2024-09-09_2eeafd82eae043ae77d63e2c95f41758_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-09_2eeafd82eae043ae77d63e2c95f41758_mafia
Size

3.6MB
MD5

2eeafd82eae043ae77d63e2c95f41758
SHA1

6a1f71086d17866035e2405960ac14f8767ec2f4
SHA256

b64e01c02c5f639785352ddeaaf99d96b357b605af1fb39bdd201cdc451e5bb5
SHA512

693127cfa40d5b64d35c6d8cc1e33d8c5020e38cf1892e9ec422bf6f4badf91f2f8d4ff0d0e9f461df2752da7ed6c783a1716503b2dc27bdbcfe57833e1b096c
SSDEEP

98304:QwYeJu3Qq82CcvwIRDsWpHbhBhlwPUsXRM65Kr+zFBOaEGTe:QwYeivsWDBsPUsXR/FtH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-09_2eeafd82eae043ae77d63e2c95f41758_mafia

Files

2024-09-09_2eeafd82eae043ae77d63e2c95f41758_mafia
.exe windows:5 windows x86 arch:x86

7682a484087ec9b3ed64fe77e1aa99e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetLastError
GetProcAddress
GetModuleHandleA
GetDriveTypeA
GetLogicalDrives
GetModuleFileNameA
GetCurrentDirectoryA
DeleteFileA
CloseHandle
WaitForSingleObject
GetCommandLineW
ReleaseMutex
CreateMutexA
MultiByteToWideChar
FreeResource
WriteFile
CreateFileA
FindResourceA
lstrlenA
CreateFileW
GetProcessHeap
WriteConsoleW
GetCurrentDirectoryW
SetEnvironmentVariableA
GetConsoleMode
GetConsoleCP
CompareStringW
GetDriveTypeW
GetTimeZoneInformation
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
FindResourceW
LCMapStringW
IsProcessorFeaturePresent
IsValidCodePage
GetStdHandle
FileTimeToSystemTime
SetFileTime
GetFileAttributesA
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFilePointer
WinExec
CreateThread
GetTempPathA
MoveFileExA
SetCurrentDirectoryA
CreateDirectoryA
RemoveDirectoryA
GetTickCount
GetFileSize
ReadFile
CopyFileA
GetCurrentProcessId
OpenProcess
CreateProcessA
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcpyA
LoadResource
LockResource
HeapCreate
GlobalFree
GlobalUnlock
GlobalLock
MulDiv
lstrlenW
LocalFree
FormatMessageA
GlobalAlloc
GlobalSize
SetLastError
lstrcmpW
DeactivateActCtx
ActivateActCtx
LoadLibraryA
LoadLibraryW
CompareStringA
FreeLibrary
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
InterlockedDecrement
FindClose
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
lstrcmpA
InterlockedExchange
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
SetThreadPriority
ResumeThread
SizeofResource
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalFlags
GetACP
InterlockedIncrement
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetCPInfo
GetOEMCP
GetThreadLocale
GetFileTime
GetTempFileNameA
GetFullPathNameA
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFileAttributesExA
GetFileSizeEx
GetWindowsDirectoryA
GetNumberFormatA
SetErrorMode
InitializeCriticalSectionAndSpinCount
GetProfileIntA
Sleep
SearchPathA
VirtualProtect
FindResourceExW
RtlUnwind
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
RaiseException
ExitProcess
HeapReAlloc
HeapAlloc
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetHandleCount

