67130838f5a9fcea11fe14807d910252_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

67130838f5a9fcea11fe14807d910252_mafia_JC.exe
Size

4.6MB
MD5

67130838f5a9fcea11fe14807d910252
SHA1

96f2c9d8f6beb95a2cebed69e3abb6b1bf8b3679
SHA256

516e14363e948aca2b3bc5230e1f0e320f350c5928bea10e9f1e937ad83ddc41
SHA512

a50af51defe828dcd9d875f4c6edc58444fffc0a265dd1bdb940d9e3e62a09cbc5ed5d7153d46a88bd7d7feb2dbef4bd103bc44a1177f6e5a5aa2d5573e9abe4
SSDEEP

98304:dG1iylYWr9xDkmOMdpDmqsK4LQFzw9pu34cdoj9ghi1RebMIg9Cbk/V8:alXsmjFzw9pHmojDIg9Cbk/V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67130838f5a9fcea11fe14807d910252_mafia_JC.exe

Files

67130838f5a9fcea11fe14807d910252_mafia_JC.exe
.exe windows x86

1380d9d4d35483b233a54ee09df27766

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

meta_dll

ord131

qlib_qcn

?QLIB_QCN_INIT_FIRST@@YAXXZ

ts_lan

?TS_LAN_SEND_DC_LAN_CMD_TO_MC_PC@@YA_NHPB_W@Z

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
CM_Get_DevNode_Registry_PropertyW
SetupDiGetDeviceInstanceIdW
CM_Get_Device_IDW
CM_Get_Parent
SetupDiEnumDeviceInfo

kernel32

SetThreadPriority
ResumeThread
GetUserDefaultLCID
ReplaceFileW
GetFileTime
GetTempFileNameW
GetDiskFreeSpaceW
CreateActCtxW
ReleaseActCtx
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetFileAttributesExW
GetFileSizeEx
GlobalFlags
GetSystemDirectoryW
LoadLibraryExW
GetProfileIntW
SearchPathW
GetTempPathW
VirtualProtect
GetWindowsDirectoryW
GetNumberFormatW
FindResourceExW
GetCommandLineW
HeapSetInformation
EncodePointer
DecodePointer
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
RtlUnwind
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
ExitThread
HeapQueryInformation
HeapSize
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThread
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetStringTypeW
GetTimeZoneInformation
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetDriveTypeW
GetProcessHeap
SetEnvironmentVariableA
GlobalGetAtomNameW
lstrlenA
lstrcmpA
GlobalReAlloc
InterlockedExchange
lstrcpyW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
MoveFileW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
LocalAlloc
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
ConvertDefaultLocale
FreeResource
GetCurrentProcessId
GetModuleFileNameW
ActivateActCtx
DeactivateActCtx
FileTimeToLocalFileTime
GetModuleHandleW
SetLastError
CopyFileW
GlobalSize
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GetCPInfo
GetUserDefaultUILanguage
lstrlenW
MulDiv
GetTickCount
FileTimeToSystemTime
GetVersionExW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFilePointer
CreateFileA
InitializeCriticalSection
OutputDebugStringA
GetLocalTime
ReadConsoleW
GetStdHandle
AllocConsole
GetCurrentDirectoryW
InterlockedDecrement
InterlockedIncrement
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalFree
GlobalAlloc
DeviceIoControl
Process32NextW
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
WriteConsoleW
FindClose
FindNextFileW
FindFirstFileW
LoadLibraryW
FreeLibrary
GetProcAddress
SetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateThread
ClearCommBreak
SetCommBreak
GetOverlappedResult
WaitForMultipleObjects
WaitCommEvent
ResetEvent
CreateEventW
ClearCommError
PurgeComm
SetCommTimeouts
SetCommState
EscapeCommFunction
GetCommState
SetCommMask
SetupComm
GetCommProperties
OutputDebugStringW
CreateDirectoryA
DeleteFileA
GetCurrentDirectoryA
CreateProcessW
GetStartupInfoW
CreatePipe
WriteFile
ReadFile
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
CloseHandle
GetFileSize
CreateFileW
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemDefaultUILanguage
CompareStringA
lstrcmpW
GetLocaleInfoW
SetErrorMode

