2023-08-22_ac83291773e44290b67ef5fa8093e935_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-22_ac83291773e44290b67ef5fa8093e935_mafia_JC.exe
Size

6.2MB
MD5

ac83291773e44290b67ef5fa8093e935
SHA1

c4d976d9d5518ec8219c2fea202c0bed79bc5c91
SHA256

6da4a248ef5f7c62eedfbda14382b3d5455bb4cdf7e236c542c111b93a4ed3af
SHA512

e33ccf75aae3f746d42e1305308b915fec18eb3c4d4123b7496f22d96a45b61d95067254d519432a2a1361b25f94cdc353849a9a49b524f1ec343cb3e0dfc19b
SSDEEP

98304:2AvtHyDSN5Meod2pbFR1PdQYCOUqxtBSGph6odOod:2A46hJZbZCDiHf6H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-22_ac83291773e44290b67ef5fa8093e935_mafia_JC.exe

Files

2023-08-22_ac83291773e44290b67ef5fa8093e935_mafia_JC.exe
.exe windows x86

a8f2d984ef19904008cf518a1c879888

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imagehlp

ImageLoad
ImageUnload

ws2_32

connect
WSAStartup
inet_addr
htonl
WSAGetLastError
htons
setsockopt
gethostname
recv
socket
closesocket
gethostbyname
send
WSACleanup

shlwapi

PathFileExistsW

psapi

GetProcessImageFileNameW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

HeapReAlloc
RtlUnwind
GetStartupInfoA
GetDateFormatA
GetTimeFormatA
ExitThread
MoveFileA
GetDriveTypeA
GetModuleFileNameW
VirtualQuery
VirtualAlloc
VirtualProtect
GetModuleHandleW
GetSystemTimeAsFileTime
SetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapSize
GetCommandLineA
SetErrorMode
ExpandEnvironmentStringsA
CreateThread
CopyFileA
GetWindowsDirectoryA
TerminateProcess
SetEnvironmentVariableA
IsValidCodePage
GetCPInfo
LocalAlloc
GlobalFree
GetEnvironmentVariableA
GetThreadLocale
GetTimeZoneInformation
GetLocaleInfoA
IsValidLocale
GetUserDefaultLCID
GetACP
GetTempFileNameA
FindFirstFileA
FindClose
LocalFree
GetVersionExA
ExitProcess
GetExitCodeThread
ResumeThread
TerminateThread
SetThreadPriority
GetSystemInfo
GetUserDefaultUILanguage
LocalFileTimeToFileTime
GetCurrentDirectoryA
ReadFile
GetFileAttributesA
SetFilePointer
SystemTimeToFileTime
LockResource
FreeResource
OutputDebugStringA
GetFileType
WriteConsoleA
GetConsoleMode
WriteFile
InterlockedExchange
ResetEvent
InterlockedCompareExchange
GetCurrentProcessId
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
SetEvent
WaitForSingleObject
HeapAlloc
CreateEventA
CreateFileA
WaitForMultipleObjects
DeviceIoControl
GetProcessHeap
HeapFree
LoadLibraryExA
GetModuleHandleA
lstrcmpiA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
GetTempPathA
CreateDirectoryA
FormatMessageA
FreeLibrary
LoadLibraryA
SetLastError
RaiseException
FlushInstructionCache
GlobalUnlock
lstrlenW
MultiByteToWideChar
MulDiv
GlobalAlloc
GlobalLock
lstrlenA
lstrcmpA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
WideCharToMultiByte
Sleep
OpenProcess
GetCurrentThreadId
DeleteFileA
CloseHandle
GetModuleFileNameA
GetProcAddress
GetLastError
GetStdHandle
SetCurrentDirectoryA
CreateProcessA
CreateSemaphoreA
LoadLibraryW
GetCurrentProcess
SetDllDirectoryW
AllocConsole
GetFullPathNameA
GetConsoleCP
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeW
SetHandleCount
GetOEMCP
HeapCreate
VirtualFree
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
CreateFileW
EnumSystemLocalesA
GetStringTypeA
GetConsoleOutputCP
GetLocaleInfoW
CompareStringA
CompareStringW
SetEndOfFile
WriteConsoleW

user32

SetMenuItemInfoA
UnionRect
ModifyMenuA
CheckMenuRadioItem
CheckMenuItem
GetMenuState
HideCaret
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
DrawFocusRect
DrawTextA
GetMessagePos
MapWindowPoints
DestroyCursor
TranslateAcceleratorA
ValidateRect
GetMessageA
GetWindowDC
DrawIconEx
DrawFrameControl
CreateIconIndirect
GetUpdateRect
DrawIcon
SetMenu
LoadImageA
GetIconInfo
LoadBitmapA
LoadIconA
CreateDialogParamA
InflateRect
GetUpdateRgn
IsDialogMessageA
TrackPopupMenu
PtInRect
GetCapture
UnregisterHotKey
RegisterHotKey
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetMenuItemCount
GetMenuItemInfoA
GetMessageTime
BeginDeferWindowPos
EndDeferWindowPos
IsWindowEnabled
DeferWindowPos
UpdateWindow
SetParent
GetCursorPos
ScrollWindow
SetScrollInfo
GetScrollInfo
SetCursorPos
EnableWindow
GetAsyncKeyState
VkKeyScanA
DispatchMessageA
TranslateMessage
PostQuitMessage
CreatePopupMenu
FlashWindow
SetWindowRgn
GetMenu
AdjustWindowRectEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
IsZoomed
ShowWindow
KillTimer
DdePostAdvise
DdeConnect
DdeNameService
DdeCreateStringHandleA
DdeClientTransaction
DdeDisconnect
DdeInitializeA
DdeGetLastError
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DdeUninitialize
DdeQueryStringA
DdeFreeStringHandle
RegisterClassA
MessageBeep
SetCursor
PeekMessageA
MessageBoxA
MsgWaitForMultipleObjects
PostThreadMessageA
EnumDesktopWindows
GetWindowRect
LockWorkStation
OpenDesktopA
GetKeyState
WindowFromPoint
CloseDesktop
wsprintfW
ShowCursor
BringWindowToTop
SystemParametersInfoA
GetSystemMetrics
SwitchToThisWindow
FindWindowA
EndPaint
ClientToScreen
DestroyWindow
GetClassNameA
DestroyAcceleratorTable
ScreenToClient
RegisterClassExA
FillRect
IsChild
GetClassInfoExA
SetCapture
GetParent
InvalidateRgn
CharNextA
GetClientRect
GetWindowTextLengthA
RegisterWindowMessageA
DestroyMenu
RemoveMenu
InsertMenuA
AppendMenuA
CreateMenu
GetSubMenu
InsertMenuItemA
CopyRect
OffsetRect
ChildWindowFromPoint
DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
GetMenuStringA
ChangeDisplaySettingsA
CreateDialogIndirectParamA
GetWindowThreadProcessId
FindWindowExW
SetFocus
AttachThreadInput
SetForegroundWindow
IsWindowVisible
PostMessageA
IsWindow
GetActiveWindow
GetClassNameW
GetWindowTextW
GetWindowPlacement
GetForegroundWindow
EnumWindows
SendMessageA
GetFocus
ShowWindowAsync
SendInput
SetActiveWindow
keybd_event
SetTimer
SetClipboardData
RegisterClipboardFormatA
DrawStateA
DrawEdge
EnumDisplaySettingsA
DestroyIcon
BeginPaint
GetDC
IsIconic
GetDesktopWindow
MoveWindow
GetWindow
LoadCursorA
CallWindowProcA
SetWindowTextA
ReleaseCapture
SetWindowPos
GetSysColor
RedrawWindow
DefWindowProcA
GetWindowTextA
SetWindowLongA
InvalidateRect
CreateAcceleratorTableA
UnregisterClassA
GetWindowLongA
CreateWindowExA
ReleaseDC
GetDlgItem

gdi32

RestoreDC
SaveDC
LineTo
MoveToEx
GetRgnBox
EqualRgn
PtInRegion
RectInRegion
CombineRgn
CreateRectRgnIndirect
SetTextAlign
PatBlt
CreateICA
CreateDIBSection
GetDIBits
CreateDIBitmap
GetDIBColorTable
StretchDIBits
EnumFontFamiliesExA
GetEnhMetaFileA
CopyEnhMetaFileA
DeleteEnhMetaFile
SetAbortProc
EndDoc
StartPage
EndPage
StartDocA
CreateDCA
StretchBlt
MaskBlt
SetBrushOrgEx
Ellipse
RoundRect
Rectangle
SetPolyFillMode
PolyPolygon
Polygon
Pie
Arc
SelectClipRgn
GetTextColor
GetBkColor
SetMapMode
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
GetTextExtentExPointA
GetCharABCWidthsA
SetROP2
TextOutA
PolyBezier
Polyline
SetPixel
GetPixel
ExtFloodFill
ExtSelectClipRgn
GetClipBox
SetStretchBltMode
CreatePalette
GetNearestPaletteIndex
CreatePatternBrush
CreateHatchBrush
CreatePen
ExtCreatePen
CreateBitmap
GetPaletteEntries
CreateFontIndirectA
ExcludeClipRect
CreateRectRgn
GetTextExtentPoint32A
SelectPalette
RealizePalette
GdiFlush
GetTextMetricsA
GetRegionData
ExtCreateRegion
OffsetRgn
SetTextColor
SetBkColor
AddFontMemResourceEx
BitBlt
DeleteDC
GetDeviceCaps
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetStockObject
GetSystemPaletteEntries
SetBkMode
CreateSolidBrush

comdlg32

PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
ChooseFontA
ChooseColorA
PageSetupDlgA

advapi32

RegSetValueExW
ConvertSidToStringSidA
GetTokenInformation
RegQueryValueExW
CryptAcquireContextA
RegOpenKeyExA
CryptGenRandom
IsValidSid
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
InitiateSystemShutdownExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegisterEventSourceA
RegQueryValueExA
OpenProcessToken
RegEnumValueW
RegCreateKeyExW
GetLengthSid
ReportEventA
DeregisterEventSource
CopySid

shell32

DragAcceptFiles
ExtractIconExA
ExtractIconA
DragQueryFileA
DragQueryPoint
DragFinish
DoEnvironmentSubstA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteExA
SHFileOperationW
ShellExecuteExW

ole32

CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
StringFromGUID2
OleInitialize
OleUninitialize
CoGetClassObject
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoTaskMemFree
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
OleGetClipboard
CoInitializeEx
CoTaskMemRealloc
OleLockRunning

oleaut32

VarUI4FromStr
OleCreateFontIndirect
SysAllocStringLen
VariantInit
LoadTypeLi
VariantClear
SysStringLen
SysAllocString
LoadRegTypeLi
SysFreeString

iphlpapi

GetAdaptersInfo

wininet

HttpSendRequestA
InternetAttemptConnect
HttpOpenRequestA
InternetOpenA
InternetReadFile
InternetQueryDataAvailable
InternetConnectA
HttpQueryInfoA
InternetCloseHandle
InternetQueryOptionA
InternetSetOptionA

comctl32

ord17
ord6
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
ord16
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Add
ImageList_EndDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_DragLeave
ImageList_SetDragCursorImage
ImageList_BeginDrag

gdiplus

GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipBitmapGetPixel
GdiplusShutdown
GdipCreateMatrix
GdipGetMatrixElements
GdipSetMatrixElements
GdipMultiplyMatrix
GdipTranslateMatrix
GdipScaleMatrix
GdipRotateMatrix
GdipInvertMatrix
GdipTransformMatrixPoints
GdipVectorTransformMatrixPoints
GdipIsMatrixIdentity
GdipIsMatrixEqual
GdipCreateSolidFill
GdipCreateTexture
GdipCreateLineBrush
GdipCreateHatchBrush
GdipSetPenLineCap197819
GdipSetPenLineJoin
GdipSetPenBrushFill
GdipSetPenDashStyle
GdipSetPenDashArray
GdipSetStringFormatFlags
GdipGetStringFormatFlags
GdipSetStringFormatMeasurableCharacterRanges
GdipSetPathFillMode
GdipStartPathFigure
GdipClosePathFigure
GdipDeleteMatrix
GdipAddPathLine
GdipAddPathArc
GdipAddPathBezier
GdipAddPathRectangle
GdipAddPathEllipse
GdipGetImageWidth
GdipTransformPath
GdipCreatePathGradientFromPath
GdipCreateFromHDC
GdipCreateFromHWND
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetWorldTransform
GdipMultiplyWorldTransform
GdipTranslateWorldTransform
GdipScaleWorldTransform
GdipRotateWorldTransform
GdipGetWorldTransform
GdipGetDpiY
GdipDrawLinesI
GdipDrawPath
GdipFillPolygonI
GdipFillPath
GdipDrawString
GdipMeasureString
GdipMeasureCharacterRanges
GdipDrawImageRect
GdipDrawImageRectRectI
GdipSetClipRect
GdipSetClipRegion
GdipResetClip
GdipSaveGraphics
GdipRestoreGraphics
GdipCreateRegion
GdipCreateRegionHrgn
GdipGetEmHeight
GdipGetCellAscent
GdipGetCellDescent
GdipGetLineSpacing
GdipGetFamily
GdipGetFontSize
GdiplusStartup
GdipCloneMatrix
GdipCloneBrush
GdipClonePath
GdipCloneImage
GdipDisposeImage
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipGetRegionBounds
GdipDeleteRegion
GdipIsVisiblePathPoint
GdipGetPathWorldBounds
GdipDeleteGraphics
GdipSetPathGradientCenterPoint
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipSetPathGradientCenterColor
GdipDeletePath
GdipCreatePath
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipDeletePen
GdipCreatePen1
GdipAddPathPath
GdipAlloc
GdipFree
GdipDeleteBrush
GdipGetPathLastPoint

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

Exports

Exports

interception_create_context
interception_destroy_context
interception_get_filter
interception_get_hardware_id
interception_get_precedence
interception_is_invalid
interception_is_keyboard
interception_is_mouse
interception_receive
interception_send
interception_set_filter
interception_set_precedence
interception_wait
interception_wait_with_timeout

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8f2d984ef19904008cf518a1c879888

Headers

DLL Characteristics

File Characteristics

Imports

imagehlp

ws2_32

shlwapi

psapi

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

iphlpapi

wininet

comctl32

gdiplus

winspool.drv

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 394KB - Virtual size: 393KB

.data Size: 53KB - Virtual size: 143KB

.rsrc Size: 4.1MB - Virtual size: 4.1MB

.reloc Size: 179KB - Virtual size: 178KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 394KB - Virtual size: 393KB

.data
Size: 53KB - Virtual size: 143KB

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

.reloc
Size: 179KB - Virtual size: 178KB