d3af59a68917649050486e99d479f2d5_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d3af59a68917649050486e99d479f2d5_mafia_JC.exe
Size

1.2MB
MD5

d3af59a68917649050486e99d479f2d5
SHA1

9aed45f150d295f0f63cddfc8a821ad737c93652
SHA256

891f8c9f81537517e7ca475a825ee9de3763dba0bacbc6448a21c055560e3cb2
SHA512

903152c4913c7487bc7615ab74fc1a49bdd0d829375a413b30161b601aa3b7c0aabd3d573b468b857fd01964375c6f0c6876216caf1f25083b13a257def5393f
SSDEEP

24576:EN5as6MKOp0WO4/LFnkIyB8EkXKRaXitcoT+0d4R4erN5V:K5as6MPOsLFLKRaXio0d4hh5V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3af59a68917649050486e99d479f2d5_mafia_JC.exe

Files

d3af59a68917649050486e99d479f2d5_mafia_JC.exe
.exe windows x86

74c9602cc864fbd21aa83356a4c9c94e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateDirectoryW
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetCurrentDirectoryW
FindClose
GetModuleFileNameA
FindNextFileA
GetModuleHandleA
GetCurrentDirectoryA
CloseHandle
GetModuleHandleW
FindFirstFileW
SetCurrentDirectoryW
FindNextFileW
SetFilePointer
OutputDebugStringA
ReadFile
GetProcessHeap
SetEndOfFile
WriteConsoleW
SetStdHandle
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
WaitForSingleObject
GetExitCodeProcess
CreatePipe
GetFileAttributesA
LCMapStringW
LoadLibraryW
CompareStringW
MultiByteToWideChar
GetTimeZoneInformation
SetEnvironmentVariableA
WriteFile
GetFileSize
OpenMutexA
CreateMutexA
ReleaseMutex
Sleep
GetCurrentProcessId
CreateFileW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateEventA
FreeLibrary
FormatMessageA
GetLastError
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
ExitProcess
CreateProcessA
DuplicateHandle
GetCurrentProcess
MoveFileA
DeleteFileA
GetTimeFormatA
GetDateFormatA
InterlockedDecrement
InterlockedIncrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapCreate
GetStdHandle
GetModuleFileNameW
RaiseException
HeapSize
GetLocaleInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
IsProcessorFeaturePresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount

user32

GetDesktopWindow
MessageBoxW
GetClassInfoExW
GetForegroundWindow
GetActiveWindow
MessageBoxA
LoadCursorA
TranslateMessage
ShowCursor
PeekMessageA
DispatchMessageA
SetFocus
LoadIconW
SetClassLongW
SetWindowTextW
PostQuitMessage
PostMessageA
ReleaseCapture
GetCursorPos
SetCursorPos
SetCapture
ScreenToClient
ClientToScreen
GetKeyState
MsgWaitForMultipleObjects
DestroyCursor
SetCursor
GetSystemMetrics
SystemParametersInfoA
MoveWindow
SendMessageW
CreateWindowExW
ShowWindow
SetWindowLongW
GetClientRect
GetWindowRect
DestroyWindow
DefWindowProcW
DefWindowProcA
GetWindowLongA
RegisterClassExW

shell32

SHGetFolderPathW
SHGetFolderPathA

ole32

CoInitialize
CoUninitialize

winmm

timeBeginPeriod
timeGetTime
timeEndPeriod

dsound

ord1

Sections

.text
Size: 782KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74c9602cc864fbd21aa83356a4c9c94e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

winmm

dsound

Sections

.text Size: 782KB - Virtual size: 782KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 75KB - Virtual size: 342KB

.rsrc Size: 87KB - Virtual size: 86KB

.reloc Size: 38KB - Virtual size: 38KB

.text
Size: 782KB - Virtual size: 782KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 75KB - Virtual size: 342KB

.rsrc
Size: 87KB - Virtual size: 86KB

.reloc
Size: 38KB - Virtual size: 38KB