8f37126c2aeb160eae109ee9371af841_mafia_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

8f37126c2aeb160eae109ee9371af841_mafia_JC.exe
Size

3.8MB
MD5

8f37126c2aeb160eae109ee9371af841
SHA1

27b0b73093a8be6dd4e14dfecf24b17bb0030979
SHA256

13695895cc67645c4266ee080b8980e1ba142090e303827e9798b7c269ded5f6
SHA512

37776858bd14dfcb7c8e3a97cd6c0a3a1846bb1a0c17772e6f94ab7880f20f0107a84a6fd12fd6d48260ff04e003349205a13f5e2bb17daa43500a1c983e2515
SSDEEP

98304:a8xMpv3AZEJFyoqRZgKeSNRmp9nVnKlrfGcv2IJaLf7sakL7xBG:7mpvAekozS2nVKlrf3v29LY9vH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f37126c2aeb160eae109ee9371af841_mafia_JC.exe

Files

8f37126c2aeb160eae109ee9371af841_mafia_JC.exe
.exe windows x86

72c36fa999a0cb6ab7e7ccf3e8dd87e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlCaptureContext
HeapAlloc
DeleteVolumeMountPointA
SetThreadExecutionState
SetCommBreak
GetTickCount
GlobalAlloc
SizeofResource
GetSystemWindowsDirectoryA
EnumSystemCodePagesA
FindNextVolumeW
GetAtomNameW
lstrlenA
MultiByteToWideChar
DisconnectNamedPipe
FindFirstFileExA
SetVolumeLabelW
LoadLibraryA
ProcessIdToSessionId
IsWow64Process
BuildCommDCBAndTimeoutsW
SetConsoleCtrlHandler
VirtualProtect
CompareStringA
GetCurrentProcessId
WriteConsoleOutputCharacterW
IsBadStringPtrW
IsDBCSLeadByte
SetupComm
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
WideCharToMultiByte
LCMapStringW
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
SetFilePointer
CloseHandle
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
CreateFileA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryW
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleW
CreateFileW

advapi32

EnumServicesStatusA
RegisterEventSourceA
RegQueryValueExW

Exports

Exports

@mctraxer@0
@shutting@0

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zerenad
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pewoxi
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jeg
Size: 1024B - Virtual size: 855B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pep
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hupi
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

72c36fa999a0cb6ab7e7ccf3e8dd87e8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 7KB - Virtual size: 26KB

.zerenad Size: 10KB - Virtual size: 10KB

.pewoxi Size: 1024B - Virtual size: 1024B

.jeg Size: 1024B - Virtual size: 855B

.pep Size: 512B - Virtual size: 346B

.hupi Size: 1024B - Virtual size: 4KB

.rsrc Size: 19KB - Virtual size: 3.2MB

.reloc Size: 17KB - Virtual size: 124KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 7KB - Virtual size: 26KB

.zerenad
Size: 10KB - Virtual size: 10KB

.pewoxi
Size: 1024B - Virtual size: 1024B

.jeg
Size: 1024B - Virtual size: 855B

.pep
Size: 512B - Virtual size: 346B

.hupi
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 19KB - Virtual size: 3.2MB

.reloc
Size: 17KB - Virtual size: 124KB