Behavioral task
behavioral1
Sample
22245a994a30b0047d33b630cb0d1d2a_mafia_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
22245a994a30b0047d33b630cb0d1d2a_mafia_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
22245a994a30b0047d33b630cb0d1d2a_mafia_JC.exe
-
Size
1.1MB
-
MD5
22245a994a30b0047d33b630cb0d1d2a
-
SHA1
3bc84cc99aff370e4fc74832113114fd883c0dee
-
SHA256
265e9df6e9c1af21aaa70c43c21d89de06e1bb5096c532182651db71dbb4f11c
-
SHA512
0f49901116c914591eda9fda61bcb4bdc77fd808b39aa39b767d98fb754cddb427fdcd210920310610efe9d6300fc1f2a3f05b4cad6693d8ef66d0cf527a21ec
-
SSDEEP
12288:AxC1/WnCYxDu2cWAOy7EOe+NGt/m2aVKgGqT/c4tsI3kJ1aV8zF6:xbYxD7ZAOy7EKGt/m2aVKAxVWF6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22245a994a30b0047d33b630cb0d1d2a_mafia_JC.exe
Files
-
22245a994a30b0047d33b630cb0d1d2a_mafia_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE