dc7f7c0c6b66527911c6cf52318d8d67_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

dc7f7c0c6b66527911c6cf52318d8d67_mafia_JC.exe
Size

4.2MB
MD5

dc7f7c0c6b66527911c6cf52318d8d67
SHA1

0578e42d2fe0d85ebe005f98b54693105cffa749
SHA256

32ba219c4dbda90b33ae96549171ce861bf4d77ff76e07b621e5f4cbbf34778b
SHA512

41d70d35c025cdc672130a4dfb1528455fd2104e2657250ecd3b0acfa97f028847bf136b143cd4bd5f5c1a53e80ccb63edad5a1143431acf2e92fdd555c4b244
SSDEEP

98304:Jcu/7nKC96SOzLJUf7XtOKiEB3CVDxmbpaBH/5EcBt2qMCviXUPLfOyOUZT:Jnt/LsOyEt8H/5E3YiXUPLfOyOUZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc7f7c0c6b66527911c6cf52318d8d67_mafia_JC.exe

Files

dc7f7c0c6b66527911c6cf52318d8d67_mafia_JC.exe
.exe windows x86

3be4edc7bd35d47972f1f78837017e85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PeekNamedPipe
SetConsoleMode
ReadConsoleInputA
FindFirstFileExA
GetDateFormatA
GetTimeFormatA
FindFirstFileExW
FlushConsoleInputBuffer
CreateFileA
GetVersion
CreateDirectoryW
GetFileInformationByHandle
OpenEventA
InterlockedCompareExchange
GetFullPathNameA
ResetEvent
GlobalMemoryStatus
LoadLibraryA
GetSystemTime
QueryPerformanceFrequency
FindNextFileW
OpenThread
GetProcessHeap
WaitForMultipleObjects
OpenProcess
FormatMessageA
GetVersionExA
GetModuleHandleA
IsWow64Process
CreateProcessW
SetEnvironmentVariableA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
WriteConsoleW
LCMapStringW
GetStringTypeW
SetConsoleCtrlHandler
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
HeapReAlloc
RaiseException
CreateThread
ExitThread
ExitProcess
RtlUnwind
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
GetUserDefaultLCID
SearchPathW
Sleep
GetNumberFormatW
GetWindowsDirectoryW
GetTickCount
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
SetFileAttributesW
GetFileAttributesExW
GetTempPathW
GetTempFileNameW
SetErrorMode
FileTimeToSystemTime
GlobalGetAtomNameW
lstrlenA
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
lstrcmpiW
GetThreadLocale
DeleteFileW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
lstrcpyW
GetSystemDirectoryW
GetCurrentDirectoryW
GlobalFlags
InitializeCriticalSection
GetProfileIntW
CopyFileW
GlobalSize
FormatMessageW
LocalFree
GlobalFindAtomW
GetVersionExW
CompareStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GlobalUnlock
CreateEventW
SuspendThread
ResumeThread
SetThreadPriority
FreeResource
GlobalFree
GlobalAddAtomW
GetCurrentProcessId
GetPrivateProfileStringW
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
GetModuleFileNameW
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
ActivateActCtx
DeactivateActCtx
SetLastError
GlobalLock
lstrcmpW
GlobalAlloc
LoadLibraryW
GetModuleHandleW
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
GetProcAddress
MulDiv
FreeLibrary
GetCurrentThreadId
WideCharToMultiByte
LockResource
GetSystemTimeAsFileTime
WaitForSingleObject
ReleaseSemaphore
SizeofResource
LoadResource
FindResourceW
MultiByteToWideChar
CloseHandle
GetLastError
SetEvent
CreateSemaphoreA
CreateEventA
GetDriveTypeW
GetDriveTypeA