user32

GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
BeginPaint
EndPaint
GetWindowThreadProcessId
IntersectRect
IsRectEmpty
SystemParametersInfoA
SetTimer
KillTimer
SetCapture
ReleaseCapture
ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
WaitMessage
GetMenuItemInfoA
TranslateAcceleratorA
BringWindowToTop
SetRectEmpty
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
IsZoomed
GetKeyNameTextA
MapVirtualKeyA
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorA
UnregisterClassA
CopyAcceleratorTableA
SetRect
InvalidateRgn
CharNextA
CharUpperA
DeleteMenu
EnumDisplayMonitors
SetLayeredWindowAttributes
GetNextDlgGroupItem
MessageBeep
GetSystemMenu
SetParent
UnionRect
GetMenuDefaultItem
GetAsyncKeyState
InvertRect
HideCaret
EnableScrollBar
NotifyWinEvent
CopyImage
DrawIconEx
LoadAcceleratorsW
RegisterClipboardFormatA
DestroyAcceleratorTable
SetClassLongA
DrawEdge
DrawFrameControl
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableA
SetCursorPos
LockWindowUpdate
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
GetMessagePos
MapVirtualKeyExA
UpdateLayeredWindow
GetLastActivePopup
IsMenu
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
IsClipboardFormatAvailable
GetUpdateRect
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
GetWindowRgn
RegisterClassA
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindow
GetMenuState
GetMenuStringA
InsertMenuA
GetMenuItemCount
RemoveMenu
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
EndDialog
SendMessageA
EnableWindow
SetWindowPos
SetWindowRgn
ReleaseDC
GetWindowDC
PostMessageA
GetWindowRect
GetClientRect
InvalidateRect
LoadImageA
DestroyIcon
GetDC
CreateIconIndirect
GetIconInfo
DrawStateA
CopyRect
InflateRect
OffsetRect
FillRect
FrameRect
DrawFocusRect
ClientToScreen
GetActiveWindow
GetNextDlgTabItem
GetParent
WindowFromPoint
GetWindowLongA
SetCursor
TrackPopupMenuEx
GetSubMenu
GetSysColor
SetScrollInfo
DestroyCursor
LoadMenuA
DestroyMenu
RedrawWindow
SetWindowLongA
IsWindow
MessageBoxA
GetFocus
AdjustWindowRectEx
CallNextHookEx
DrawIcon
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
CreatePopupMenu
AppendMenuA
IsIconic
SetForegroundWindow
LoadCursorW
LoadIconW
LoadIconA
GetSystemMetrics
wsprintfA
ShowWindowAsync
TrackPopupMenu
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
MonitorFromPoint
GetMessageTime
GetCursorPos
PostQuitMessage
PeekMessageA
TabbedTextOutA
IsWindowVisible
UpdateWindow
CreateWindowExA
GetClassInfoExA
IsCharLowerA
GetClassInfoA
GetDesktopWindow
SetMenuDefaultItem
LoadMenuW
GetMenuItemID
GrayStringA
DrawTextExA
DrawTextA

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
GetDeviceCaps
PatBlt
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
CreateDIBSection
GetTextExtentPoint32A
GetTextMetricsA
GetRgnBox
GetTextColor
GetWindowExtEx
EnumFontFamiliesA
GetTextCharsetInfo
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
Polyline
Polygon
Rectangle
OffsetRgn
EnumFontFamiliesExA
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
CreateDIBitmap
GetViewportExtEx
GetTextFaceA
DeleteObject
GetDIBits
GetObjectA
CreateCompatibleBitmap
CreateCompatibleDC
GetBkColor
BitBlt
StretchBlt
CombineRgn
CreateRectRgn
SelectObject
GetStockObject
DeleteDC
SetTextColor
SetBkColor
CreateBitmap
SetPixel
GetPixel
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetPixelV
SetPaletteEntries
ExtFloodFill
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
SetDIBColorTable
GetMapMode

advapi32

RegSetValueExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA

shell32

ShellExecuteExA
CommandLineToArgvW
ShellExecuteA
SHGetSpecialFolderPathA
DragFinish
DragQueryFileA
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHAppBarMessage
Shell_NotifyIconA

ole32

OleCreateMenuDescriptor
CoRegisterMessageFilter
OleTranslateAccelerator
IsAccelerator
OleLockRunning
DoDragDrop
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoInitializeEx
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CreateStreamOnHGlobal
OleDraw
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoInitialize
CoCreateInstance
OleDestroyMenuDescriptor
CoUninitialize

msimg32

AlphaBlend
TransparentBlt

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW

oledlg

ord8

urlmon

URLDownloadToFileA

winmm

PlaySoundA

wininet

InternetOpenUrlA
HttpQueryInfoA
DeleteUrlCacheEntry
InternetOpenA
InternetSetOptionA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetReadFile

ws2_32

htonl
bind
inet_addr
htons
WSAGetLastError
accept
recv
send
WSAAsyncSelect
recvfrom
sendto
connect
gethostbyname
WSASetLastError
select
socket
closesocket

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VarBstrFromDate
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
SysAllocString
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
OleCreateFontIndirect

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7682a484087ec9b3ed64fe77e1aa99e4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

msimg32

comctl32

shlwapi

oledlg

urlmon

winmm

wininet

ws2_32

oleacc

gdiplus

imm32

winspool.drv

comdlg32

oleaut32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 295KB - Virtual size: 295KB

.data Size: 25KB - Virtual size: 96KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 177KB - Virtual size: 177KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 295KB - Virtual size: 295KB

.data
Size: 25KB - Virtual size: 96KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 177KB - Virtual size: 177KB