2023-08-26_6fbb9457f8152db7465569f76f6b0412_mafia_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

2023-08-26_6fbb9457f8152db7465569f76f6b0412_mafia_JC.exe
Size

3.3MB
MD5

6fbb9457f8152db7465569f76f6b0412
SHA1

678814f2a97e6454ad58cf0277012ae9e2b2f8b9
SHA256

15fb94455d11de35a68d41cc69f22c742fa4bf8021d33527fd191a7a3fc80817
SHA512

8ea5f9e74fd5203970087d5162ce9dce3f21d20bb253b9f7cc7d7f4d802061286ace19e0a7382a54c7d52016a152fc59bdcce1ff0766cf93751dc6e507794826
SSDEEP

98304:p8OYJAA17ia5Kfbry1Y2Y/8byZHPrTizaB93pKth9oj9ghi1RebMIg9Cbk/V8:+35KTT/8byZ993pK39ojDIg9Cbk/V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-26_6fbb9457f8152db7465569f76f6b0412_mafia_JC.exe

Files

2023-08-26_6fbb9457f8152db7465569f76f6b0412_mafia_JC.exe
.exe windows:5 windows x86

05eb6bdd4590c15593cf1527e2f79fb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
CloseHandle
GetFileSize
GlobalFree
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
SetThreadPriority
ResumeThread
WaitForSingleObject
GetCurrentDirectoryA
MulDiv
lstrlenW
LocalFree
FormatMessageA
CopyFileA
lstrcmpA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTickCount
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
GetStringTypeExA
GetThreadLocale
lstrcmpiA
DeleteFileA
MoveFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
GlobalFlags
TlsGetValue
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
GetACP
GetProfileIntA
Sleep
SearchPathA
GetTempPathA
GetFileAttributesExA
LocalFileTimeToFileTime
GetFileSizeEx
DeleteCriticalSection
VirtualProtect
GetWindowsDirectoryA
GetNumberFormatA
FindResourceExW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
CreateThread
GetSystemTimeAsFileTime
HeapReAlloc
ExitProcess
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetLocaleInfoW
HeapCreate
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsProcessorFeaturePresent
IsValidCodePage
GetStringTypeW
LCMapStringW
CompareStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
GlobalSize
FindResourceA
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
FreeLibrary
CompareStringA
LoadLibraryW
lstrcmpW
GlobalLock
GlobalUnlock
GetCurrentProcessId
lstrlenA
GlobalGetAtomNameA
GlobalAddAtomA
MultiByteToWideChar
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GlobalAlloc
SetErrorMode
GlobalReAlloc
lstrcpyA
QueryPerformanceCounter
QueryPerformanceFrequency
SetFileAttributesA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
ActivateActCtx
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
DeactivateActCtx
CreateFileA
SetLastError

user32

LoadCursorW
LoadCursorA
MessageBeep
GetCursorPos
NotifyWinEvent
GetAsyncKeyState
CharUpperA
AppendMenuA
GetMenuDefaultItem
IsMenu
DrawIconEx
SetMenuDefaultItem
DrawStateA
FillRect
OpenClipboard
CopyImage
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
SetRect
UnionRect
GetUpdateRect
LockWindowUpdate
GetDC
ReleaseDC
GetKeyNameTextA
MapVirtualKeyA
GetMenuItemInfoA
GetMenuStringA
SystemParametersInfoA
RegisterClipboardFormatA
SetClassLongA
GetSysColorBrush
ValidateRect
TranslateMessage
GetMessageA
DestroyAcceleratorTable
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
RemoveMenu
InsertMenuA
DrawEdge
DrawFrameControl
DrawFocusRect
EnumDisplayMonitors
SetLayeredWindowAttributes
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
LoadAcceleratorsW
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
PostThreadMessageA
WaitMessage
ShowOwnedPopups
GetIconInfo
CharUpperBuffA
FrameRect
InvertRect
HideCaret
SetCursorPos
RealChildWindowFromPoint
CopyIcon
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableA
SubtractRect
UnregisterClassA
IsClipboardFormatAvailable
GetDoubleClickTime
EnumChildWindows
CharNextA
InvalidateRgn
GetNextDlgGroupItem
DestroyCursor
DrawIcon
CreateMenu
IsCharLowerA
MapVirtualKeyExA
GetWindowRgn
GetTabbedTextExtentW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
SetPropA
WindowFromPoint
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetClassNameA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
WinHelpA
SetWindowPos
DestroyIcon
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
EqualRect
GetDlgItem
SetWindowLongA
GetDlgCtrlID
GetKeyState
LoadIconW
SetCursor
PeekMessageA
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
InsertMenuItemA
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
GetClassInfoA
IntersectRect
GetMenu
GetLastActivePopup
BringWindowToTop
SetMenu
GetDesktopWindow
ShowWindow
GetWindowLongA
TranslateAcceleratorA
IsWindow
DestroyWindow
GetClassLongA
SetForegroundWindow
SetParent
GetTopWindow
GetCapture
IsWindowVisible
SetWindowRgn
IsZoomed
IsIconic
PostMessageA
OffsetRect
IsRectEmpty
CopyRect
GetWindow
GetParent
SetRectEmpty
LoadMenuW
GetSubMenu
SendMessageA
ScreenToClient
GetClientRect
InvalidateRect
UpdateWindow
GetWindowRect
InflateRect
GetSysColor
LoadBitmapW
EnableWindow
IsChild
GetFocus
ClientToScreen
LoadImageA
GetSystemMetrics
RedrawWindow
SetCapture
KillTimer
SetTimer
GetSystemMenu
DeleteMenu
SetWindowTextA
MoveWindow
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
TranslateMDISysAccel
DrawMenuBar
GetMenuCheckMarkDimensions
DefFrameProcA
GetPropA
SetMenuItemBitmaps
DefMDIChildProcA

