511e93bd93f32a0915b5a89a404a7dac_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

511e93bd93f32a0915b5a89a404a7dac_mafia_JC.exe
Size

1.7MB
MD5

511e93bd93f32a0915b5a89a404a7dac
SHA1

8d1e774a689bd2753c1d32ac8460ba010b5b0ca0
SHA256

e34638340666947dc1d89dbd8f87264d88706f8e1f2c6e260564da096d5e880a
SHA512

ea24f4c98a57ba75830ef61fb35345b924ecac84f9c18cde47bfe1f9c0616bedda4b42ad3512af71f12ec79f38b0aa2a1f0124c3457762eb1afbcd5302728894
SSDEEP

49152:9zXXOvL9pmcCBdCXwbVC5vyv/Lv/6DvydatM4sZVHB/fz/bTx:gvL9pmcCkwbVC5vy7v/6DvydatM40/fD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
511e93bd93f32a0915b5a89a404a7dac_mafia_JC.exe

Files

511e93bd93f32a0915b5a89a404a7dac_mafia_JC.exe
.exe windows x86

6cb7bdb3bfd18b018446342aa5e15aae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerQueryValueA

kernel32

CreateActCtxW
GetCurrentProcessId
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
MulDiv
GetThreadLocale
ReleaseActCtx
FreeResource
GetCurrentThreadId
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
ActivateActCtx
DeactivateActCtx
SetLastError
lstrcmpW
GetModuleFileNameW
lstrcmpA
FindResourceA
GetModuleHandleW
SetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
GlobalGetAtomNameA
CreateEventA
LocalFree
InterlockedExchange
WaitForSingleObject
ResetEvent
CloseHandle
TerminateProcess
OpenProcess
InterlockedDecrement
MapViewOfFile
OpenFileMappingA
GetFileAttributesA
MultiByteToWideChar
FormatMessageA
GetLastError
FreeLibrary
GetPrivateProfileIntA
GetSystemDirectoryA
lstrlenA
GetProcAddress
GetModuleFileNameA
GetEnvironmentVariableA
LoadLibraryA
MoveFileExA
GetWindowsDirectoryA
InterlockedIncrement
GetCurrentProcess
WinExec
GetModuleHandleA
K32GetModuleFileNameExA
K32EnumProcessModules
ExpandEnvironmentStringsA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
SetThreadPriority
ResumeThread
WritePrivateProfileStringA
GetPrivateProfileStringA
GetStringTypeExA
lstrcmpiA
CreateFileA
MoveFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
DeleteFileA
UnmapViewOfFile
GetShortPathNameA
SystemTimeToFileTime
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetACP
FileTimeToSystemTime
lstrcpyA
GetFileAttributesExA
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSizeEx
GetCurrentDirectoryA
SetErrorMode
GetNumberFormatA
GetTickCount
GetTempPathA
InitializeCriticalSectionAndSpinCount
Sleep
VirtualProtect
GetProfileIntA
SearchPathA
FindResourceExW
RtlUnwind
EncodePointer
DecodePointer
RaiseException
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
SetStdHandle
GetFileType
ExitThread
CreateThread
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
LCMapStringW
IsProcessorFeaturePresent
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
GetStringTypeW
GetConsoleCP
GetConsoleMode
CompareStringW
GetTimeZoneInformation
WriteConsoleW
CreateFileW

user32

GetClientRect
UpdateWindow
IsIconic
InvalidateRect
IsCharLowerA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
EnableWindow
DestroyAcceleratorTable
SetClassLongA
IsMenu
UpdateLayeredWindow
MapVirtualKeyExA
PostThreadMessageA
WaitMessage
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
SubtractRect
FrameRect
DestroyCursor
CreateMenu
MonitorFromPoint
DrawFrameControl
DrawEdge
DrawStateA
RegisterClipboardFormatA
DrawIconEx
CopyImage
GetIconInfo
NotifyWinEvent
EnableScrollBar
GetWindowRgn
SetCursorPos
SendMessageA
RegisterWindowMessageA
SetWindowPos
MessageBoxA
WaitForInputIdle
FindWindowExA
CallWindowProcA
SetWindowLongA
KillTimer
GetWindow
GetWindowThreadProcessId
GetWindowLongA
IsWindow
SetTimer
GetMenu
DefWindowProcA
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
PtInRect
CopyRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
GetWindowRect
GetParent
AdjustWindowRectEx
GetSysColor
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
GetMenuItemCount
GetMenuItemID
GetSubMenu
PostMessageA
IsWindowVisible
ShowScrollBar
SetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
SetMenu
GetKeyState
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoA
MonitorFromWindow
PeekMessageA
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageA
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
GetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
MessageBeep
GetNextDlgGroupItem
LockWindowUpdate
GetDCEx
WindowFromPoint
UnregisterClassA
UnionRect
SetLayeredWindowAttributes
EnumDisplayMonitors
MapVirtualKeyA
GetKeyNameTextA
IsZoomed
InvalidateRgn
SetRect
CopyAcceleratorTableA
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RealChildWindowFromPoint
GetMenuItemInfoA
InflateRect
LoadCursorW
SetCapture
ClientToScreen
SetWindowRgn
DrawIcon
FillRect
SystemParametersInfoA
SetWindowContextHelpId
MapDialogRect
LoadMenuW
IsChild
WinHelpA
LoadAcceleratorsW
CharUpperA
ShowOwnedPopups
GetMessageA
SendDlgItemMessageA
LoadIconA
LoadIconW
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
CharNextA
OffsetRect
RemoveMenu
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
InsertMenuA
AppendMenuA
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
GetDC
GetSystemMetrics
ReleaseDC
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadImageA
DestroyIcon
SetCursor
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
IntersectRect
SetRectEmpty
GetDesktopWindow
RedrawWindow
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
GetActiveWindow
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetMenuStringA

gdi32

GetMapMode
CombineRgn
SetRectRgn
GetTextCharsetInfo
EnumFontFamiliesA
GetTextMetricsA
CreateDIBitmap
PatBlt
GetRgnBox
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
CreatePalette
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32A
ExtTextOutA
CreateDIBSection
BitBlt
Ellipse
LPtoDP
DPtoLP
CreateEllipticRgn
CreateFontIndirectA
StretchDIBits
DeleteDC
CreateFontA
SelectObject
GetCharWidthA
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateDCA
CopyMetaFileA
GetTextColor
GetBkColor
GetDeviceCaps
GetStockObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetTextFaceA
SetPixelV
GetNearestPaletteIndex
GetPaletteEntries
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
Polyline
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExA
GetWindowOrgEx
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
MoveToEx
CreateRoundRectRgn

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
SetFileSecurityA
RegOpenKeyExW
RegQueryValueA

shell32

ShellExecuteA
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoInitializeEx
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateStreamOnHGlobal
CoUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
CoInitialize

oleaut32

SysAllocStringLen
OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
VariantChangeType
VariantCopy
VarBstrFromDate
VariantClear
VariantInit
SysFreeString

oledlg

ord8

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipDrawImageI
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipBitmapUnlockBits

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cb7bdb3bfd18b018446342aa5e15aae

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 286KB - Virtual size: 285KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 24KB - Virtual size: 24KB

.reloc Size: 168KB - Virtual size: 168KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 286KB - Virtual size: 285KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 24KB - Virtual size: 24KB

.reloc
Size: 168KB - Virtual size: 168KB