user32

InsertMenuItemW
TranslateAcceleratorW
CharUpperBuffW
SetParent
LockWindowUpdate
BringWindowToTop
CreatePopupMenu
GetMessageW
MonitorFromPoint
SystemParametersInfoW
UpdateLayeredWindow
EnableScrollBar
UnionRect
DrawIconEx
GetSysColorBrush
DrawFocusRect
DrawEdge
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
DrawStateW
CopyImage
GetIconInfo
DestroyIcon
DestroyMenu
IsMenu
GetMenuItemInfoW
DrawFrameControl
IsRectEmpty
IsIconic
IsZoomed
GetAsyncKeyState
GetCursorPos
SetCursor
MessageBeep
ReleaseCapture
LoadCursorW
WindowFromPoint
SetCapture
GetSystemMenu
DeleteMenu
IntersectRect
OffsetRect
InflateRect
SetRectEmpty
DestroyAcceleratorTable
NotifyWinEvent
SetWindowRgn
CharUpperW
GetSystemMetrics
MapVirtualKeyW
GetKeyNameTextW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
IsDialogMessageW
SetDlgItemTextW
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
LoadAcceleratorsW
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
DrawMenuBar
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
PtInRect
GetWindow
LoadMenuW
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
GetMenuState
GetMenuStringW
AppendMenuW
ReuseDDElParam
UnpackDDElParam
PostQuitMessage
RegisterClipboardFormatW
MapVirtualKeyExW
IsCharLowerW
GetWindowRgn
CreateMenu
HideCaret
InvertRect
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDesktopWindow
GetClientRect
ClientToScreen
SetWindowTextW
DestroyWindow
UnregisterClassW
InvalidateRgn
CharNextW
EnumChildWindows
DestroyCursor
GetNextDlgGroupItem
SubtractRect
GetUpdateRect
GetDoubleClickTime
GetCapture
TranslateMDISysAccel
GetWindowRect
PostMessageW
IsWindow
RegisterHotKey
SetTimer
KillTimer
UpdateWindow
InvalidateRect
UnregisterHotKey
EnableWindow
SendMessageW
DefMDIChildProcW
DefFrameProcW
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyIcon
SetCursorPos
FrameRect
SetClassLongW
GetMenuDefaultItem
CopyAcceleratorTableW
SetMenuDefaultItem
SetRect
IsClipboardFormatAvailable
SetLayeredWindowAttributes
EnumDisplayMonitors
RealChildWindowFromPoint
DrawIcon
ShowOwnedPopups
TranslateMessage
WaitMessage
PostThreadMessageW
SetWindowContextHelpId
SetPropW
MapDialogRect

gdi32

GetLayout
SetLayout
DeleteObject
SelectClipRgn
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
ScaleViewportExtEx
CreateRectRgnIndirect
PatBlt
CreateRoundRectRgn
CreateCompatibleBitmap
GetTextExtentPoint32W
GetTextMetricsW
SetDIBColorTable
GetDIBits
RealizePalette
CombineRgn
StretchBlt
SetPixel
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
GetTextColor
Polyline
Ellipse
CreateFontIndirectW
MoveToEx
LPtoDP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
GetMapMode
OffsetRgn
GetRgnBox
Rectangle
RoundRect
ExtFloodFill
CreatePalette
GetPaletteEntries
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Polygon
SetTextAlign
SelectObject
Escape
ExtTextOutW
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
CreateDCW
CopyMetaFileW
GetDeviceCaps
DPtoLP
CreateFontW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SetWindowOrgEx

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExA
RegEnumValueA
RegSetValueW
RegCreateKeyExW
RegSetValueExW
GetFileSecurityW
SetFileSecurityW
RegCloseKey
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW

shell32

ExtractIconW
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW
SHAddToRecentDocs
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHGetFileInfoW
SHBrowseForFolderW

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Destroy
ImageList_DrawEx

shlwapi

PathIsDirectoryA
PathFileExistsA
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

ole32

CoGetClassObject
StgCreateDocfileOnILockBytes
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
OleDuplicateData
CoUninitialize
CoCreateInstance
CoInitializeEx
CreateStreamOnHGlobal
CoCreateGuid
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoInitialize
OleLockRunning
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard

oleaut32

VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
OleCreateFontIndirect
SysStringLen
VariantCopy
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0

ws2_32

send
closesocket
accept
WSAGetLastError
WSAAsyncSelect
connect
inet_addr
ntohl
htonl
socket
inet_ntoa
gethostbyname
WSACleanup
gethostname
WSAStartup
recv
htons

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1380d9d4d35483b233a54ee09df27766

Headers

DLL Characteristics

File Characteristics

Imports

meta_dll

qlib_qcn

ts_lan

setupapi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

ws2_32

iphlpapi

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 396KB - Virtual size: 396KB

.data Size: 1.0MB - Virtual size: 1.1MB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 202KB - Virtual size: 201KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 396KB - Virtual size: 396KB

.data
Size: 1.0MB - Virtual size: 1.1MB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 202KB - Virtual size: 201KB