2024-09-05_19e30b00edcd46f15ec8194dcf10ac3d_mafia_sakula

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-05_19e30b00edcd46f15ec8194dcf10ac3d_mafia_sakula
Size

2.8MB
MD5

19e30b00edcd46f15ec8194dcf10ac3d
SHA1

1a93d6036bb0e5d9602bff853102cd3dd28a3731
SHA256

cb787f14cbc1dc71b86e2abf5299678eab05e0e380ecbd20c8a6f63262704185
SHA512

a701886c2d77907c1b7bb58496f64d75ad0b0c06b2e85a100385bcb431780e784cd0dc9f3ff8dab8889d812af2f271fe00a59b4d417d3a8e5f41be7af913d004
SSDEEP

49152:cNmZo3YDRvoVNIn2ff0svz6DZv9AQrI5nHeOZ+PI5COm8SAIzNK2RLG4Ggl+Q9FU:cN53YD90In2ff01Zv9AQrI5nHeOZYhNr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-05_19e30b00edcd46f15ec8194dcf10ac3d_mafia_sakula

Files

2024-09-05_19e30b00edcd46f15ec8194dcf10ac3d_mafia_sakula
.exe windows:5 windows x86 arch:x86

8782f49f5e33954319fc9ca9d1f7d2b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA
timeGetTime

kernel32

GetProcessHeap
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStringTypeW
IsProcessorFeaturePresent
CompareStringW
GetCurrentDirectoryA
FindFirstFileA
CopyFileA
FindClose
GetSystemInfo
GetFileTime
CreateToolhelp32Snapshot
Process32First
Process32Next
SetEvent
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
DeleteCriticalSection
IsValidCodePage
InitializeCriticalSection
CreateEventA
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
Sleep
GetModuleFileNameA
DeleteFileA
MultiByteToWideChar
QueryPerformanceCounter
CreateFileA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
SetEnvironmentVariableA
MulDiv
lstrlenW
LocalFree
FormatMessageA
GlobalSize
SetLastError
GetLastError
FileTimeToSystemTime
FileTimeToLocalFileTime
DeactivateActCtx
LoadLibraryW
ActivateActCtx
InitializeCriticalSectionAndSpinCount
FreeLibrary
LocalAlloc
GetCurrentProcessId
GetThreadLocale
lstrcmpiA
GetProcAddress
GetModuleHandleA
LoadLibraryA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
lstrcmpW
CompareStringA
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
FindResourceA
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
InterlockedDecrement
GetModuleHandleW
lstrcmpA
InterlockedExchange
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
SetThreadPriority
ResumeThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
InterlockedIncrement
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetFileAttributesExA
GetFileAttributesA
GetFileSizeEx
SetErrorMode
GlobalFlags
GetCPInfo
GetOEMCP
GetACP
GetTempFileNameA
lstrcpyA
GetWindowsDirectoryA
GetNumberFormatA
GetTickCount
GetTempPathA
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
RtlUnwind
HeapAlloc
HeapFree
GetConsoleCP
GetConsoleMode
ExitProcess
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
ExitThread
CreateThread
HeapReAlloc
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
HeapQueryInformation
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetStdHandle
HeapCreate
CreateFileW
SetHandleCount
WriteConsoleW
CreateDirectoryA