gdi32

CreateRoundRectRgn
CreateRectRgnIndirect
GetTextColor
SetDIBColorTable
BitBlt
PatBlt
GetDIBits
RealizePalette
SelectPalette
CreateRectRgn
CombineRgn
StretchBlt
GetObjectA
GetTextExtentPoint32A
GetStockObject
DeleteObject
CreateFontIndirectA
GetPixel
SetPixel
ExtTextOutA
GetTextMetricsA
SaveDC
CreatePen
CreateBitmap
SetBkColor
SetTextColor
CreateCompatibleBitmap
CreateDIBSection
SelectObject
DeleteDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
SelectClipRgn
ExtSelectClipRgn
CreatePatternBrush
PtVisible
StartDocA
GetWindowExtEx
CreateCompatibleDC
SetPixelV
EnumFontFamiliesExA
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetSystemPaletteEntries
GetNearestPaletteIndex
GetWindowOrgEx
SetPaletteEntries
GetPaletteEntries
CreatePalette
ExtFloodFill
LPtoDP
GetViewportOrgEx
GetRgnBox
OffsetRgn
GetCharWidthA
RoundRect
Rectangle
EndDoc
AbortDoc
SetAbortProc
EndPage
GetObjectType
GetDeviceCaps
CreateSolidBrush
CreateHatchBrush
SetRectRgn
GetMapMode
DPtoLP
CopyMetaFileA
CreateDCA
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
Polyline
Ellipse
Polygon
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
StartPage
GetViewportExtEx

oleaut32

SysAllocString
SysAllocStringByteLen
SysStringLen
VariantCopy
SysFreeString
SysAllocStringLen
VariantInit
VariantClear
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
VariantChangeType

msimg32

AlphaBlend
TransparentBlt

comctl32

ImageList_GetIconSize
ImageList_GetIcon
ImageList_DrawEx
ImageList_Destroy
ImageList_GetImageCount
ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx

shlwapi

PathIsUNCA
PathStripToRootA
UrlUnescapeA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW

oledlg

ord8

gdiplus

GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipGetImagePalette
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipDrawImageI

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

wininet

InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetCloseHandle
HttpQueryInfoA
InternetSetOptionExA

winmm

PlaySoundA

winspool.drv

ClosePrinter
OpenPrinterA
GetJobA
DocumentPropertiesA

comdlg32

GetFileTitleA

advapi32

RegOpenKeyExW
RegEnumValueA
RegCloseKey
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegEnumKeyExA

shell32

DragFinish
SHGetFileInfoA
SHAppBarMessage
ShellExecuteA
SHAddToRecentDocs
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ExtractIconA
DragQueryFileA

ole32

CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CoInitializeEx
StringFromCLSID
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
CoRevokeClassObject
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoGetClassObject
OleLockRunning
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
CoTaskMemFree
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
CoInitialize
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleDestroyMenuDescriptor

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 345KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05eb6bdd4590c15593cf1527e2f79fb1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

oleaut32

msimg32

comctl32

shlwapi

oledlg

gdiplus

oleacc

imm32

wininet

winmm

winspool.drv

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 345KB - Virtual size: 344KB

.data Size: 28KB - Virtual size: 58KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 182KB - Virtual size: 181KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 345KB - Virtual size: 344KB

.data
Size: 28KB - Virtual size: 58KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 182KB - Virtual size: 181KB