2024-09-12_8086a90f685c9e0cba2c460a564b844f_mafia

Sharing

Copy URL

Twitter E-mail

General

Target

2024-09-12_8086a90f685c9e0cba2c460a564b844f_mafia
Size

1.9MB
MD5

8086a90f685c9e0cba2c460a564b844f
SHA1

9287179ca1182c16db8f8930a0e53942bf2d99ab
SHA256

e96f074533fc8577ff9c44a2f56ebf15d200d4b1418662ceecd971d26a244b16
SHA512

e5158e96e51f00688bf9b5394ffc985eedc783a5bd54d34f208c90bd47fa1b06903561f8ea28e52d559a623f6f10403c24a5e64e002a7392cab4e039b6321882
SSDEEP

49152:/cHSKoGyTWaWsIBX8MIwVZXDw0/qg3E1roLEqE4WpUd3D6lCsM0kFdG:3KoJW5sIBNIOZXDX/qg3E1rqWSBD6lCs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-12_8086a90f685c9e0cba2c460a564b844f_mafia

Files

2024-09-12_8086a90f685c9e0cba2c460a564b844f_mafia
.exe windows:5 windows x86 arch:x86

1ff22d300099d0c7c6dd2aa46d41ce18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\WORKSPACES\WK_SIEN_APPNETWORK\Sien App Network\SIEN.Installer\Trunk\Setup\SIEN.Installer.VS10\Release\Setup.pdb

Imports

rpcrt4

UuidToStringW

kernel32

GetLocaleInfoA
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
IsProcessorFeaturePresent
GetStringTypeW
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
ExitProcess
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetUserDefaultLCID
VirtualProtect
SearchPathW
Sleep
GetProfileIntW
GetTempFileNameW
GetNumberFormatW
GetWindowsDirectoryW
SetErrorMode
GetCurrentDirectoryW
lstrcpyW
GetSystemDirectoryW
GetFullPathNameW
GetVolumeInformationW
UnlockFile
LockFile
lstrcmpiW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GlobalFlags
GetThreadLocale
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
SuspendThread
ResumeThread
SetThreadPriority
lstrcmpA
SetEnvironmentVariableW
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcmpW
FreeResource
RaiseException
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeLibrary
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
InterlockedDecrement
InterlockedIncrement
lstrlenA
CompareStringW
SetLastError
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
MulDiv
VerifyVersionInfoW
VerSetConditionMask
WideCharToMultiByte
MultiByteToWideChar
ResetEvent
CreateEventW
GetTickCount
CreateMutexW
LocalAlloc
GetCurrentThread
OutputDebugStringW
GetSystemInfo
GetVersionExW
DuplicateHandle
OpenFileMappingW
GetCurrentProcess
GetModuleHandleW
GetProcAddress
SetEvent
GetExitCodeProcess
WaitForSingleObject
GetFileAttributesExW
FindNextFileW
FindClose
GetTempPathW
FlushFileBuffers
ReadFile
CopyFileW
WriteFile
GetSystemTimeAsFileTime
FindResourceExW
SetEndOfFile
SetFilePointer
FindFirstFileW
GetFileSize
CloseHandle
CreateFileMappingW
CreateFileW
VirtualQuery
UnmapViewOfFile
MapViewOfFile
DeleteFileW
GetLocalTime
CreateDirectoryW
GetCommandLineW
GetModuleFileNameW
CreateProcessW
LocalFree
GetCurrentProcessId
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
lstrlenW
IsValidLocale
GetUserDefaultUILanguage
EnumSystemLocalesA

user32

OpenClipboard
GetKeyNameTextW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
DrawEdge
DrawStateW
LoadMenuW
SetClassLongW
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
DrawIconEx
LoadImageW
GetIconInfo
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
MapVirtualKeyW
CreatePopupMenu
GetMenuDefaultItem
MessageBeep
GetNextDlgGroupItem
PostThreadMessageW
KillTimer
SetTimer
DeleteMenu
WaitMessage
WindowFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
SetWindowContextHelpId
MapDialogRect
CharNextW
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
IntersectRect
OffsetRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
DestroyIcon
UnregisterClassW
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
DestroyMenu
GetMenuItemInfoW
InflateRect
ShowOwnedPopups
SetCursor
GetWindowThreadProcessId
RegisterClipboardFormatW
GetMessageW
TranslateMessage
GetCursorPos
PostQuitMessage
MoveWindow
IsDialogMessageW
SetClipboardData
CheckDlgButton
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
CharLowerW
CharUpperW
wvsprintfW
PostMessageW
LoadIconW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetWindowRect
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
CloseClipboard
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
PtInRect
GetWindow
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
FrameRect
GetUpdateRect
CopyIcon
CharUpperBuffW
GetDoubleClickTime
SubtractRect
DestroyCursor
GetWindowRgn
SendMessageW
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetKeyState
EnableWindow
SetWindowTextW
SetForegroundWindow
GetSystemMenu
EnableMenuItem
SetActiveWindow
ShowWindow
SystemParametersInfoW
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
CheckMenuItem
ModifyMenuW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
UnhookWindowsHookEx
GetDesktopWindow
RegisterWindowMessageW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ScreenToClient
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
GetSysColor

gdi32

CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
CreateDIBSection
SetPaletteEntries
SetPixelV
GetTextFaceW
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetTextCharsetInfo
EnumFontFamiliesW
CreateCompatibleBitmap
CreateDIBitmap
GetTextMetricsW
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
GetTextColor
GetBkColor
GetRgnBox
CreateRectRgnIndirect
GetTextExtentPoint32W
CreateFontIndirectW
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
CreateBitmap
ExtFloodFill
SaveDC
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectW
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
GetDeviceCaps
CopyMetaFileW
CreateDCW
SetWindowExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

GetLengthSid
RegOpenCurrentUser
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegDeleteKeyW
RegDeleteValueW
OpenProcessToken
RegEnumKeyW
RegQueryValueW
RegSetValueW
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
AddAccessAllowedAce
InitializeAcl
RegQueryValueExW
AllocateAndInitializeSid
DuplicateToken
OpenThreadToken
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW

shell32

SHBrowseForFolderW
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW
ExtractIconW
SHGetFileInfoW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragFinish
SHAppBarMessage
CommandLineToArgvW
DragQueryFileW

comctl32

ord17
ImageList_GetIconSize

shlwapi

PathAppendW
PathFindFileNameW
PathFileExistsW
PathStripPathW
PathRemoveExtensionW
UrlUnescapeW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
SHQueryValueExW

ole32

DoDragDrop
CoInitialize
CoUninitialize
CoCreateInstance
CoCreateGuid
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
OleDuplicateData
CoRegisterClassObject
CoRevokeClassObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
StringFromGUID2
CoDisconnectObject
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoInitializeEx
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard

oleaut32

SysStringByteLen
SysAllocStringLen
VariantClear
VariantCopy
VariantChangeType
VariantInit
DispCallFunc
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysStringLen
SysFreeString
SysAllocString

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDeleteGraphics
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipCloneImage
GdipLoadImageFromFile
GdipDisposeImage
GdipAlloc
GdipFree

wininet

InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryDataAvailable
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ff22d300099d0c7c6dd2aa46d41ce18

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 322KB - Virtual size: 322KB

.data Size: 31KB - Virtual size: 61KB

.rsrc Size: 112KB - Virtual size: 111KB

.reloc Size: 179KB - Virtual size: 178KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 322KB - Virtual size: 322KB

.data
Size: 31KB - Virtual size: 61KB

.rsrc
Size: 112KB - Virtual size: 111KB

.reloc
Size: 179KB - Virtual size: 178KB