user32

DispatchMessageA
SetActiveWindow
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
GetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
IsChild
WinHelpA
SendDlgItemMessageA
LoadIconA
RegisterWindowMessageA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetActiveWindow
CheckMenuItem
EnableMenuItem
ModifyMenuA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
IsDialogMessageA
MoveWindow
ShowWindow
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
IsRectEmpty
SystemParametersInfoA
SetCapture
LoadCursorW
SetCursor
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
WaitMessage
InflateRect
GetMenuItemInfoA
DestroyMenu
GetKeyNameTextA
MapVirtualKeyA
IntersectRect
GetSysColorBrush
LoadCursorA
RealChildWindowFromPoint
UnregisterClassA
SetRectEmpty
CopyAcceleratorTableA
InvalidateRgn
TranslateAcceleratorA
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
DestroyIcon
LoadImageA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
PeekMessageA
DeleteMenu
EnumDisplayMonitors
MonitorFromWindow
MessageBeep
GetMenuDefaultItem
BeginDeferWindowPos
InvertRect
HideCaret
EnableScrollBar
NotifyWinEvent
GetIconInfo
CopyImage
DrawIconEx
LoadAcceleratorsW
LoadMenuW
RegisterClipboardFormatA
SetParent
UnionRect
IsZoomed
DestroyAcceleratorTable
SetClassLongA
DrawStateA
DrawFrameControl
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableA
SetCursorPos
LockWindowUpdate
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
DestroyCursor
GetWindowRgn
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindow
CharUpperA
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetAsyncKeyState
GetMessagePos
GetWindowThreadProcessId
IsWindowEnabled
MessageBoxA
GetDesktopWindow
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
IsWindow
RedrawWindow
LoadBitmapA
GetCursorPos
OffsetRect
DrawFocusRect
GetSysColor
ClientToScreen
WindowFromPoint
GetNextDlgGroupItem
GetCapture
ReleaseCapture
GetWindowLongA
GetParent
DrawEdge
SetWindowTextA
PostMessageA
SetRect
GetSystemMetrics
LoadIconW
KillTimer
SetTimer
InvalidateRect
ReleaseDC
GetDC
SetWindowRgn
GetSystemMenu
AppendMenuA
DrawIcon
SetForegroundWindow
GetLastActivePopup
FindWindowA
IsIconic
GetClientRect
LoadBitmapW
wsprintfA
EnableWindow
GetWindowRect
SendMessageA
SetLayeredWindowAttributes
CharNextA

gdi32

GetTextFaceA
Polygon
Polyline
CreatePolygonRgn
CreateRoundRectRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetTextColor
GetBkColor
GetTextMetricsA
GetMapMode
SetRectRgn
PatBlt
CreateRectRgnIndirect
GetTextExtentPoint32A
CreateFontIndirectA
Ellipse
LPtoDP
DPtoLP
CreateEllipticRgn
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
CreatePatternBrush
GetObjectA
CreateCompatibleDC
BitBlt
GetStockObject
DeleteDC
DeleteObject
CombineRgn
SelectObject
CreateDIBSection
CreateRectRgn
CreateCompatibleBitmap
StretchBlt
GetPixel
SelectClipRgn
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
EnumFontFamiliesExA
OffsetRgn
Rectangle
SetDIBColorTable
GetRgnBox
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
CreateDCA
CopyMetaFileA
GetDeviceCaps
SetPixel

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA

shell32

DragFinish
SHGetFileInfoA
SHFileOperationA
ShellExecuteA
SHAppBarMessage
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
DragQueryFileA

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
DoDragDrop
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CreateStreamOnHGlobal
OleDraw
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
CoInitialize
OleInitialize

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

UrlUnescapeA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA

oledlg

ord8

ws2_32

WSAStartup
WSACleanup
WSASetLastError
send
recv
closesocket
setsockopt
WSAGetLastError
connect
gethostbyname
inet_addr
htons
ioctlsocket
socket

wininet

InternetCloseHandle
HttpQueryInfoA
InternetOpenUrlA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetQueryDataAvailable
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipGetImagePixelFormat
GdipDrawImageI
GdipGetImageGraphicsContext
GdipGetImagePaletteSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString
SysAllocStringByteLen
SafeArrayUnaccessData
OleCreateFontIndirect
VarBstrFromDate
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�Ao��u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8782f49f5e33954319fc9ca9d1f7d2b1

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

msimg32

comctl32

shlwapi

oledlg

ws2_32

wininet

oleacc

gdiplus

imm32

winspool.drv

comdlg32

oleaut32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 290KB - Virtual size: 289KB

.data Size: 30KB - Virtual size: 74KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 179KB - Virtual size: 178KB

�Ao��u� Size: 16KB - Virtual size: 20KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 290KB - Virtual size: 289KB

.data
Size: 30KB - Virtual size: 74KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 179KB - Virtual size: 178KB

�Ao��u�
Size: 16KB - Virtual size: 20KB