2024-09-13_c01dfc4205bdffad133451c34cc331b0_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_c01dfc4205bdffad133451c34cc331b0_mafia
Size

2.7MB
MD5

c01dfc4205bdffad133451c34cc331b0
SHA1

fc7480e2195b1b8d9a7c4ab5bb70c75c5d256f08
SHA256

e9989dc7ae58907c655796301e7eea01ba44e8b8e0fab9cc24378215bc7e2aea
SHA512

f9989fa9e5bd7d206b3eb1c04f7207e5e7ac6772c43d52dbf1dd83057e7f6c22ae7c81c6d28b8c90d59a67846df11cf036a8559dd2ec7226452db19182ab80ec
SSDEEP

49152:uV2svyQ5O1GUC7Cy5Spyy4c2JGzbm1ceQOo7A12yIdIKzK6hP9NT8QHiUWY8rp/8:psvyQ5OVC+yWyy4c2JGzbm1ceQN7pdBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_c01dfc4205bdffad133451c34cc331b0_mafia

Files

2024-09-13_c01dfc4205bdffad133451c34cc331b0_mafia
.exe windows:5 windows x86 arch:x86

ed2fdd6c36e142478c8c718664d491af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\MoeacaSign\EXE\Agent\Project\Release\Moeaca_Service.pdb

Imports

kernel32

CompareStringW
GetConsoleMode
GetConsoleCP
GetStringTypeW
SetConsoleCtrlHandler
IsProcessorFeaturePresent
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
GetStdHandle
HeapCreate
LCMapStringW
IsValidCodePage
IsDebuggerPresent
UnhandledExceptionFilter
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
CreateThread
ExitThread
FindResourceW
RaiseException
ExitProcess
HeapReAlloc
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetSystemTimeAsFileTime
GetDateFormatA
SetEnvironmentVariableA
WriteConsoleW
CreateFileW
SetUnhandledExceptionFilter
GetTimeFormatA
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetVersion
GlobalMemoryStatus
FlushConsoleInputBuffer
GetDriveTypeA
FindFirstFileExA
ReadConsoleInputA
SetConsoleMode
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
GetDriveTypeW
GetProcessHeap
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetTickCount
GetTempPathA
GetTempFileNameA
GetOEMCP
GetCPInfo
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
GetACP
lstrcpyA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetCurrentDirectoryA
FileTimeToSystemTime
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
LoadLibraryW
lstrcmpW
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
lstrcmpiA
GetThreadLocale
CopyFileA
GlobalSize
MulDiv
GlobalUnlock
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
FindResourceA
FreeResource
GlobalFree
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
CompareStringA
ActivateActCtx
DeactivateActCtx
SetLastError
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
GetModuleHandleW
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
FindNextFileA
FindClose
FindFirstFileA
DeleteFileA
LocalFree
GetCurrentProcessId
CloseHandle
CreateToolhelp32Snapshot
Process32Next
GetLastError
lstrlenW
MultiByteToWideChar
TerminateProcess
OpenProcess
WriteFile
GetWindowsDirectoryA
FormatMessageA
WaitForSingleObject
Process32First
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetModuleFileNameA
Sleep
LockResource
SizeofResource
WideCharToMultiByte
LoadResource

user32

IsClipboardFormatAvailable
SetMenuDefaultItem
PostThreadMessageA
CreateMenu
IsMenu
UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
CopyImage
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
RegisterClipboardFormatA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateA
LoadMenuW
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
CreatePopupMenu
DestroyAcceleratorTable
SetParent
RedrawWindow
SetWindowRgn
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
IntersectRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
OffsetRect
CharNextA
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
KillTimer
SetTimer
InvalidateRect
LoadCursorA
GetSysColorBrush
RealChildWindowFromPoint
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetWindowRect
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
DestroyCursor
GetMenu
SetWindowLongA
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
UnhookWindowsHookEx
CharUpperA
GetSysColor
EndPaint
BeginPaint
GetWindowRgn
DeleteMenu
GetWindowDC
ScreenToClient
GetProcessWindowStation
GetUserObjectInformationW
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetDC
CopyRect
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
ValidateRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
ShowOwnedPopups
SetCursor
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuA
GetMenuState
CheckMenuItem
RegisterWindowMessageA
ShowScrollBar
PostMessageA
ClientToScreen
GetSystemMenu
IsIconic
LoadIconA
DrawIcon
GetClientRect
SendMessageA
LoadIconW
EnableMenuItem
GetDesktopWindow
GetCursorPos
GetSystemMetrics
IsWindowVisible
EnableWindow
IsZoomed

gdi32

CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
DPtoLP
Escape
ExtTextOutA
TextOutA
GetMapMode
CombineRgn
SetRectRgn
SetViewportExtEx
GetRgnBox
GetTextColor
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
GetTextMetricsA
CreateCompatibleBitmap
CreateDIBitmap
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
GetBoundsRect
SetTextColor
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectA
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
GetTextExtentPoint32A
CreateBitmap
GetDeviceCaps
CopyMetaFileA
CreateDCA
CreateRectRgnIndirect
PatBlt
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
ScaleViewportExtEx

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegEnumValueA
RegCreateKeyExA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegSetValueExA

shell32

SHAppBarMessage
Shell_NotifyIconA
SHGetFileInfoA
DragFinish
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
DragQueryFileA

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

OleUninitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
CoInitializeEx
OleGetClipboard
RegisterDragDrop
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CoUninitialize
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoLockObjectExternal
RevokeDragDrop

oleaut32

SysAllocString
OleCreateFontIndirect
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
SysAllocStringByteLen
VarBstrFromDate

oledlg

ord8

ws2_32

WSAGetLastError
recv
WSASetLastError
send
shutdown
listen
closesocket
socket
bind
setsockopt
htons
inet_addr
WSAStartup
accept

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipGetImagePixelFormat

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed2fdd6c36e142478c8c718664d491af

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

ws2_32

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 483KB - Virtual size: 483KB

.data Size: 63KB - Virtual size: 100KB

.rsrc Size: 149KB - Virtual size: 148KB

.reloc Size: 204KB - Virtual size: 204KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 483KB - Virtual size: 483KB

.data
Size: 63KB - Virtual size: 100KB

.rsrc
Size: 149KB - Virtual size: 148KB

.reloc
Size: 204KB - Virtual size: 204KB