2024-09-28_c860b38803e82618ab0600a7c683eef8_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-28_c860b38803e82618ab0600a7c683eef8_mafia
Size

3.0MB
MD5

c860b38803e82618ab0600a7c683eef8
SHA1

d6a92f6e9d788e654bfe742299eaa5491708f3e5
SHA256

9c8a367a32293eac8644f5017938d32d1ffea0d9244bce45a4ccd005eed0c9ef
SHA512

91bcbd46c7eecf0a2972448c68d26d017a0cad14179369397f40926fc12f8fcfac9d5ee9df91e8d3ba33051ab80b4f9723c38cf5c77fee0b96676255c1bcc3eb
SSDEEP

98304:g2rgbmLEN+xvZ2CWZBwx/UyF/bvKzp+4BImtwYbgTFDEYlpvCBuYg1c:g2r+BmghZBm/Uy+ppb2EkeuYg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-28_c860b38803e82618ab0600a7c683eef8_mafia

Files

2024-09-28_c860b38803e82618ab0600a7c683eef8_mafia
.exe windows:5 windows x86 arch:x86

24db313f197271eb2760cac8da226d00

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winusb

WinUsb_Initialize
WinUsb_GetDescriptor
WinUsb_Free

kernel32

FileTimeToSystemTime
GetFileInformationByHandle
MapViewOfFile
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFilePointer
AreFileApisANSI
GetSystemTime
GetStdHandle
GetACP
SetConsoleCtrlHandler
LoadLibraryExA
GetCurrentProcessId
GetFullPathNameA
Beep
GetTickCount
OpenMutexA
CreateThread
SetupComm
GetDefaultCommConfigA
SetCommConfig
ClearCommError
TerminateThread
WaitCommEvent
SetCommMask
WriteFile
GetOverlappedResult
SetEvent
CancelIo
GetCommTimeouts
SetCommTimeouts
GetTimeFormatA
GetDateFormatA
OpenProcess
CreateEventA
PurgeComm
GetCommState
SetCommState
FindResourceExW
EnterCriticalSection
CreateFileMappingA
FindNextFileA
lstrcpyA
GetFileSize
GetModuleFileNameW
GetSystemDirectoryW
GlobalLock
GlobalUnlock
SetThreadUILanguage
lstrcmpA
GetSystemInfo
GetVersionExA
MultiByteToWideChar
GetCurrentProcess
GetModuleHandleA
RemoveDirectoryA
CreateDirectoryA
DeleteFileA
CopyFileA
TerminateProcess
GetLocalTime
InitializeCriticalSection
DeleteCriticalSection
WaitForMultipleObjects
GetFileAttributesA
GetPrivateProfileStringA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetExitCodeThread
CreateJobObjectW
SetInformationJobObject
AssignProcessToJobObject
WinExec
FindFirstFileA
FindClose
EscapeCommFunction
GetCurrentDirectoryA
SetCurrentDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
CreatePipe
SetHandleInformation
GetStartupInfoA
UnmapViewOfFile
SetFileAttributesA
WritePrivateProfileStringA
LeaveCriticalSection
CreateProcessA
FormatMessageA
lstrlenA
MulDiv
lstrlenW
GlobalSize
SetLastError
FileTimeToLocalFileTime
DeactivateActCtx
LoadLibraryW
ActivateActCtx
InitializeCriticalSectionAndSpinCount
LocalAlloc
lstrcmpiA
MoveFileA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetVolumeInformationA
CompareStringA
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
ReleaseActCtx
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SetThreadPriority
ResumeThread
GetCurrentThreadId
GlobalAddAtomA
GlobalFlags
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
FreeResource
FindResourceA
InterlockedExchange
GetLocaleInfoA
GetUserDefaultUILanguage
GetCPInfo
GetOEMCP
GetWindowsDirectoryA
GetNumberFormatA
GetTempFileNameA
GetTempPathA
GetProfileIntA
SearchPathA
VirtualProtect
GetUserDefaultLCID
RtlUnwind
HeapFree
RaiseException
HeapAlloc
ExitThread
GetSystemTimeAsFileTime
FindFirstFileExA
EncodePointer
DecodePointer
HeapReAlloc
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
ExitProcess
GetCommandLineA
HeapSetInformation
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
HeapQueryInformation
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
HeapCreate
HeapDestroy
LCMapStringW
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStartupInfoW
GetStringTypeW
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetCurrentDirectoryW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
InterlockedCompareExchange
LocalFree
WaitForSingleObject
PeekNamedPipe
ReadFile
Sleep
GetExitCodeProcess
GlobalAlloc
GlobalFree
CreateFileA
DeviceIoControl
CloseHandle
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
GetPrivateProfileIntA
GetLastError

