6cb98faf8b9b5c587a3f0b9646ab4a2e_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6cb98faf8b9b5c587a3f0b9646ab4a2e_mafia_JC.exe
Size

676KB
MD5

6cb98faf8b9b5c587a3f0b9646ab4a2e
SHA1

8d7d6fcb8228935cb01a3f910ae18e41db5693e7
SHA256

fc28d1aad875dab88a18b5f80f85189de55a73f40602dfee10b338e2d021a6b0
SHA512

1e73680bf5de25429f3d365650134b4d5e1cd022ef0fc94e71405dcc1c5512f9b11fe95d0ebb225e1bfb5124f879d03eabffd5af400422ae83ca411f193e7751
SSDEEP

12288:0JUcgGlXl/ZyrHaePn+RTzaNEPqAF4BH9NyuuVneGqqqbpqkdqqqqqEqqqqqqq5q:EgGlV/5oNEPqNBH9NicZRtnY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cb98faf8b9b5c587a3f0b9646ab4a2e_mafia_JC.exe

Files

6cb98faf8b9b5c587a3f0b9646ab4a2e_mafia_JC.exe
.exe windows x86

79d083ae62cc6ccdf5c7981b201596ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateSolidBrush
GetStockObject
SetTextColor
SetBkColor
SetBkMode
CreateCompatibleDC
SelectObject
GetObjectA
BitBlt
DeleteDC
SetMapMode
SetWindowExtEx
SetViewportExtEx
SetWindowOrgEx
SetViewportOrgEx
CreateRectRgnIndirect
DeleteObject

advapi32

RegOpenKeyExW
RegFlushKey
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExW

user32

CallWindowProcA
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetFocus
GetWindowRect
MapWindowPoints
SetWindowPos
GetActiveWindow
MessageBoxA
GetMessageA
TranslateMessage
DispatchMessageA
WinHelpA
SetWindowLongA
GetWindowLongA
WaitForInputIdle
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBeep
MessageBoxW
TileWindows
SendInput
VkKeyScanA
EnumWindows
GetDesktopWindow
GetForegroundWindow
FindWindowA
GetWindowThreadProcessId
SetForegroundWindow
GetClassNameA
GetWindowModuleFileNameW
GetParent
EnumChildWindows
PostMessageA
SendMessageA
MoveWindow
DestroyWindow
ShowWindowAsync
SetWindowTextW
GetWindowTextW
DefWindowProcA
RegisterClassA
CreateWindowExA
IsWindowVisible
ShowWindow
GetClientRect

shell32

ShellExecuteW

oleaut32

DispGetIDsOfNames
SafeArrayCreate
SysFreeString
GetActiveObject
LoadTypeLibEx
UnRegisterTypeLi
LoadRegTypeLi
LHashValOfNameSys
VariantClear
VariantInit
SysStringLen
VariantTimeToSystemTime
VariantChangeType
VariantCopyInd
SystemTimeToVariantTime
VariantCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetDim
SysAllocStringLen
SafeArrayDestroy

psapi

GetModuleFileNameExW
EnumProcessModules
EnumProcesses
GetModuleBaseNameW

shlwapi

SHDeleteKeyA

ole32

StringFromCLSID
CLSIDFromProgID
ProgIDFromCLSID
CLSIDFromString
CoCreateInstance
MkParseDisplayName
CreateBindCtx
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemFree
StringFromIID
CoLockObjectExternal
CoTaskMemAlloc
OleRegGetUserType
CreateOleAdviseHolder
OleInitialize

mpr

WNetGetConnectionW

kernel32

SetEnvironmentVariableA
GetProcessHeap
SetEndOfFile
GetDriveTypeW
WriteConsoleW
SetStdHandle
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
CompareStringW
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
SetFilePointer
LoadLibraryW
InterlockedExchange
GetFileAttributesA
LCMapStringW
PeekNamedPipe
GetFileInformationByHandle
GetFileType
SetHandleCount
DeleteCriticalSection
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetLocaleInfoW
IsProcessorFeaturePresent
GetModuleFileNameW
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCurrentThreadId
ExitThread
InterlockedDecrement
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
DuplicateHandle
ExitProcess
GetModuleHandleW
RemoveDirectoryA
CreateDirectoryA
FindNextFileA
GetCurrentDirectoryW
HeapReAlloc
FindFirstFileExA
FindClose
EncodePointer
DecodePointer
HeapAlloc
HeapFree
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCommandLineA
CreateProcessA
DeleteFileA
FreeLibrary
GetModuleHandleA
ReadDirectoryChangesW
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDriveStringsW
CreateFileW
GetShortPathNameW
CreateNamedPipeA
ConnectNamedPipe
SetHandleInformation
CreateProcessW
SetEnvironmentVariableW
ReadFile
WriteFile
CreateThread
GetThreadPriority
SetThreadPriority
TerminateThread
ResumeThread
SuspendThread
GetModuleFileNameA
GetCurrentDirectoryA
InterlockedIncrement
DebugBreak
FatalAppExitA
lstrcpyW
lstrlenW
IsBadWritePtr
InitializeCriticalSection
LocalFree
FormatMessageA
GetLastError
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
GetFullPathNameA
GetLogicalDrives
GetSystemInfo
ExpandEnvironmentStringsA
GetProcAddress
LoadLibraryA
Sleep
CopyFileA
OutputDebugStringA
MoveFileA
GlobalUnlock
GlobalLock
GlobalAlloc
GetStdHandle
CreatePipe
SetCommState
CloseHandle
BuildCommDCBA
GetCommState
CreateFileA
WaitForSingleObject
SetEvent
ReleaseMutex
CreateEventA
CreateMutexA
OpenProcess
TerminateProcess
GetProcessWorkingSetSize
FileTimeToSystemTime
FileTimeToLocalFileTime
GetProcessTimes
GetExitCodeProcess
GetCurrentProcessId
GetCurrentProcess
WaitForMultipleObjects

Sections

.text
Size: 446KB - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79d083ae62cc6ccdf5c7981b201596ce

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

advapi32

user32

shell32

oleaut32

psapi

shlwapi

ole32

mpr

kernel32

Sections

.text Size: 446KB - Virtual size: 446KB

.rdata Size: 117KB - Virtual size: 116KB

.data Size: 24KB - Virtual size: 39KB

.rsrc Size: 62KB - Virtual size: 62KB

.reloc Size: 25KB - Virtual size: 24KB

.text
Size: 446KB - Virtual size: 446KB

.rdata
Size: 117KB - Virtual size: 116KB

.data
Size: 24KB - Virtual size: 39KB

.rsrc
Size: 62KB - Virtual size: 62KB

.reloc
Size: 25KB - Virtual size: 24KB