NEAS[.]2023-09-06_5f232be63d2cba9c5eb5975865f8e64c_mafia_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.2023-09-06_5f232be63d2cba9c5eb5975865f8e64c_mafia_JC.exe
Size

1.6MB
MD5

5f232be63d2cba9c5eb5975865f8e64c
SHA1

828fe9570ae935f130a41d0e94d1926beea90d5c
SHA256

2f4ebf416f7dac430a0f41964362979c4618d1d6b4ab467588ca1a4ae75e8be5
SHA512

af4d1a771de4efffb12b5ce223099bfaa8263eee98fb9cc908ffa06efce8ee954fdc7e0d4bad4c3ef714cd29570a631dc8087ba4474fd6591bb4369bee181ea5
SSDEEP

49152:JHPEErD18r1KghF+KZcCbK/buDNzqDkEYLPap6N+PfqBF0PipKAC:iErDQ1KghF+KlK/bUzqDktLPapXqBF0y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2023-09-06_5f232be63d2cba9c5eb5975865f8e64c_mafia_JC.exe

Files

NEAS.2023-09-06_5f232be63d2cba9c5eb5975865f8e64c_mafia_JC.exe
.exe windows:5 windows x86

07e766dc2e78f66a9f4665d9d385f1b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetStringTypeW
CompareStringW
EnumSystemLocalesA
FreeEnvironmentStringsW
WriteConsoleW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
HeapDestroy
HeapCreate
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetStartupInfoW
GetStdHandle
SetHandleCount
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetFileType
SetStdHandle
ExitProcess
HeapSize
Process32First
HeapQueryInformation
RaiseException
RtlUnwind
HeapReAlloc
HeapSetInformation
GetCommandLineA
CreateDirectoryA
VirtualQuery
GetSystemInfo
VirtualAlloc
LCMapStringW
HeapFree
CreateThread
ExitThread
DecodePointer
EncodePointer
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetProfileIntA
GetTickCount
GetTempPathA
GetTempFileNameA
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryA
lstrcpyA
GetNumberFormatA
GetWindowsDirectoryA
GetOEMCP
GetCPInfo
GetUserDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
GetLocaleInfoW
QueryPerformanceCounter
HeapAlloc
GetEnvironmentStringsW
FindResourceA
FreeResource
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
LoadLibraryW
lstrcmpW
GlobalAddAtomA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LoadLibraryA
CreateFileA
lstrcmpiA
GetCurrentThreadId
ResumeThread
SetThreadPriority
GlobalFlags
InterlockedIncrement
GetModuleHandleW
CompareStringA
GetModuleHandleA
GetProcAddress
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetCurrentProcessId
GetModuleFileNameA
ActivateActCtx
DeactivateActCtx
FileTimeToSystemTime
lstrcmpA
GlobalGetAtomNameA
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
lstrlenW
MulDiv
SetLastError
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
FindResourceExW
lstrlenA
LockResource
GetLastError
MultiByteToWideChar
GetACP
SizeofResource
WideCharToMultiByte
FormatMessageA
LoadResource
FindResourceW
CloseHandle
WinExec
ReleaseMutex
CreateToolhelp32Snapshot
CreateMutexA
Process32Next
FreeConsole
Sleep
WaitForSingleObject
IsValidLocale

user32

RegisterClipboardFormatA
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
LockWindowUpdate
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
ToAsciiEx
CopyAcceleratorTableA
SetClassLongA
DestroyAcceleratorTable
SetParent
GetSystemMenu
WaitMessage
PostThreadMessageA
LoadMenuW
IsZoomed
WindowFromPoint
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
GetKeyboardLayout
MapVirtualKeyExA
IsCharLowerA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
DrawStateA
GetKeyNameTextA
DeleteMenu
ShowOwnedPopups
SetLayeredWindowAttributes
EnumDisplayMonitors
CreateDialogIndirectParamA
EndDialog
DrawIconEx
GetNextDlgGroupItem
KillTimer
SetTimer
LoadImageA
CopyImage
GetIconInfo
OffsetRect
GetNextDlgTabItem
MessageBeep
NotifyWinEvent
SetCursor
LoadCursorW
EnableScrollBar
DrawFocusRect
InvertRect
ReleaseCapture
GetAsyncKeyState
SetCapture
InvalidateRect
MapVirtualKeyA
SetRectEmpty
CreatePopupMenu
GetMenuDefaultItem
RedrawWindow
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
IntersectRect
InflateRect
PostQuitMessage
IsIconic
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconW
LoadIconA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
CharUpperA
DestroyIcon
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetWindowPos
FrameRect
CharUpperBuffA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
GetWindowRgn
DrawIcon
DestroyCursor
ShowWindow
MoveWindow
SetWindowLongA
IsWindow
IsDialogMessageA
SendDlgItemMessageA
MapDialogRect
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
SetMenuItemBitmaps
GetDlgItem
CheckDlgButton
GetScrollPos
SetScrollPos
SetFocus
GetFocus
GetDesktopWindow
RealChildWindowFromPoint
ClientToScreen
GetWindow
GetDlgCtrlID
GetClassNameA
PtInRect
SetWindowTextA
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
GetWindowTextLengthA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowRect
GetForegroundWindow
GetWindowTextA
GetSystemMetrics
IsRectEmpty
HideCaret

gdi32

CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetDIBColorTable
StretchBlt
SetPixel
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
GetTextColor
Polyline
Ellipse
Polygon
Rectangle
OffsetRgn
CreateHatchBrush
Escape
CreateRoundRectRgn
PtInRegion
FrameRgn
SetPixelV
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
FillRgn
GetBoundsRect
GetTextFaceA
ExtTextOutA
TextOutA
RectVisible
GetRgnBox
CreateSolidBrush
PtVisible
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
EnumFontFamiliesExA
GetObjectA
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CopyMetaFileA
GetDeviceCaps
BitBlt
DeleteDC
CreateDCA
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetViewportOrgEx

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA

shell32

DragFinish
ShellExecuteExA
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHAppBarMessage
DragQueryFileA
ShellExecuteA
SHBrowseForFolderA

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionW
PathRemoveFileSpecW

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
OleTranslateAccelerator
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
IsAccelerator
OleLockRunning
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
CoUninitialize
CoTaskMemFree

oleaut32

SysFreeString
SysAllocString
VariantInit
VarBstrFromDate
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
VariantClear

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdiplusStartup
GdipCloneImage
GdipSaveImageToFile
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncodersSize
GdipAlloc
GdipCreateBitmapFromScan0
GdipFree
GdiplusShutdown
GdipDrawImageRectI

ws2_32

WSAStartup
inet_addr
htons
socket
closesocket
send
connect

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07e766dc2e78f66a9f4665d9d385f1b7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 268KB - Virtual size: 268KB

.data Size: 24KB - Virtual size: 53KB

.rsrc Size: 1024B - Virtual size: 696B

.reloc Size: 164KB - Virtual size: 163KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 268KB - Virtual size: 268KB

.data
Size: 24KB - Virtual size: 53KB

.rsrc
Size: 1024B - Virtual size: 696B

.reloc
Size: 164KB - Virtual size: 163KB