Behavioral task
behavioral1
Sample
8437b6ed38b42bb447c9e9ad095105315d430b07b98b1b829ad314186c0c1752.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8437b6ed38b42bb447c9e9ad095105315d430b07b98b1b829ad314186c0c1752.exe
Resource
win10v2004-20221111-en
General
-
Target
8437b6ed38b42bb447c9e9ad095105315d430b07b98b1b829ad314186c0c1752.exe
-
Size
267KB
-
MD5
ef2faf4191b9a3e622ec8496c653bc4c
-
SHA1
adc4411fd1248f9846dc67c8978d5d553809b075
-
SHA256
8437b6ed38b42bb447c9e9ad095105315d430b07b98b1b829ad314186c0c1752
-
SHA512
fbc65375233b94bd5bfc69ddaf8a0367aaf5b3906b45f8d16ad56add1e97ef221993fc2dbced810017298ceef278b72e4f66d71601a0e7feb9f7a0e36f9f62ef
-
SSDEEP
3072:eszNtrCvGJKHRMGM6y7CGtEKqljDjn+AaErIcIqaGqPIhkp/7oL0DDlUU8NH79BS:P7KHRMGM7/LqRh9kfGqPHhoL0/lUUaB
Malware Config
Signatures
-
Detect MafiaWare666 ransomware 1 IoCs
resource yara_rule sample family_mafiaware666 -
Mafiaware666 family
Files
-
8437b6ed38b42bb447c9e9ad095105315d430b07b98b1b829ad314186c0c1752.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 205KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