2024-09-09_22ff2f652f1249a9a708c19213d52918_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-09_22ff2f652f1249a9a708c19213d52918_mafia
Size

4.0MB
MD5

22ff2f652f1249a9a708c19213d52918
SHA1

f1693b22687cc3abe3188b25a4a3bc994e94ecbd
SHA256

d292cf38650a36e5ede8fcc4e575766a527af28090dd9c27db4754f694b60134
SHA512

04f0acd68d30567d81f0c851e67705ff5cb3d64e977f50b6819ec4bc13a94e7738edda0157533efa9cb18c65aab00c6cc9e754a3403b41e6950e9e2768c45a55
SSDEEP

98304:T3tG9HgJigpKVhGR3Un6dGzKBTObzKwWKwbltHBtc:zF3Rybmo7WKwb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-09_22ff2f652f1249a9a708c19213d52918_mafia

Files

2024-09-09_22ff2f652f1249a9a708c19213d52918_mafia
.exe windows:5 windows x86 arch:x86

41cb6245fe624778c24fb25b4aec188a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\dszusb\(正式)单机版160201右下角图标)-新版本\(正式)单机版160201右下角图标)-新版本\Release\Dszmonitor.pdb

Imports

kernel32

IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
GetOEMCP
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleW
SetEnvironmentVariableA
GetACP
GetCPInfo
IsDebuggerPresent
QueryPerformanceCounter
UnhandledExceptionFilter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
ExitThread
ExitProcess
RaiseException
HeapReAlloc
RtlUnwind
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
GetUserDefaultLCID
SearchPathW
GetProfileIntW
GetTickCount
GetNumberFormatW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetCurrentDirectoryW
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
lstrlenA
GlobalGetAtomNameW
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetThreadLocale
CreateEventW
ResumeThread
SetThreadPriority
ReleaseActCtx
CreateActCtxW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
ActivateActCtx
DeactivateActCtx
lstrcmpW
SetLastError
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
MulDiv
FreeLibrary
LoadLibraryExW
LocalFree
WritePrivateProfileStringW
InterlockedDecrement
GetDriveTypeW
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
GetModuleHandleW
SetErrorMode
FormatMessageW
WinExec
lstrcpyW
DeleteFileW
GetLocalTime
GetPrivateProfileStringW
GetPrivateProfileIntW
WideCharToMultiByte
SetEvent
SetFileAttributesW
GetFileAttributesW
CreateThread
GetModuleFileNameW
MultiByteToWideChar
ReleaseMutex
WaitForSingleObject
Sleep
Process32NextW
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
FindResourceW
LoadResource
LockResource
SizeofResource
SetUnhandledExceptionFilter
VirtualProtect
LoadLibraryW
GetProcAddress
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
GetLastError
CreateMutexW

user32

ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextLengthW
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
PostMessageW
CreateWindowExW
IsClipboardFormatAvailable
GetSysColor
AdjustWindowRectEx
UnionRect
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
GetWindowLongW
SetWindowLongW
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
InvalidateRect
UpdateWindow
FillRect
DrawStateW
LoadCursorW
SetCursor
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
PtInRect
LoadBitmapW
GetFocus
AttachThreadInput
GetWindow
FindWindowExW
GetClipboardData
CreateMenu
TranslateMDISysAccel
RegisterClipboardFormatW
CloseClipboard
DrawMenuBar
DefMDIChildProcW
EnableWindow
SendMessageW
GetClassInfoW
EmptyClipboard
OpenClipboard
GetCursorPos
GetSubMenu
SetForegroundWindow
LoadMenuW
DrawIcon
GetClientRect
IsIconic
KillTimer
SetTimer
EnableMenuItem
SetClipboardViewer
GetSystemMetrics
AppendMenuW
GetSystemMenu
LoadIconW
GetClassNameW
CharUpperW
InflateRect
GetMenuItemInfoW
DestroyMenu
SystemParametersInfoW
SetRectEmpty
EnumDisplayMonitors
SetLayeredWindowAttributes
GetSysColorBrush
RealChildWindowFromPoint
IntersectRect
OffsetRect
DeleteMenu
SetWindowRgn
RedrawWindow
GetParent
GetWindowTextW
GetForegroundWindow
MessageBoxW
GetDlgItemTextW
GetDlgItem
SetWindowTextW
FindWindowW
SetWindowPos
GetDesktopWindow
GetWindowRect
SetCapture
WindowFromPoint
ReleaseCapture
MessageBeep
NotifyWinEvent
IsZoomed
RegisterClassW
IsRectEmpty
wsprintfW
DefFrameProcW
PostThreadMessageW
CharUpperBuffW
CopyIcon
EnableScrollBar
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
GetUpdateRect
ScreenToClient
GetWindowThreadProcessId
GetAsyncKeyState
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
FrameRect
SetClipboardData
LoadImageW
CopyImage
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongW
DestroyAcceleratorTable
SetParent
MapVirtualKeyW
GetKeyNameTextW
DestroyIcon
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
CharNextW
UnregisterClassW
WaitMessage
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
GetClassInfoExW
UpdateLayeredWindow

gdi32

GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateFontIndirectW
GetTextExtentPoint32W
CreateDIBitmap
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
CombineRgn
PatBlt
DPtoLP
CreateRoundRectRgn
CreateDIBSection
GetBkColor
GetTextColor
GetRgnBox
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
SetPixel
Rectangle
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceW
SetPixelV
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
CreateDCW
CopyMetaFileW
GetDeviceCaps
GetStockObject
CreateSolidBrush
DeleteObject
StretchBlt
GetMapMode
GetObjectW
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumValueW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
OpenProcessToken
RegQueryValueW
RegEnumKeyW

shell32

Shell_NotifyIconW
SHChangeNotify
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
DragFinish
SHAppBarMessage
ShellExecuteW
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathFindExtensionW
PathRemoveFileSpecW

ole32

CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CLSIDFromString
CoInitialize
CoTaskMemFree
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeSecurity
DoDragDrop
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
CoInitializeEx

oleaut32

VariantChangeType
SysStringLen
VariantCopy
SysAllocStringLen
VariantInit
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
VariantClear
SysFreeString
SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipAlloc
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipFree
GdiplusShutdown

iphlpapi

GetAdaptersInfo

setupapi

CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiChangeState
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo

rpcrt4

UuidFromStringW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

psapi

GetModuleFileNameExW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

wininet

InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
InternetQueryDataAvailable

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41cb6245fe624778c24fb25b4aec188a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

iphlpapi

setupapi

rpcrt4

version

psapi

oleacc

wininet

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 339KB - Virtual size: 339KB

.data Size: 26KB - Virtual size: 71KB

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.reloc Size: 187KB - Virtual size: 187KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 339KB - Virtual size: 339KB

.data
Size: 26KB - Virtual size: 71KB

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 187KB - Virtual size: 187KB