1112049e25981722e7e9ff78a3ac28b7_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1112049e25981722e7e9ff78a3ac28b7_mafia_JC.exe
Size

221KB
MD5

1112049e25981722e7e9ff78a3ac28b7
SHA1

3099ebd30b57b2cc93a8af75b1fb3c6ec9b04d8a
SHA256

a43eac3d7715b92593fabde07680063545eb90ffdcd16f25762113f020a49f1c
SHA512

7e542286cd77d42e5e8e81e3535a1f957305f49bc5adfba3d0a6c817df58ab31b1c13312158dbe7cc8f16906e318590822b11f6ada6173a8479d99281c53239a
SSDEEP

3072:le8RI2x/GIVQvjAKebRU7pQeLPnRHk0Oup/Ad1lRWI4lXFl6UhZIyn:I8RIYJOvjS+JpHkfS/mdef6WI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1112049e25981722e7e9ff78a3ac28b7_mafia_JC.exe

Files

1112049e25981722e7e9ff78a3ac28b7_mafia_JC.exe
.exe windows x86

78a578f84a205bf6198f7c1ce6bcaaaf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32FirstW
EnumDateFormatsA
GetModuleHandleA
CreateToolhelp32Snapshot
GetCommMask
CloseHandle
GetThreadTimes
GetVolumeInformationW
LocalAlloc
GetProcAddress
GetLastError
GetNamedPipeInfo
GetDiskFreeSpaceExA
GetTickCount
EnumSystemLocalesA
GetLocaleInfoA
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
WideCharToMultiByte
HeapSize
HeapAlloc
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetUserDefaultLCID
IsValidLocale

gdi32

GetCharABCWidthsFloatA
SetTextAlign
SwapBuffers
CloseMetaFile
StretchBlt

msimg32

TransparentBlt

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.majiney
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.version
Size: 71KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78a578f84a205bf6198f7c1ce6bcaaaf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

msimg32

Sections

.text Size: 85KB - Virtual size: 84KB

.rdata Size: 14KB - Virtual size: 14KB

.majiney Size: 1024B - Virtual size: 4KB

.version Size: 71KB - Virtual size: 4.1MB

.rsrc Size: 34KB - Virtual size: 34KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 85KB - Virtual size: 84KB

.rdata
Size: 14KB - Virtual size: 14KB

.majiney
Size: 1024B - Virtual size: 4KB

.version
Size: 71KB - Virtual size: 4.1MB

.rsrc
Size: 34KB - Virtual size: 34KB

.reloc
Size: 14KB - Virtual size: 14KB