2023-08-25_4263ff8c7e5cb32a61152f4aa413641c_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-25_4263ff8c7e5cb32a61152f4aa413641c_mafia_JC.exe
Size

2.5MB
MD5

4263ff8c7e5cb32a61152f4aa413641c
SHA1

98f05a59ed87cddeab9dd65925246d11b3e860a7
SHA256

4bc6ff4e5da8e4a0cb92d4bc2482a523fb575360be4673998c78f9d943ed9499
SHA512

208b5fec414005d474ffe3c2b667e62d2374a0376d2c42ff4c438af532d978ba1d8c1bbdc5754f54fb34111427d94f97ef92496a784184b9c6882c89175df146
SSDEEP

49152:d/2b+NF1mnvPYlQNUWfT7wqxgsJvQl5trXrhVIDNrrYDyACZYBO/xfxu:m+NF1m3YlQNUWfRxgsJvQlxVIDhrYDyd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-25_4263ff8c7e5cb32a61152f4aa413641c_mafia_JC.exe

Files

2023-08-25_4263ff8c7e5cb32a61152f4aa413641c_mafia_JC.exe
.exe windows:5 windows x86

b039685c0d3e9dbb40a8b9c67c94a416

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetConsoleMode
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
WriteConsoleW
GetStringTypeW
GetDriveTypeW
GetProcessHeap
SetEnvironmentVariableA
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
TerminateProcess
UnhandledExceptionFilter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapQueryInformation
HeapSize
ExitProcess
SizeofResource
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
ExitThread
MoveFileA
DeleteFileA
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetStartupInfoW
HeapSetInformation
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
InitializeCriticalSectionAndSpinCount
GetTempFileNameW
GetTickCount
GetNumberFormatW
GetWindowsDirectoryW
GetCurrentDirectoryW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GlobalFlags
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
RaiseException
lstrcmpA
ResumeThread
SetThreadPriority
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FindClose
ReleaseActCtx
CreateActCtxW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
lstrcmpW
GlobalSize
LocalFree
GetCurrentProcessId
MulDiv
CopyFileW
CreateMutexA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ConnectNamedPipe
CreateEventW
Sleep
DisconnectNamedPipe
CreateThread
CreateFileW
WaitNamedPipeW
ReadFile
WriteFile
TerminateThread
WaitForSingleObject
CloseHandle
OutputDebugStringA
InterlockedDecrement
GetFileAttributesW
RemoveDirectoryW
DeleteFileW
CreateDirectoryW
GetCommandLineW
lstrcmpiW
lstrlenW
FreeResource
ActivateActCtx
GetProcAddress
GetModuleHandleW
LoadLibraryW
DeactivateActCtx
SetLastError
GetCPInfo
lstrlenA
GetVersionExW
GetVersion
lstrcpyW
ExpandEnvironmentStringsW
FormatMessageW
GetLastError
GetACP
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTempPathW
GetModuleFileNameW
FindResourceW
LoadResource
LockResource

