2024-10-14_f56f36c0e679c486449cb52ebe56f765_backswap_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-14_f56f36c0e679c486449cb52ebe56f765_backswap_mafia
Size

10.4MB
MD5

f56f36c0e679c486449cb52ebe56f765
SHA1

c75507d12afdda15fcdd2296740cd5c861352efc
SHA256

70f0209646e449add822a279a9e925235a49cd27fb4ae9b1994c7493002f1073
SHA512

c7bed082bd49d2e732e13ea0299ac5a07ab8404482741a823d4c3239b37fd0a79bae910f7e851cd8f076d75189f89d77c3228749854686d2ebf335227995ee19
SSDEEP

196608:nuBMjrPHXedm12P+kFsuxwGc81c1abJsv6tWKFdu9CuS:ZtWJsv6tWKFdu9C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-14_f56f36c0e679c486449cb52ebe56f765_backswap_mafia

Files

2024-10-14_f56f36c0e679c486449cb52ebe56f765_backswap_mafia
.exe windows:5 windows x86 arch:x86

b4810c4e97a4f5d329a59a8c389020c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
SystemTimeToVariantTime
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen

imm32

ImmGetDefaultIMEWnd
ImmGetVirtualKey
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmAssociateContext
ImmGetContext
ImmNotifyIME
ImmReleaseContext
ImmGetCompositionStringW

winmm

PlaySoundW

opengl32

glGetTexParameteriv
glGetString
glGetIntegerv
glGetFloatv
glGetError
glGetBooleanv
glGenTextures
glFrontFace
glFlush
glFinish
glEnable
glDrawElements
glDrawArrays
glDisable
glDepthMask
glDepthFunc
glDeleteTextures
glCullFace
glCopyTexSubImage2D
glCopyTexImage2D
glColorMask
glClearStencil
glClearColor
glClear
glBlendFunc
glBindTexture
glHint
glIsEnabled
glIsTexture
glLineWidth
glPixelStorei
glPolygonOffset
glReadPixels
glScissor
glStencilFunc
glStencilMask
glStencilOp
glTexImage2D
glTexParameterf
glTexParameterfv
glTexParameteri
glTexParameteriv
glTexSubImage2D
glViewport
glDepthRange
glClearDepth
glGetTexParameterfv

gdi32

GetBitmapBits
CreateDIBSection
GdiFlush
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
GetDIBits
CreateBitmap
DeleteDC
GetRegionData
SelectClipRgn
GetTextFaceW
SetTextColor
SetBkMode
SetTextAlign
ExtTextOutW
GetCharABCWidthsW
GetCharABCWidthsI
GetCharABCWidthsFloatW
SetGraphicsMode
SetWorldTransform
GetTextExtentPoint32W
GetGlyphOutlineW
GetOutlineTextMetricsW
CreateDCW
CreateCompatibleBitmap
CreateCompatibleDC
GetPixelFormat
DescribePixelFormat
SwapBuffers
ChoosePixelFormat
SetPixelFormat
AddFontMemResourceEx
GetTextMetricsW
AddFontResourceExW
RemoveFontResourceExW
RemoveFontMemResourceEx
GetObjectW
EnumFontFamiliesExW
CreateFontIndirectW
GetFontData
GetStockObject
OffsetRgn
GetDeviceCaps
BitBlt

kernel32

VirtualAlloc
RtlUnwind
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
DeleteFileA
InterlockedExchange
ExitThread
GetConsoleCP
GetConsoleMode
SetStdHandle
InitializeCriticalSectionAndSpinCount
SetFileAttributesW
SetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
WaitForSingleObject
CreateProcessW
GetProcAddress
lstrcmpW
GetVolumeInformationW
GetLongPathNameW
GetDriveTypeW
GetConsoleWindow
GetModuleHandleA
LCMapStringW
CompareStringW
GetUserDefaultLCID
GetCurrentProcessId
LocalFree
GetCommandLineW
SetEvent
CreateEventW
VerifyVersionInfoW
VerSetConditionMask
GetVersionExW
FormatMessageW
GetLastError
QueryPerformanceFrequency
GetModuleHandleW
GetTickCount
QueryPerformanceCounter
GetLocalTime
GetSystemTime
GetSystemDirectoryW
LoadLibraryW
TlsFree
TlsSetValue
GetCurrentThreadId
GetSystemInfo
Sleep
SetThreadPriority
GetCurrentThread
TlsAlloc
TerminateThread
TlsGetValue
WaitForMultipleObjects
ResumeThread
GetThreadPriority
CreateThread
DuplicateHandle
GetCurrentProcess
ResetEvent
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileInformationByHandle
SetErrorMode
FindClose
FindFirstFileW
CreateFileW
CreateDirectoryW
RemoveDirectoryW
GetFileAttributesW
CopyFileW
MoveFileW
DeleteFileW
DeviceIoControl
GetFullPathNameW
GetTempPathW
GetCurrentDirectoryW
GetLogicalDrives
GetFileAttributesExW
GetStartupInfoW
GetModuleFileNameW
FlushFileBuffers
GetFileType
SetFilePointerEx
ReadFile
WriteFile
MoveFileExW
SetEndOfFile
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetCurrencyFormatW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetUserDefaultUILanguage
MultiByteToWideChar
WideCharToMultiByte
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
FindNextFileW
FindFirstFileExW
FreeLibrary
GetGeoInfoW
GetUserGeoID
GetTimeZoneInformation
OpenProcess
LoadLibraryA
IsValidLocale
IsValidLanguageGroup
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetUserDefaultLangID
ExpandEnvironmentStringsW
CheckRemoteDebuggerPresent
InterlockedIncrement
SetEnvironmentVariableA
SetFilePointer
CreateFileA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
ReleaseMutex
CreateMutexW
WriteConsoleW
GetFileAttributesA
GetLocaleInfoA
EnumSystemLocalesA
GetStringTypeW
GetProcessHeap
OutputDebugStringW
ExitProcess
InterlockedDecrement

