NEAS[.]2023-09-06_79a02d7895c6764eb7ea254b54cf8ca0_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-06_79a02d7895c6764eb7ea254b54cf8ca0_mafia_JC.exe
Size

3.1MB
MD5

79a02d7895c6764eb7ea254b54cf8ca0
SHA1

19afd0474af1fff3e4a1496793d2c84508482732
SHA256

4f1363f711d899656549c8bf4ea00b80e93b5610833dda23ded2907c019a0bbb
SHA512

86cc18d7d4cb0e4e16d2745d0ceb6986c6cc760a466d29239639a6031edba550c739f6e55dc767c2934bfc29f30a9138b42483c03eff0d529cc60d6f03b1398b
SSDEEP

98304:bsOta1677VOtRlnao1rudGZirT71k0fhCk+4f28jBsx/R+evs:bsOtaGDdFT7W0fhCk6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2023-09-06_79a02d7895c6764eb7ea254b54cf8ca0_mafia_JC.exe

Files

NEAS.2023-09-06_79a02d7895c6764eb7ea254b54cf8ca0_mafia_JC.exe
.exe windows:5 windows x86

7a1076e7488c29263c80f7e97a2419ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Connect_MachineA
CM_Locate_DevNode_ExA
CM_Disconnect_Machine
CM_Get_Sibling_Ex
CM_Get_Child_Ex
CM_Get_DevNode_Registry_Property_ExA

rpcrt4

UuidFromStringA

kernel32

GetStdHandle
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
CompareStringW
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
Sleep
GetComputerNameA
CloseHandle
SystemTimeToFileTime
GetLastError
GetStringTypeW
DeviceIoControl
GetLocalTime
CreateFileA
GlobalUnlock
GlobalSize
GlobalLock
GlobalAlloc
VirtualAlloc
VirtualFree
FindResourceA
GetModuleHandleA
GetTickCount
WriteFile
SetFilePointer
InterlockedExchange
GetProcAddress
GetModuleHandleW
lstrcmpA
SetLastError
DeactivateActCtx
LoadLibraryA
ActivateActCtx
CompareStringA
MultiByteToWideChar
LoadLibraryExA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetModuleFileNameA
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
IsValidCodePage
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
VirtualQuery
GetSystemInfo
CreateThread
ExitThread
ExitProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapReAlloc
RaiseException
GetDateFormatA
GetTimeFormatA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
RtlUnwind
SetThreadPriority
HeapCreate
LCMapStringW
FreeLibrary
IsProcessorFeaturePresent
ResumeThread
WaitForSingleObject
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetACP
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
lstrcpyA
GetSystemDirectoryW
GetCurrentDirectoryA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
DeleteFileA
lstrcmpiA
GetThreadLocale
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
CopyFileA
FormatMessageA
LocalFree
lstrlenW
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
MulDiv
GlobalFree
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrlenA

user32

UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
RegisterClipboardFormatA
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawIconEx
GetSystemMenu
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
UnregisterClassA
CopyImage
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
WaitMessage
KillTimer
SetTimer
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
GetMenuItemInfoA
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
IntersectRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
IsMenu
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
EndPaint
BeginPaint
GetWindowDC
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
EndDialog
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
LoadMenuW
GetClassInfoA
DefWindowProcA
LoadCursorA
GetDoubleClickTime
GetFocus
IsWindowVisible
ScreenToClient
IsRectEmpty
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowRgn
SubtractRect
MapVirtualKeyExA
IsCharLowerA
CharUpperBuffA
CopyIcon
LoadImageW
GetMessagePos
ReleaseCapture
SystemParametersInfoA
SetCapture
GetCapture
PtInRect
IsWindow
RedrawWindow
DrawFrameControl
DrawEdge
SetRect
GetUpdateRect
IsClipboardFormatAvailable
SetMenuDefaultItem
PostThreadMessageA
BeginDeferWindowPos
CreateMenu
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
DestroyMenu
LoadMenuA
DestroyCursor
LoadImageA
GetSysColor
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetWindowRect
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateA
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
DestroyIcon
wsprintfA
MessageBoxA
GetSystemMetrics
LoadIconW
EnableWindow
UpdateWindow
GetClientRect
IsIconic
SendMessageA
DrawIcon
LoadBitmapW
RegisterWindowMessageA

gdi32

SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SelectObject
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CopyMetaFileA
RoundRect
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
GetTextMetricsA
GetCharWidthA
PatBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetTextExtentPoint32A
RealizePalette
GetDeviceCaps
CreatePalette
CreateFontIndirectA
CreatePen
Rectangle
CreateCompatibleBitmap
GetPixel
SetPixel
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject
StretchBlt
CreateCompatibleDC
GetObjectA
CreateDCA
GetStockObject
CreateBitmap

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegEnumValueA

shell32

ShellExecuteA
SHGetFileInfoA
DragFinish
DragQueryFileA
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
StgOpenStorageOnILockBytes
CoGetClassObject
CoUninitialize
CoInitialize
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoRevokeClassObject

oleaut32

VarBstrFromDate
VariantCopy
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
SysAllocStringByteLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SafeArrayDestroy
SysFreeString

oledlg

ord8

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a1076e7488c29263c80f7e97a2419ff

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

rpcrt4

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 279KB - Virtual size: 279KB

.data Size: 34KB - Virtual size: 63KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 174KB - Virtual size: 174KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 279KB - Virtual size: 279KB

.data
Size: 34KB - Virtual size: 63KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 174KB - Virtual size: 174KB