3b6d9141bbd609aebfc6cf2acdd9fdfe_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3b6d9141bbd609aebfc6cf2acdd9fdfe_mafia_JC.exe
Size

3.3MB
MD5

3b6d9141bbd609aebfc6cf2acdd9fdfe
SHA1

254fdfaec9f06479d0bbb38943bcb88993beaf95
SHA256

d8e3b62119d290a6619580852ad8567fb235ba9742440fb65d263033097f2d62
SHA512

d350c01767e177c68c36c0ed10498558123995b1394c52c9388d136fdbddfacd56b75c40e87d35caedcd751685ff993f924155586583f7551dae7151ecc6abfe
SSDEEP

98304:tSIhwzprqd3D4J5/X2njlgdtw2bXg5EJTqsDmOe9edmtuZQfFd1Nl9VGYwIg4Q:wXL/XwR5udFe9edmtu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6d9141bbd609aebfc6cf2acdd9fdfe_mafia_JC.exe

Files

3b6d9141bbd609aebfc6cf2acdd9fdfe_mafia_JC.exe
.exe windows x86

be9848762e379845259a60486242dc8a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

FindFirstFileW
FindNextFileW
FindClose
HeapAlloc
HeapReAlloc
GlobalAlloc
HeapFree
WideCharToMultiByte
GetFileAttributesA
GetShortPathNameW
GlobalFree
CreateProcessW
GetVersionExW
GetFileAttributesW
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
GetUserDefaultLCID
ResetEvent
MulDiv
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalSize
CopyFileW
GetStringTypeExW
GetThreadLocale
lstrcmpiW
DeleteFileW
MoveFileW
DeactivateActCtx
ActivateActCtx
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetFullPathNameW
GetCurrentProcessId
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
CreateActCtxW
ReleaseActCtx
InterlockedDecrement
InterlockedIncrement
CompareStringW
GlobalGetAtomNameW
GetAtomNameW
lstrcmpA
FileTimeToSystemTime
SystemTimeToFileTime
SetErrorMode
GetFileAttributesExW
SetFileAttributesW
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileSizeEx
GetFileTime
SetThreadPriority
ResumeThread
GetCurrentThreadId
SetEvent
SuspendThread
lstrcmpW
GlobalFlags
GlobalAddAtomW
InitializeCriticalSectionAndSpinCount
GlobalDeleteAtom
GlobalFindAtomW
FreeResource
InterlockedExchange
LoadLibraryExW
GetLocaleInfoW
CompareStringA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetSystemDirectoryW
lstrcpyW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetWindowsDirectoryW
GetNumberFormatW
GetTempFileNameW
GetTempPathW
GetProfileIntW
SearchPathW
VirtualProtect
ReplaceFileW
GetDiskFreeSpaceW
FindResourceExW
LocalUnlock
LocalLock
RtlUnwind
RaiseException
EncodePointer
DecodePointer
GetDriveTypeW
FindFirstFileExW
ExitThread
CreateThread
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapQueryInformation
HeapSize
ExitProcess
GetSystemTimeAsFileTime
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
HeapCreate
HeapDestroy
GetFileInformationByHandle
PeekNamedPipe
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTimeZoneInformation
FatalAppExitA
SetConsoleCtrlHandler
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetFullPathNameA
SetEnvironmentVariableA
CreateEventW
SetLastError
WaitForSingleObject
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryA
GetModuleFileNameW
GetSystemInfo
lstrcpyA
lstrlenA
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleHandleW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetCurrentDirectoryW
MultiByteToWideChar
SetCurrentDirectoryW
GetTickCount
GetVolumeInformationW
lstrlenW
CreateFileW
SetNamedPipeHandleState
WriteFile
ReadFile
Sleep
OpenMutexW
CloseHandle
GetLastError