user32

ToAscii
LoadIconW
SetCaretPos
RegisterWindowMessageW
DestroyCaret
HideCaret
CreateCaret
ChangeClipboardChain
GetWindowThreadProcessId
SetClipboardViewer
DestroyCursor
GetAsyncKeyState
GetIconInfo
GetMenu
NotifyWinEvent
GetMonitorInfoW
EnumDisplayMonitors
TrackMouseEvent
GetMessageExtraInfo
GetCursorInfo
SetCursorPos
CreateIconIndirect
CreateCursor
GetCursor
GetWindowTextW
RealGetWindowClassW
EnumWindows
ToUnicode
GetKeyboardState
MapVirtualKeyW
IsZoomed
SetMenuItemInfoW
TrackPopupMenuEx
GetKeyState
LoadCursorW
GetClipboardFormatNameW
RegisterClipboardFormatW
IsIconic
DrawIconEx
SetWindowPlacement
MoveWindow
SetParent
GetUpdateRect
BeginPaint
EndPaint
SetCapture
SetForegroundWindow
SetFocus
SetWindowTextW
AdjustWindowRectEx
GetWindowPlacement
GetWindowRect
ShowWindow
SetWindowPos
TranslateMessage
DispatchMessageW
CreateWindowExW
SetWindowLongW
RegisterClassW
GetWindowLongW
SetWindowsHookExW
GetQueueStatus
PostMessageW
CallNextHookEx
UnhookWindowsHookEx
PeekMessageW
KillTimer
SetTimer
UnregisterClassW
MessageBoxW
SetWindowRgn
InvalidateRect
SendMessageW
DefWindowProcW
DestroyWindow
GetSystemMetrics
SystemParametersInfoW
GetSysColor
EnableMenuItem
GetSystemMenu
ReleaseDC
GetDC
FlashWindowEx
SetCursor
ReleaseCapture
GetForegroundWindow
IsChild
IsWindowVisible
GetAncestor
GetDesktopWindow
DestroyIcon
GetCapture
GetSysColorBrush
GetClassInfoW
LoadImageW
RegisterClassExW
ClientToScreen
GetCursorPos
GetFocus
ChildWindowFromPointEx
GetParent
GetKeyboardLayoutList
GetClientRect
ScreenToClient
GetCaretBlinkTime
GetDoubleClickTime
MessageBeep
CharNextExA
MsgWaitForMultipleObjectsEx

shell32

SHGetMalloc
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
CommandLineToArgvW
SHGetSpecialFolderPathW
SHBrowseForFolderW

ole32

CoGetMalloc
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
ReleaseStgMedium
CoTaskMemAlloc
CoLockObjectExternal
RevokeDragDrop
OleUninitialize
OleInitialize
CoCreateGuid
CoInitialize
CoUninitialize
CoTaskMemFree
RegisterDragDrop
CoCreateInstance

advapi32

FreeSid
CopySid
GetLengthSid
GetTokenInformation
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegFlushKey
RegQueryValueExW

ws2_32

WSAAsyncSelect

Exports

Exports

z_adler32
z_adler32_combine
z_adler32_combine64
z_compress
z_compress2
z_compressBound
z_crc32
z_crc32_combine
z_crc32_combine64
z_deflate
z_deflateBound
z_deflateCopy
z_deflateEnd
z_deflateInit2_
z_deflateInit_
z_deflateParams
z_deflatePrime
z_deflateReset
z_deflateSetDictionary
z_deflateSetHeader
z_deflateTune
z_get_crc_table
z_inflate
z_inflateCopy
z_inflateEnd
z_inflateGetHeader
z_inflateInit2_
z_inflateInit_
z_inflateMark
z_inflatePrime
z_inflateReset
z_inflateReset2
z_inflateSetDictionary
z_inflateSync
z_inflateSyncPoint
z_inflateUndermine
z_uncompress
z_zError
z_zlibCompileFlags
z_zlibVersion

Sections

.text
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4810c4e97a4f5d329a59a8c389020c2

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

imm32

winmm

opengl32

gdi32

kernel32

user32

shell32

ole32

advapi32

ws2_32

Exports

Exports

Sections

.text Size: 6.9MB - Virtual size: 6.9MB

.rdata Size: 3.1MB - Virtual size: 3.1MB

.data Size: 79KB - Virtual size: 145KB

.qtmetad Size: 3KB - Virtual size: 2KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 283KB - Virtual size: 282KB

.text
Size: 6.9MB - Virtual size: 6.9MB

.rdata
Size: 3.1MB - Virtual size: 3.1MB

.data
Size: 79KB - Virtual size: 145KB

.qtmetad
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 283KB - Virtual size: 282KB