Behavioral task
behavioral1
Sample
3db43abc685d8d7293f2a2a0ec897766_mafia_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3db43abc685d8d7293f2a2a0ec897766_mafia_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
3db43abc685d8d7293f2a2a0ec897766_mafia_JC.exe
-
Size
4.5MB
-
MD5
3db43abc685d8d7293f2a2a0ec897766
-
SHA1
32b2790bcfb3e424af5a03e4e4b284800f09a79d
-
SHA256
fdc1eb2e11ccce131bb62ff0bdccd1254a92d61fec101d9f2f5c85e5e92009c1
-
SHA512
4c8dfc19791c365a4f9be4eff562d6f834e9110d7b1da083d0089864c85b7c4df8fb1c3e5ba795f8d20148b66b83c05d9bc016c643598e2ab5205beda339b532
-
SSDEEP
49152:hrDEVgW+0oF+K9t85Wcec3DO7aU/YJ2TydBgn4Fh2GOw3tf8O2A/BhjN/R0ay33h:2gWdoFZSU7wJZJthPB/RM3301g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3db43abc685d8d7293f2a2a0ec897766_mafia_JC.exe
Files
-
3db43abc685d8d7293f2a2a0ec897766_mafia_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 4.5MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklav Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.olesya Size: 256B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE