5c19d0f197d8ae1da82cc6b51814570d_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5c19d0f197d8ae1da82cc6b51814570d_mafia_JC.exe
Size

3.4MB
MD5

5c19d0f197d8ae1da82cc6b51814570d
SHA1

7c154c4cb35b041213f744e5ee5f2471b83e8c6b
SHA256

c8364ff1495451723cb472481ea3abc93f611e1e382509ad1036a3e0bec5a258
SHA512

9b91f850c783b520b880bb84e63d4838e852b5686088ad7f1b72890d06614ac8a7c3ed26978ea693910ac6185b7cfe2bfa776b42a5cd211e3e24df25ae81c226
SSDEEP

98304:dQIQ7n4g8zR1ZRER+7b6MYkjMPGs7qKPX341lfc4:eI9g8rTsZOs7qKP4vX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c19d0f197d8ae1da82cc6b51814570d_mafia_JC.exe

Files

5c19d0f197d8ae1da82cc6b51814570d_mafia_JC.exe
.exe windows x86

42c8e5d41e74cf915c0aff0e45a45f02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize
ord17
InitCommonControlsEx

dinput8

DirectInput8Create

psapi

GetModuleFileNameExA

kernel32

GetConsoleMode
CompareStringW
GetTimeZoneInformation
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetConsoleCP
FreeEnvironmentStringsW
GetStringTypeW
LCMapStringW
HeapCreate
GetStdHandle
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
GetModuleHandleA
Sleep
WideCharToMultiByte
SizeofResource
LockResource
IsProcessorFeaturePresent
LoadResource
FindResourceW
OpenProcess
CloseHandle
GetModuleFileNameA
CreateMutexA
GetLastError
ReleaseMutex
FindResourceA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
InterlockedDecrement
MultiByteToWideChar
lstrlenA
GlobalFree
InterlockedExchange
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpA
SetLastError
DeactivateActCtx
LoadLibraryA
ActivateActCtx
CompareStringA
LoadLibraryExA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GlobalDeleteAtom
GetCurrentProcessId
FreeResource
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
MulDiv
lstrlenW
IsValidCodePage
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
HeapReAlloc
CreateThread
ExitThread
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
LocalFree
FormatMessageA
GlobalSize
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
ExitProcess
DecodePointer
EncodePointer
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetTickCount
GetTempPathA
GetTempFileNameA
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
GetOEMCP
GetCPInfo
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
lstrcmpiA
GetACP
GetThreadLocale
DeleteFileA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
lstrcpyA
GetSystemDirectoryW
GetCurrentDirectoryA
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
GlobalAddAtomA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CopyFileA

user32

FrameRect
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongA
DestroyAcceleratorTable
SetParent
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
UnregisterClassA
CopyImage
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
GetAsyncKeyState
NotifyWinEvent
SetWindowRgn
CharUpperA
DestroyIcon
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
IntersectRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
OffsetRect
CharNextA
KillTimer
SetTimer
RealChildWindowFromPoint
GetSysColorBrush
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
WaitMessage
ReleaseCapture
LoadCursorA
LoadCursorW
WindowFromPoint
SetCapture
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
MoveWindow
SetWindowTextA
IsDialogMessageA
CopyIcon
CheckDlgButton
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
CopyRect
UnhookWindowsHookEx
PtInRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringA
CharUpperBuffA
PostThreadMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
DrawTextExA
DrawTextA
TabbedTextOutA
UpdateWindow
FillRect
DrawStateA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetKeyNameTextA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
SetForegroundWindow
ShowWindow
EnableWindow
LoadIconW
GetSystemMenu
AppendMenuA
SendMessageA
InvalidateRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetClassNameA
GetWindowTextA
LoadMenuW
GetCursorPos
GetSubMenu
keybd_event
GetWindowRect
SetCursorPos
SendInput
AttachThreadInput
GetFocus
PostMessageA
PostQuitMessage
MessageBoxA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SetWindowPos
MapDialogRect
SetWindowContextHelpId
GetWindow
RegisterWindowMessageA
EndDialog
GetNextDlgTabItem
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
RemoveMenu
GetMenuItemCount
InsertMenuA
GetMenuItemID
GetMenuStringA
GetMenuState
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
RegisterClipboardFormatA

gdi32

IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateFontIndirectA
GetTextExtentPoint32A
CreateDIBitmap
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsA
EnumFontFamiliesA
GetBkColor
GetTextColor
GetRgnBox
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateRoundRectRgn
CreateDIBSection
ExcludeClipRect
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetStockObject
CreateSolidBrush
CreateBitmap
CreateDCA
CopyMetaFileA
GetDeviceCaps
SetDCBrushColor
CreateFontA
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
GetTextCharsetInfo

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegCloseKey
RegEnumKeyExA

shell32

ShellExecuteA
Shell_NotifyIconA
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHAppBarMessage
DragQueryFileA
DragFinish
SHGetFileInfoA
SHGetSpecialFolderLocation

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA
PathFileExistsA

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoInitializeEx
OleInitialize
CoFreeUnusedLibraries
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleUninitialize
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleRun
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
CoGetClassObject

oleaut32

SysAllocStringByteLen
SysAllocStringLen
VariantChangeType
SysStringLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
VariantClear
VariantInit
SysFreeString
GetErrorInfo
VarBstrFromDate

oledlg

ord8

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipDeleteGraphics
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromStream
GdiplusStartup
GdipDrawImageI

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42c8e5d41e74cf915c0aff0e45a45f02

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

dinput8

psapi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 278KB - Virtual size: 278KB

.data Size: 27KB - Virtual size: 57KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 173KB - Virtual size: 173KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 278KB - Virtual size: 278KB

.data
Size: 27KB - Virtual size: 57KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 173KB - Virtual size: 173KB