67803e528eb16da8ef09a56feb0e860f_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

67803e528eb16da8ef09a56feb0e860f_mafia_JC.exe
Size

11.6MB
MD5

67803e528eb16da8ef09a56feb0e860f
SHA1

4e27a6624b5093e5b5227dc539b4409ce0671ceb
SHA256

ce30263222dcaeef9dffc9fea056e136103d2ab06058589ee78ed1210f8a0f9a
SHA512

a83065fd7bd14a236fe8726f2fec5fbe238c921f4a5e8f387e52358322ca489ae5e4538a06a7eea7eed04cbb9ad500aae5c2eaac23579b6077d302ae4ad28ba0
SSDEEP

196608:YPgKp2o2KYCl7r9Z5XEJGpTl6yZlunp/JPFZHGUoxH7lFERAwtQnz:YPLp2M1vc4pTI60nr9ZHhoxblFERAwCz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67803e528eb16da8ef09a56feb0e860f_mafia_JC.exe

Files

67803e528eb16da8ef09a56feb0e860f_mafia_JC.exe
.exe windows x86

b3c3daa6f71b957ae92efd846548cce0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
FindFirstFileW
SetFilePointer
EndUpdateResourceW
CreateDirectoryW
WriteFile
ReadFile
GetModuleFileNameW
CreateFileW
GetTempPathW
BeginUpdateResourceW
FindClose
UpdateResourceW
CloseHandle
DeleteFileW
LocalFree
WriteConsoleW
SetStdHandle
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
GetLastError
HeapFree
HeapAlloc
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
HeapCreate
ExitProcess
GetStdHandle
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
Sleep
LoadLibraryW
GetConsoleCP
GetConsoleMode
RtlUnwind
FlushFileBuffers

shell32

CommandLineToArgvW
ShellExecuteW

version

GetFileVersionInfoW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3c3daa6f71b957ae92efd846548cce0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

version

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 173KB - Virtual size: 173KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 173KB - Virtual size: 173KB

.reloc
Size: 4KB - Virtual size: 3KB