Static task
static1
Behavioral task
behavioral1
Sample
2023-08-22_3019fb6f308be0454edf12bcdde6a48f_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-22_3019fb6f308be0454edf12bcdde6a48f_mafia_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
2023-08-22_3019fb6f308be0454edf12bcdde6a48f_mafia_JC.exe
-
Size
1.6MB
-
MD5
3019fb6f308be0454edf12bcdde6a48f
-
SHA1
665e2ad7d79a5087b159f88143d37551faf1b84d
-
SHA256
edbee40c758684bd25d8f47714d22f3f1deeb9383d66569a35a909a94e20b2fe
-
SHA512
adee0dcadb8af8a491966891f5b66ad067a93c06392c087fa74a63892980e7335ea8c39d98534417f86ff3cf8f4f040c622ebcd948b933db52e9854753ab6c84
-
SSDEEP
24576:TCsZd5TKWxFMcN/c5M8SMUi9Grdn7SsvaMQR9TzBph1xRO3AWCkTTl:D7TvfU+8X9GrNOsvabRbphE3ANkTTl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-22_3019fb6f308be0454edf12bcdde6a48f_mafia_JC.exe
Files
-
2023-08-22_3019fb6f308be0454edf12bcdde6a48f_mafia_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