399889c2e03f80d213233e1c78957468_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

399889c2e03f80d213233e1c78957468_mafia_JC.exe
Size

737KB
MD5

399889c2e03f80d213233e1c78957468
SHA1

6b526669e634f413e9cb46ac79058633983bcdc9
SHA256

cfae849e8c94a115b53d517dfb1a2458fd2cd7d7ba0ccd858b84f6d5712f160d
SHA512

dda46fd2abc8da31e35a8e42388b39553b645a8964d2f7b1855ef25ddd7f04af6c2bcfc5b7a094d8b419fe8c1ca0027bb0405d43fdc663e8f7bac522fd25aada
SSDEEP

12288:MURWMHxRF9GkO+3p4MrC4ZgeIAFZQSqdx7nfWX0IaX+VJ6IdAOoaKOUwH63:fAux39GkJOMrC4ZgeIAFGSqWX0IlVoaO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
399889c2e03f80d213233e1c78957468_mafia_JC.exe

Files

399889c2e03f80d213233e1c78957468_mafia_JC.exe
.exe windows x86

1a37a7f259dab4beb3b8f5acd2cd11c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
lstrlenA
OutputDebugStringW
DebugBreak
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetVersionExW
lstrcmpiW
InitializeCriticalSection
WriteConsoleW
FlushFileBuffers
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
InterlockedExchange
GetConsoleMode
GetConsoleCP
LoadLibraryW
LCMapStringW
GetCurrentProcessId
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
GetProcAddress
lstrlenW
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetLastError
GetOEMCP
LeaveCriticalSection
GetACP
GetCPInfo
ExitProcess
EnterCriticalSection
HeapSize
HeapCreate
GetLocaleInfoW
GetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetLocalTime
GetSystemTimeAsFileTime
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineW
EncodePointer
DecodePointer
DeleteFileW
GetTempPathW
GetTempFileNameW
SetProcessWorkingSetSize
WriteFile
SetFileTime
GetCurrentDirectoryW
GetFileAttributesW
CreateDirectoryW
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFilePointer
GetTickCount
Sleep
TerminateThread
CreateThread
CreateEventW
ResetEvent
SetEvent
WaitForSingleObject
RaiseException
InterlockedCompareExchange
InterlockedPushEntrySList
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
GlobalLock
GlobalFree
GlobalAlloc
GlobalUnlock
lstrcatW
GlobalSize
ReadFile
CloseHandle
GetFileSize
CreateFileW
WideCharToMultiByte
LocalUnlock
LocalSize
LocalReAlloc
LocalLock
HeapReAlloc
LocalFree
LocalAlloc
lstrcpyW

user32

CopyRect
GetWindowLongW
GetParent
SetWindowPos
MapWindowPoints
GetClientRect
GetMonitorInfoW
GetWindowRect
SetWindowLongW
ShowWindow
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CharNextW
DestroyWindow
RegisterClassExW
LoadImageW
LoadCursorW
GetClassInfoExW
InvalidateRect
SendMessageW
CreatePopupMenu
DestroyMenu
AppendMenuW
GetMenuItemCount
RemoveMenu
GetMenuItemInfoW
MonitorFromPoint
SetMenuItemInfoW
SetMenuDefaultItem
LoadStringW
SetFocus
SystemParametersInfoW
KillTimer
SetTimer
SetMenu
PostMessageW
TranslateAcceleratorW
LoadMenuW
LoadAcceleratorsW
CreateWindowExW
PtInRect
IsWindow
MessageBeep
CheckMenuRadioItem
TrackPopupMenuEx
CallWindowProcW
LoadStringA
PostQuitMessage
UnregisterClassA
IntersectRect
SetCapture
ReleaseCapture
CreateCaret
DestroyCaret
HideCaret
GetCaretBlinkTime
ShowCaret
UpdateLayeredWindow
GetCursorPos
GetDesktopWindow
SetCaretPos
ReleaseDC
GetDC
SetPropW
GetClassNameW
RemovePropW
ScreenToClient
DestroyCursor
EndPaint
BeginPaint
GetCapture
SetClassLongW
GetClassLongW
ClientToScreen
SetCursor
GetActiveWindow
GetPropW
FillRect
DrawTextW
IsRectEmpty
EqualRect
OffsetRect
SetRectEmpty
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetSysColor
GetSystemMetrics
CharLowerBuffW
CharUpperBuffW
GetClipboardData
GetKeyState
TrackPopupMenu
GetSubMenu
EndMenu
GetMenuStringW
IsMenu
EnableWindow
GetFocus
RedrawWindow
IsZoomed
SetWindowRgn
wsprintfW
GetIconInfo

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW

shell32

ShellExecuteW

ole32

CoInitialize
CreateStreamOnHGlobal
CLSIDFromProgID
StringFromGUID2
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

DispGetIDsOfNames
LoadTypeLi
SysAllocString
VariantClear
VariantChangeType
VariantInit
VarUI4FromStr
SysFreeString

comctl32

ord17
_TrackMouseEvent
InitCommonControlsEx

gdiplus

GdipCreatePen1
GdipCloneImage
GdipDrawImageRectI
GdipFillRectangle
GdipDrawRectangle
GdipDrawLinesI
GdipSetPenDashStyle
GdipDeletePen
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipFree
GdipAlloc
GdipDeleteBrush
GdipDeleteGraphics
GdipCreateSolidFill
GdipCreateFromHDC
GdipSetSmoothingMode
GdipFillPieI
GdipCloneBrush
GdipImageSelectActiveFrame
GdipLoadImageFromStream
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipImageGetFrameCount

msimg32

GradientFill
AlphaBlend

shlwapi

PathFileExistsW

gdi32

DeleteDC
DeleteObject
SelectObject
CreateDIBSection
CreateCompatibleDC
SetViewportOrgEx
SelectClipRgn
GetCurrentObject
GetObjectW
BitBlt
EnumFontsW
GetStockObject
SetBkColor
SetTextColor
CreateRectRgn
CreateRoundRectRgn
GetRegionData
ExtCreateRegion
CreateFontW
PatBlt
CreateBitmap
CreatePatternBrush
GetBkMode
GetBkColor
GetTextColor
SetRectRgn
CombineRgn
GetTextMetricsW
TextOutW
GetTextExtentPointW
GetTextExtentPoint32W
GetViewportOrgEx
GetClipBox
SetBkMode

Sections

.text
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a37a7f259dab4beb3b8f5acd2cd11c7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

msimg32

shlwapi

gdi32

Sections

.text Size: 420KB - Virtual size: 420KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 22KB - Virtual size: 34KB

.rsrc Size: 179KB - Virtual size: 179KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 420KB - Virtual size: 420KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 22KB - Virtual size: 34KB

.rsrc
Size: 179KB - Virtual size: 179KB

.reloc
Size: 33KB - Virtual size: 33KB