user32

SetCapture
GetDCEx
SetRectEmpty
SetRect
IntersectRect
MapVirtualKeyW
GetKeyNameTextW
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
NotifyWinEvent
GetAsyncKeyState
SetClassLongW
DeferWindowPos
GetScrollInfo
ReleaseCapture
GetDesktopWindow
EnableWindow
SendMessageW
MessageBoxA
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
SetWindowRgn
GetSystemMenu
GetScrollPos
SetScrollPos
SetFocus
UnhookWindowsHookEx
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
EndDialog
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
RealChildWindowFromPoint
GetSysColorBrush
DeleteMenu
SystemParametersInfoW
EnumDisplayMonitors
SetLayeredWindowAttributes
SetTimer
KillTimer
WaitMessage
CharUpperW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetMenuState
EnableMenuItem
CheckMenuItem
SetActiveWindow
UpdateWindow
DrawTextW
TabbedTextOutW
DrawTextExW
GrayStringW
LoadCursorW
SetForegroundWindow
PtInRect
UnregisterClassW
IsClipboardFormatAvailable
GetMenuItemInfoW
CopyImage
MessageBoxW
IsZoomed
GetProcessWindowStation
GetUserObjectInformationW
GetSystemMetrics
LoadIconW
GetClientRect
DrawIcon
IsIconic
GetWindowRect
RedrawWindow
CopyRect
DestroyIcon
DestroyMenu
GetActiveWindow
FrameRect
GetSysColor
DestroyCursor
DrawStateW
ReleaseDC
GetWindowLongW
LoadMenuW
InvalidateRect
TrackPopupMenuEx
OffsetRect
InflateRect
DrawFocusRect
GetDC
GetIconInfo
CreateIconIndirect
WindowFromPoint
GetParent
DrawIconEx
DrawEdge
DrawFrameControl
SetParent
DestroyAcceleratorTable
GetWindowTextLengthW
CreatePopupMenu
GetSubMenu
PostMessageW
LoadImageW
FillRect
SetCursor
ClientToScreen
GetNextDlgTabItem
GetCursorPos
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
SetCursorPos
BringWindowToTop
LockWindowUpdate
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatW
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageW
SetMenuDefaultItem
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
CopyIcon
CharUpperBuffW
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetWindowRgn
GetWindowTextW

gdi32

OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CopyMetaFileW
CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
Rectangle
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
CreateDIBSection
CreateRoundRectRgn
SetWindowOrgEx
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
EnumFontFamiliesExW
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
SetViewportExtEx
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SetPixelV
SetLayout
ScaleViewportExtEx
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32W
GetTextMetricsW
GetDeviceCaps
StretchBlt
LPtoDP
DPtoLP
GetMapMode
ExtTextOutW
PtVisible
GetBkColor
Escape
RectVisible
TextOutW
CreateFontIndirectW
BitBlt
SetTextColor
DeleteDC
SetBkColor
SetPixel
CreateBitmap
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
FillRgn
GetPixel
CreatePolygonRgn
CreateDCW
GetObjectW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegisterEventSourceA
DeregisterEventSource
GetLengthSid
LookupAccountSidW
CopySid
GetTokenInformation
GetUserNameW
OpenProcessToken
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ReportEventA

shell32

SHAppBarMessage
ShellExecuteExW
DragAcceptFiles
DragQueryFileW
DragFinish
SHGetSpecialFolderPathW
SHBrowseForFolderW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetFileInfoW

comctl32

ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW

ole32

OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleUninitialize
CoInitializeEx
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData

oleaut32

SysFreeString
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SysAllocString
SysStringLen
SysAllocStringLen
VariantClear
VariantInit
VariantChangeType
OleCreateFontIndirect
SafeArrayDestroy

oledlg

OleUIBusyW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipCreateBitmapFromScan0
GdipAlloc
GdipCreateBitmapFromStream
GdipFree
GdipBitmapLockBits
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDisposeImage
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

wtsapi32

WTSFreeMemory
WTSEnumerateProcessesW

ws2_32

WSASetLastError
shutdown
ioctlsocket
inet_addr
select
WSAGetLastError
connect
WSAStartup
htons
WSACleanup
recv
socket
closesocket
gethostbyname
send
getsockopt

psapi

GetModuleBaseNameW
EnumProcesses

wininet

InternetCloseHandle
InternetOpenA
InternetQueryOptionA
InternetErrorDlg
HttpOpenRequestA
InternetSetOptionA
InternetReadFile
InternetConnectA
HttpQueryInfoA
HttpSendRequestA

Exports

Exports

ak_acceptEULA
ak_cleanAttributes
ak_cleanFileAttributes
ak_deleteFile
ak_downloadFile
ak_errorToString
ak_fileStatusToString
ak_getAttributes
ak_getFileAttributes
ak_getLastError
ak_initialize
ak_install
ak_pauseFile
ak_setFileAttributeInt
ak_uninitialize

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3be4edc7bd35d47972f1f78837017e85

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

wtsapi32

ws2_32

psapi

wininet

Exports

Exports

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 105KB - Virtual size: 379KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 92KB - Virtual size: 92KB

.reloc Size: 339KB - Virtual size: 338KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 105KB - Virtual size: 379KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 92KB - Virtual size: 92KB

.reloc
Size: 339KB - Virtual size: 338KB