user32

GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
IsChild
WinHelpA
LoadIconA
LoadIconW
RegisterWindowMessageA
IsIconic
PostQuitMessage
InflateRect
IntersectRect
GetMenuItemInfoA
DestroyMenu
SystemParametersInfoA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
SetRectEmpty
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadCursorW
SetCursor
ShowOwnedPopups
DeleteMenu
InvalidateRect
SetTimer
KillTimer
RedrawWindow
GetMenuDefaultItem
CreatePopupMenu
IsRectEmpty
MapVirtualKeyA
SetCapture
GetAsyncKeyState
ReleaseCapture
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
MessageBeep
OffsetRect
GetIconInfo
CopyImage
LoadImageA
GetNextDlgGroupItem
DrawIconEx
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
WindowFromPoint
SetClassLongA
LoadMenuW
GetSystemMenu
DrawStateA
DrawEdge
DrawFrameControl
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
DrawTextExA
SetRect
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetKeyNameTextA
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
ShowScrollBar
ReuseDDElParam
UnpackDDElParam
PostThreadMessageA
WaitMessage
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
MonitorFromWindow
CreateMenu
SetMenuDefaultItem
FrameRect
GetUpdateRect
RegisterClipboardFormatA
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
CharUpperA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
DrawTextA
TabbedTextOutA
FillRect
SetWindowPos
UpdateWindow
GetClientRect
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
ShowWindow
MoveWindow
SetWindowLongA
IsWindow
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
CheckDlgButton
GetScrollPos
SetScrollPos
SetFocus
GetFocus
RealChildWindowFromPoint
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
DestroyIcon
SetWindowsHookExA
CallNextHookEx
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetWindowTextLengthA
CheckMenuItem
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
LoadMenuA
GrayStringA
GetDesktopWindow
wsprintfA
MessageBoxA
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetSystemMetrics
GetWindowTextA
UnhookWindowsHookEx
CreateAcceleratorTableA
LoadCursorA

advapi32

FreeSid
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
AllocateAndInitializeSid
RegEnumKeyExA

shell32

SHCreateDirectoryExA
SHBrowseForFolderA
SHGetPathFromIDListA
SHFileOperationA
SHGetPathFromIDListW
SHAppBarMessage
DragQueryFileA
DragFinish
ShellExecuteA
SHGetDesktopFolder
SHGetFileInfoA
SHGetSpecialFolderLocation

ole32

DoDragDrop
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoCreateGuid
CoTaskMemFree

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathFileExistsA
UrlUnescapeA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW
PathIsDirectoryA

urlmon

URLDownloadToFileA

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetDevicePropertyW
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDevicePropertyKeys
SetupDiGetClassDescriptionA

iphlpapi

GetAdaptersInfo

rpcrt4

UuidToStringA
RpcStringFreeA

ws2_32

send
WSAStartup
socket
closesocket
recv
WSAGetLastError
connect
inet_addr
htons

wininet

InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetQueryDataAvailable
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenUrlA

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

gdiplus

GdipDrawImageI
GdipFree
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipAlloc
GdipDeleteGraphics
GdipGetImageGraphicsContext

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

gdi32

GetTextFaceA
SetPixelV
SetPaletteEntries
ExtFloodFill
LineTo
MoveToEx
SetTextAlign
GetBoundsRect
FrameRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetObjectA
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectA
LPtoDP
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
Polygon
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
GetSystemPaletteEntries
RealizePalette
RestoreDC
SaveDC
DeleteObject
CreateDCA
CopyMetaFileA
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
BitBlt
FillRgn
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
GetTextMetricsA
CreateCompatibleBitmap
CreateDIBitmap
GetTextExtentPoint32A
DPtoLP
PatBlt
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetDeviceCaps

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comdlg32

GetFileTitleA

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
VariantClear
SysStringLen
SysFreeString
VarBstrFromDate
VariantInit
SysAllocString

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 9.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 249KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24db313f197271eb2760cac8da226d00

Headers

DLL Characteristics

File Characteristics

Imports

winusb

kernel32

user32

advapi32

shell32

ole32

msimg32

comctl32

shlwapi

urlmon

setupapi

iphlpapi

rpcrt4

ws2_32

wininet

oleacc

gdiplus

imm32

winmm

gdi32

winspool.drv

comdlg32

oleaut32

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 474KB - Virtual size: 473KB

.data Size: 138KB - Virtual size: 9.0MB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 249KB - Virtual size: 249KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 474KB - Virtual size: 473KB

.data
Size: 138KB - Virtual size: 9.0MB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 249KB - Virtual size: 249KB