user32

EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
SetCursor
ShowOwnedPopups
DeleteMenu
InvalidateRect
GetMenuDefaultItem
CreatePopupMenu
IsRectEmpty
MapVirtualKeyW
SetCapture
GetAsyncKeyState
ReleaseCapture
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
MessageBeep
OffsetRect
GetIconInfo
GetNextDlgGroupItem
DrawIconEx
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
WindowFromPoint
GetSystemMenu
DrawStateW
DrawEdge
DrawFrameControl
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
SetRect
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetDialogBaseUnits
GetKeyNameTextW
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
TranslateAcceleratorW
InsertMenuItemW
GetMenuBarInfo
ReuseDDElParam
UnpackDDElParam
PostThreadMessageW
WaitMessage
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
InSendMessage
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
SendNotifyMessageW
FrameRect
GetUpdateRect
RegisterClipboardFormatW
CopyIcon
CharUpperBuffW
GetDoubleClickTime
SubtractRect
EnumChildWindows
MapDialogRect
DrawIcon
DestroyCursor
WindowFromDC
GetWindowRgn
GetDCEx
GetTabbedTextExtentW
IsIconic
LoadIconW
SendDlgItemMessageA
WinHelpW
IsChild
SetLayeredWindowAttributes
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
RedrawWindow
UpdateWindow
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
GetMenu
CopyRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
FillRect
ScrollWindowEx
SetWindowLongW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
GetScrollPos
SetScrollPos
SetFocus
DestroyIcon
GetFocus
GetDesktopWindow
RealChildWindowFromPoint
GetWindow
GetDlgCtrlID
PtInRect
SetWindowTextW
UnregisterClassW
SetWindowsHookExW
CallNextHookEx
GetKeyState
PeekMessageW
ValidateRect
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetDC
ReleaseDC
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
CharUpperW
GetMenuState
GetMenuStringW
AppendMenuW
InsertMenuW
GetMenuItemCount
RemoveMenu
EnumDisplayMonitors
SetRectEmpty
CopyImage
GetMenuItemInfoW
IntersectRect
GetCapture
InflateRect
RegisterWindowMessageW
CreateWindowExW
SystemParametersInfoW
MoveWindow
FindWindowExW
GetMessageW
DispatchMessageW
TranslateMessage
WaitForInputIdle
EnumThreadWindows
PostQuitMessage
GetActiveWindow
RegisterClassExW
GetWindowRect
GetParent
ScreenToClient
CreateDialogParamW
ShowWindow
SetClassLongW
SendDlgItemMessageW
SetDlgItemTextW
DefWindowProcW
ClientToScreen
SetWindowPos
KillTimer
GetSystemMetrics
BeginPaint
GetSysColor
GetClientRect
DrawTextW
EndPaint
IsWindowVisible
DestroyWindow
FindWindowW
LoadStringW
LoadImageW
IsWindow
SendMessageW
GetClassNameW
GetForegroundWindow
SetTimer
LoadMenuW
GetCursorPos
GetSubMenu
SetForegroundWindow
TrackPopupMenu
DestroyMenu
PostMessageW
CheckMenuItem
GetMenuItemID

gdi32

SelectPalette
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
PlayMetaFileRecord
OffsetViewportOrgEx
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
CreatePolygonRgn
CreateRoundRectRgn
GetObjectType
CreateDIBSection
GetCurrentObject
SetViewportExtEx
GetTextColor
ExcludeClipRect
DeleteMetaFile
CloseMetaFile
StretchDIBits
GetTextFaceW
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
RoundRect
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
Rectangle
SetPixel
ExtTextOutW
SetTextColor
SetBkColor
SelectObject
GetStockObject
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
CreateFontW
GetCharWidthW
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBitmap
GetTextExtentPoint32W
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateFontIndirectW
SetMapperFlags
GetLayout
SetLayout
SetArcDirection
SetColorAdjustment
SelectClipRgn
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
DeleteObject
CreateDCW
CopyMetaFileW
CreateMetaFileW
GetDeviceCaps
StretchBlt
GetDIBits
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetObjectW
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
StartDocW
PtVisible
RectVisible
TextOutW
Escape
SetViewportOrgEx
EnumMetaFile

winspool.drv

AddFormW
DeviceCapabilitiesW
DeleteFormW
OpenPrinterW
ClosePrinter
DocumentPropertiesW
GetJobW

advapi32

RegQueryValueW
SetFileSecurityW
RegEnumKeyExW
RegEnumKeyW
RegSetValueW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA
RegQueryInfoKeyW
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegDeleteKeyW
RegEnumValueW
RegCreateKeyW
RegOpenKeyA
GetFileSecurityW
RegCreateKeyA
RegNotifyChangeKeyValue
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExA

shell32

SHGetFileInfoW
ExtractIconW
SHAddToRecentDocs
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHAppBarMessage
ShellExecuteW
Shell_NotifyIconW
ShellExecuteExW

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_DrawEx
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove

shlwapi

PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsUNCW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipFree
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipAlloc

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

oledlg

OleUIBusyW

comdlg32

GetFileTitleW

ole32

OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
OleRegEnumVerbs
OleRegGetMiscStatus
OleRun
WriteClassStg
CoDisconnectObject
CoLockObjectExternal
StgCreateDocfileOnILockBytes
OleQueryCreateFromData
OleQueryLinkFromData
OleIsRunning
GetRunningObjectTable
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
OleDuplicateData
WriteFmtUserTypeStg
SetConvertStg
CoTreatAsClass
StringFromCLSID
PropVariantCopy
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleSetMenuDescriptor
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgIsStorageFile
StgOpenStorage
CreateFileMoniker
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfile
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateGuid
CLSIDFromString
CoCreateInstance
RevokeDragDrop
StringFromGUID2
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
RegisterDragDrop
OleRegGetUserType
OleGetClipboard
CoTaskMemFree

oleaut32

SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantClear
SafeArrayRedim
VariantChangeType
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
SafeArrayCopy
SysAllocString
VariantInit
VarBstrFromDate
SysAllocStringLen
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
SysFreeString

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 583KB - Virtual size: 583KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be9848762e379845259a60486242dc8a

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

msimg32

comctl32

shlwapi

oleacc

gdiplus

imm32

winmm

oledlg

comdlg32

ole32

oleaut32

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 583KB - Virtual size: 583KB

.data Size: 40KB - Virtual size: 73KB

.idata Size: 24KB - Virtual size: 24KB

.rsrc Size: 11KB - Virtual size: 11KB

.reloc Size: 188KB - Virtual size: 187KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 583KB - Virtual size: 583KB

.data
Size: 40KB - Virtual size: 73KB

.idata
Size: 24KB - Virtual size: 24KB

.rsrc
Size: 11KB - Virtual size: 11KB

.reloc
Size: 188KB - Virtual size: 187KB