA
lstrcmpiA
GetThreadLocale
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
LoadLibraryW
lstrcmpW
FreeResource
GlobalFree
CopyFileA
FormatMessageA
LocalFree
lstrlenW
MulDiv
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrlenA

user32

UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
RegisterClipboardFormatA
CopyImage
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawIconEx
GetSystemMenu
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
WaitMessage
GetSysColorBrush
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
GetMenuItemInfoA
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
IntersectRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
IsMenu
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
LoadMenuW
GetClassInfoA
DefWindowProcA
LoadCursorA
GetDoubleClickTime
GetFocus
IsWindowVisible
ScreenToClient
IsRectEmpty
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowRgn
SubtractRect
MapVirtualKeyExA
IsCharLowerA
CharUpperBuffA
CopyIcon
LoadImageW
GetMessagePos
ReleaseCapture
SystemParametersInfoA
SetCapture
GetCapture
PtInRect
IsWindow
RedrawWindow
DrawFrameControl
DrawEdge
SetRect
GetUpdateRect
IsClipboardFormatAvailable
SetMenuDefaultItem
PostThreadMessageA
GetMessageTime
CreateMenu
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
DestroyMenu
LoadMenuA
DestroyCursor
LoadImageA
GetSysColor
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetWindowRect
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateA
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
DestroyIcon
wsprintfA
MessageBoxA
GetSystemMetrics
LoadIconW
EnableWindow
UpdateWindow
GetClientRect
IsIconic
SendMessageA
DrawIcon
LoadBitmapW
WinHelpA

gdi32

CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectObject
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
RoundRect
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
GetTextMetricsA
GetCharWidthA
PatBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetTextExtentPoint32A
RealizePalette
GetDeviceCaps
CreatePalette
CreateFontIndirectA
CreatePen
Rectangle
CreateCompatibleBitmap
GetPixel
SetPixel
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject
StretchBlt
CreateCompatibleDC
GetObjectA
CreateHatchBrush
GetStockObject
CreateBitmap

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegEnumValueA

shell32

ShellExecuteA
SHGetFileInfoA
DragFinish
DragQueryFileA
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoInitialize
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateGuid
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoGetClassObject
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CoRevokeClassObject

oleaut32

SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysAllocStringLen
SysFreeString

oledlg

ord8

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da07ba15fb39a93dec96dcf008ef3c31

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

rpcrt4

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 279KB - Virtual size: 279KB

.data Size: 35KB - Virtual size: 64KB

.rsrc Size: 7.4MB - Virtual size: 7.4MB

.reloc Size: 188KB - Virtual size: 188KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 279KB - Virtual size: 279KB

.data
Size: 35KB - Virtual size: 64KB

.rsrc
Size: 7.4MB - Virtual size: 7.4MB

.reloc
Size: 188KB - Virtual size: 188KB