2023-08-22_79d550c09d4199ed0da37087260e2a58_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-22_79d550c09d4199ed0da37087260e2a58_mafia_JC.exe
Size

8.1MB
MD5

79d550c09d4199ed0da37087260e2a58
SHA1

6a8a66aa37d157c7a50b8dfd0c789f2a918945df
SHA256

1fa8b9909f6bb64530f2b0a9ce0b892b75706a583f9b3f7ab3a63efbde309578
SHA512

ae06fe5e51796893286fe1f686734c743c09f339a0f71a29235091e4fd3e283c5c55b0f83af7782949695ad34b3814d973227b09457252ff37a3b819b14a8f59
SSDEEP

98304:io32cGCocg73yuYUELfDe+kjgbuUi14Lmq52aUBQfz+sK9RNcF7PyxbceoUyHlMu:j5c05NuUi1chU9cqcQyHlMLa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-22_79d550c09d4199ed0da37087260e2a58_mafia_JC.exe

Files

2023-08-22_79d550c09d4199ed0da37087260e2a58_mafia_JC.exe
.exe windows x86

23d2d71733f92d1c38c8176de5daa6ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
DeactivateActCtx
SetLastError
CreateDirectoryW
lstrcpyW
ReleaseMutex
ActivateActCtx
GetLogicalDriveStringsW
TerminateThread
GetExitCodeThread
SetEvent
DeleteFileW
GetVolumeInformationA
GetVolumeInformationW
TerminateProcess
SetFileAttributesW
GetFileAttributesW
CreateMutexW
InterlockedExchange
LoadLibraryExW
GetLocaleInfoW
FreeLibrary
lstrcmpW
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
lstrcmpA
FreeResource
GetPrivateProfileIntW
GetCurrentProcessId
MulDiv
LocalFree
FormatMessageW
GlobalSize
CopyFileW
SetThreadPriority
ResumeThread
WaitForSingleObject
SuspendThread
CreateEventW
GlobalAddAtomW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CompareStringW
GetVersionExW
GlobalFindAtomW
FindClose
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateActCtxW
ReleaseActCtx
GetThreadLocale
lstrcmpiW
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetFullPathNameW
LocalAlloc
GetCurrentDirectoryW
GetSystemDirectoryW
GlobalFlags
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SetErrorMode
GetTempFileNameW
GetTempPathW
GetTickCount
GetWindowsDirectoryW
GetNumberFormatW
GetProfileIntW
SearchPathW
VirtualProtect
GetUserDefaultLCID
FindResourceExW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
HeapAlloc
HeapFree
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
ExitProcess
MoveFileA
GetTimeFormatW
GetDateFormatW
RtlUnwind
RaiseException
HeapReAlloc
ExitThread
CreateThread
SetStdHandle
GetFileType
HeapQueryInformation
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
GetTimeZoneInformation
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
WriteConsoleW
GetDriveTypeW
GetProcessHeap
SetEnvironmentVariableA
FormatMessageA
GetPrivateProfileStringW
WritePrivateProfileStringW
WriteFile
GlobalFree
GlobalUnlock
ReadFile
GlobalLock
GlobalAlloc
GetFileSize
CreateFileW
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleHandleW
GetModuleFileNameW
lstrlenW
InterlockedDecrement
InterlockedIncrement
CloseHandle
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte

user32

DrawStateW
InflateRect
GetMenuItemInfoW
DestroyMenu
SystemParametersInfoW
WindowFromPoint
LoadCursorW
WaitMessage
DeleteMenu
SetRectEmpty
EnumDisplayMonitors
GetSysColorBrush
RealChildWindowFromPoint
CharNextW
OffsetRect
CopyAcceleratorTableW
IsRectEmpty
SetRect
IntersectRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetSystemMenu
NotifyWinEvent
GetAsyncKeyState
IsZoomed
UnionRect
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
DestroyIcon
UnregisterClassW
TranslateAcceleratorW
BringWindowToTop
InsertMenuItemW
LoadAcceleratorsW
LoadImageW
ReuseDDElParam
UnpackDDElParam
SetParent
DestroyAcceleratorTable
SetClassLongW
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
SetCursorPos
LockWindowUpdate
RegisterClipboardFormatW
InvertRect
HideCaret
GetIconInfo
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
FrameRect
CopyIcon
CharUpperBuffW
PostThreadMessageW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
MoveWindow
GetUpdateRect
GetDoubleClickTime
CheckDlgButton
MapVirtualKeyExW
SubtractRect
DestroyCursor
GetWindowRgn
GetWindowDC
ClientToScreen
ScreenToClient
FillRect
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
PostQuitMessage
CharUpperW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
RedrawWindow
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
IsDialogMessageW
IsClipboardFormatAvailable
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
GetMenu
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
IsWindow
EqualRect
CallWindowProcW
AppendMenuW
CreatePopupMenu
ReleaseCapture
SetCapture
GetDlgItem
GetSysColor
ShowScrollBar
GetSubMenu
LoadMenuW
GetCursorPos
DrawIcon
GetSystemMetrics
ShowWindow
IsIconic
SetForegroundWindow
LoadIconW
KillTimer
wsprintfW
SetTimer
GetParent
UnhookWindowsHookEx
CallNextHookEx
GetFocus
MapVirtualKeyW
GetKeyNameTextW
PostMessageW
PtInRect
InvalidateRect
GetWindowRect
SendMessageW
ReleaseDC
SetWindowRgn
GetClientRect
GetDC
SetLayeredWindowAttributes
SetWindowLongW
GetWindowLongW
LoadBitmapW
SetWindowTextW
FindWindowW
EnableWindow
CopyImage
CopyRect
EndPaint
IsCharLowerW
BeginPaint

gdi32

ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
GetDeviceCaps
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetViewportExtEx
OffsetViewportOrgEx
SetPixelV
GetTextFaceW
SetViewportOrgEx
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
SetPaletteEntries
ExtFloodFill
EnumFontFamiliesExW
Rectangle
CreateCompatibleDC
BitBlt
GetObjectW
CreateRoundRectRgn
SelectObject
DeleteDC
GetStockObject
CreateFontW
StretchBlt
CreateCompatibleBitmap
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateRectRgn
SetPixel
SetDIBColorTable
OffsetRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Polygon
Ellipse
Polyline
CreateEllipticRgn
CreatePolygonRgn
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
DeleteObject
SelectPalette
GetObjectType
CreateDIBSection
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
GetRgnBox
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
SetWindowExtEx
GetTextColor
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateDIBitmap
GetTextExtentPoint32W
CreateFontIndirectW
PatBlt
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
CreatePen

shell32

DragQueryFileW
ShellExecuteW
SHGetSpecialFolderPathA
Shell_NotifyIconW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
DragFinish
SHGetDesktopFolder
SHGetMalloc
SHGetFileInfoW
SHBrowseForFolderW

ole32

OleLockRunning
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoRegisterMessageFilter
CoCreateGuid
CLSIDFromProgID
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
CoInitialize
CreateStreamOnHGlobal
OleCreateMenuDescriptor
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString

oleaut32

VariantChangeType
VariantInit
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
OleCreateFontIndirect
SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocString
VarBstrFromDate
SysAllocStringLen
VariantCopy

engine

GetConnectedDeviceCount
IsMounted
QueryDeviceIndexNumber
DeleteDevice
InsertImage
CreateCDRomDevice
RescanBus
InitEngine
EjectImage
GetConnectedDeviceCountFromDeviceMap

imagecreator

GetPhysicalDeviceInformation
EndSafeCreateImage
StartCreateImage
InitImageCreator

wininet

HttpOpenRequestW
InternetCheckConnectionW
InternetCrackUrlW
InternetOpenUrlW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW

msimg32

AlphaBlend
TransparentBlt

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathRemoveFileSpecW

oledlg

OleUIBusyW

gdiplus

GdiplusShutdown
GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageI
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectRect
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdiplusStartup

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

comdlg32

GetFileTitleW

advapi32

RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 306KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CDSpace
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23d2d71733f92d1c38c8176de5daa6ed

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

engine

imagecreator

wininet

msimg32

comctl32

shlwapi

oledlg

gdiplus

iphlpapi

oleacc

imm32

winmm

winspool.drv

comdlg32

advapi32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 306KB - Virtual size: 306KB

.data Size: 36KB - Virtual size: 67KB

.CDSpace Size: 512B - Virtual size: 4B

.rsrc Size: 6.3MB - Virtual size: 6.3MB

.reloc Size: 194KB - Virtual size: 193KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 306KB - Virtual size: 306KB

.data
Size: 36KB - Virtual size: 67KB

.CDSpace
Size: 512B - Virtual size: 4B

.rsrc
Size: 6.3MB - Virtual size: 6.3MB

.reloc
Size: 194KB - Virtual size: 193KB