user32

GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
SetClassLongW
DestroyAcceleratorTable
RegisterClipboardFormatW
LockWindowUpdate
CopyImage
HideCaret
InvertRect
GetNextDlgGroupItem
WaitMessage
GetMenuDefaultItem
SetMenuDefaultItem
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
SetWindowRgn
SetLayeredWindowAttributes
EnumDisplayMonitors
CharNextW
SetCapture
InvalidateRgn
CopyAcceleratorTableW
SetParent
GetSystemMenu
IsRectEmpty
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
UnregisterClassW
RealChildWindowFromPoint
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
CharUpperW
CreateDialogIndirectParamW
EndDialog
GetMessageW
TranslateMessage
ValidateRect
DestroyMenu
MapVirtualKeyW
GetKeyNameTextW
SetRectEmpty
IntersectRect
GetCursorPos
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
CreateAcceleratorTableW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
CopyRect
EnableWindow
DestroyCursor
DestroyIcon
GetWindowLongW
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
GetWindow
LoadMenuW
GetMenuStringW
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxW
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
CopyIcon
CharUpperBuffW
PostThreadMessageW
IsCharLowerW
MapVirtualKeyExW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
GetWindowRgn
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
FindWindowW
DrawIcon
IsIconic
LoadIconW
LoadCursorW
SetTimer
KillTimer
IsWindow
SubtractRect
GetDoubleClickTime
GetUpdateRect
IsChild
IsClipboardFormatAvailable
SendMessageW
IsMenu
GetNextDlgTabItem
GetParent
SetCursor
InvalidateRect
ClientToScreen
WindowFromPoint
GetActiveWindow
GetWindowRect
PostMessageW
InflateRect
DrawFocusRect
GetClientRect
OffsetRect
DrawStateW
FillRect
GetSysColor
GetDC
ReleaseDC
GetIconInfo
LoadImageW
FrameRect
DrawEdge
SetRect
GetMenuItemInfoW
DrawTextW
SystemParametersInfoW
DrawIconEx
GetSystemMetrics
GetDesktopWindow
AppendMenuW
GetMenuItemCount
InsertMenuW
ModifyMenuW
GetMenuState
GetMenuItemID
CreateMenu
CreatePopupMenu
GetSysColorBrush
LoadBitmapW
RemoveMenu
DeleteMenu
GetSubMenu
TabbedTextOutW
DrawTextExW
GrayStringW
RedrawWindow
UpdateWindow
SetCursorPos

gdi32

CopyMetaFileW
CreateDCW
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetBkColor
GetRgnBox
GetTextColor
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
CreateEllipticRgn
Polyline
Polygon
OffsetRgn
SetDIBColorTable
StretchBlt
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
GetTextFaceW
SetLayout
GetLayout
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
CreateCompatibleDC
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
SetViewportOrgEx
GetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
Rectangle
CreateHatchBrush
PatBlt
CreateDIBSection
Ellipse
GetTextExtentPoint32W
CreateFontIndirectW
GetBkMode
CreatePen
CreateSolidBrush
GetDeviceCaps
GetObjectW
SetPixel
GetPixel
DeleteDC
SetTextColor
SetBkColor
SelectObject
CreateBitmap
GetStockObject
DeleteObject
BitBlt
CreateCompatibleBitmap

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegSetValueExW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW

shell32

DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW
SHBrowseForFolderW
SHCreateDirectoryExW
SHAppBarMessage
DragQueryFileW
ShellExecuteExW
SHGetMalloc
SHGetDesktopFolder
SHGetFileInfoW
CommandLineToArgvW

comctl32

_TrackMouseEvent
ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW

ole32

CoFreeUnusedLibraries
OleUninitialize
CoInitialize
CoUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateInstance
OleInitialize
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoInitializeEx
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
RegisterDragDrop
CLSIDFromString
CoTaskMemFree
CreateStreamOnHGlobal
RevokeDragDrop
CoCreateGuid
CoLockObjectExternal

oleaut32

VariantClear
VariantChangeType
VariantInit
VariantCopy
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
SysAllocStringLen
SysFreeString
SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdiplusStartup
GdipLoadImageFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipFree
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawImageI

winmm

PlaySoundW

wininet

InternetCloseHandle
InternetOpenW
HttpQueryInfoA
InternetCrackUrlW
InternetReadFile
InternetQueryDataAvailable
HttpSendRequestW
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 688KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b039685c0d3e9dbb40a8b9c67c94a416

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

winmm

wininet

oleacc

imm32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 319KB - Virtual size: 319KB

.data Size: 28KB - Virtual size: 57KB

.rsrc Size: 688KB - Virtual size: 688KB

.reloc Size: 178KB - Virtual size: 177KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 319KB - Virtual size: 319KB

.data
Size: 28KB - Virtual size: 57KB

.rsrc
Size: 688KB - Virtual size: 688KB

.reloc
Size: 178KB - Virtual size: 177KB