Static task
static1
Behavioral task
behavioral1
Sample
789042240517e7fe1751dc1cfdcc1033_mafia_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
789042240517e7fe1751dc1cfdcc1033_mafia_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
789042240517e7fe1751dc1cfdcc1033_mafia_JC.exe
-
Size
855KB
-
MD5
789042240517e7fe1751dc1cfdcc1033
-
SHA1
f6a25f78a9c383897169d0b1e81b3cf6a27ea0a9
-
SHA256
bc7765081bbc1b846d0578940771c8ef4dc3ccd4163e513fd66bf3ad3b96761d
-
SHA512
7dd21b6440a0280658dfecec2ea5042d0f54adf092441940e4c41666f2651e20b9f08a8f723f90a08465098a485f59c44ba8ac95c53db70e98a3ac2d8e506377
-
SSDEEP
24576:AstdDzO4tOkaVsRJGUAm1DM/ibjb0X4ZZV7cn21hWB8PTf:v3z3l1Dk+b0X4ZZ+n21hWif
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 789042240517e7fe1751dc1cfdcc1033_mafia_JC.exe
Files
-
789042240517e7fe1751dc1cfdcc1033_mafia_JC.exe.exe windows x86
daadd1fbd8a7aa95a995761381822d0a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
LocalAlloc
GetModuleHandleA
VirtualProtect
LocalFree
Sections
.text Size: 475KB - Virtual size: 475KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