Static task
static1
Behavioral task
behavioral1
Sample
2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe
-
Size
466KB
-
MD5
71f8aabec6fde13c2c95f31bc662be91
-
SHA1
ef84eb874a861a8aeeeac6d91841b481f8d456a1
-
SHA256
579ceb1a6d36b365b1dbdcca65f38473defc860b1e290dd64e2e93172fc702b5
-
SHA512
ea69679650d866c5bbe97c66ecd111ac55e13a6e4aea39c401fa2f51b7d3416bbc578e3b42df832cc264e2d1998f3022b1167e2b508b3c40ec3c38aa973dfc2e
-
SSDEEP
12288:aSFEu8sNNaKbefcq/N3l0esV+xDxzKweXylJ1:aSVLas9iZkV+pVKlylr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe
Files
-
2023-08-27_71f8aabec6fde13c2c95f31bc662be91_mafia_JC.exe.exe windows:5 windows x86
511e761a74e4d2e3010101f1065db8b1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
IsProcessorFeaturePresent
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetExitCodeProcess
CreateProcessA
SetStdHandle
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
CreateMutexA
SetEvent
CreateThread
LocalFree
WaitForMultipleObjects
ResetEvent
GetLastError
CreateEventA
FormatMessageA
Sleep
WriteFile
GlobalLock
SetFilePointer
CloseHandle
ReleaseMutex
ReadFile
WaitForSingleObject
GetFileSize
CreateFileA
GlobalReAlloc
GlobalFree
GlobalUnlock
GlobalAlloc
GetOEMCP
GetACP
GetFileAttributesA
GetStartupInfoW
SetHandleCount
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
RaiseException
RtlUnwind
HeapAlloc
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapSize
LoadLibraryW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CreateFileW
user32
UpdateWindow
EndPaint
GetMessageA
GetSystemMenu
PostQuitMessage
BeginPaint
TranslateMessage
SetWindowLongA
CreateWindowExA
DefWindowProcA
ShowWindow
ReleaseDC
DispatchMessageA
AppendMenuA
RegisterClassExA
MessageBoxA
GetSystemMetrics
LoadCursorA
FillRect
InvalidateRect
GetWindowLongA
GetDC
gdi32
CreateFontA
SetTextAlign
ExtCreatePen
SetViewportOrgEx
SetBkColor
GetPixel
MoveToEx
EndPage
BitBlt
Arc
LineTo
LPtoDP
StartPage
SetTextColor
DeleteDC
StretchBlt
GetCurrentObject
SelectObject
SelectClipRgn
CreateCompatibleDC
DPtoLP
CreateCompatibleBitmap
StartDocA
Ellipse
EndDoc
CreateSolidBrush
TextOutA
GetDeviceCaps
GetDIBits
GetStockObject
GetObjectA
SelectPalette
RealizePalette
DeleteObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