Static task
static1
Behavioral task
behavioral1
Sample
2023-08-27_61505c0b20fe9e79a9ee58b74943f5af_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-27_61505c0b20fe9e79a9ee58b74943f5af_mafia_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-27_61505c0b20fe9e79a9ee58b74943f5af_mafia_JC.exe
-
Size
3.4MB
-
MD5
61505c0b20fe9e79a9ee58b74943f5af
-
SHA1
ab475ca94bcb6af92d5495735725e961aafbb6d3
-
SHA256
9f2f56c6b637a09047b54a4acecf8cc7f9713fd491f3739ad880b788e229b5c8
-
SHA512
df73d5795b31d2b99e0ca8ad7977c19de1e9576c157e5c6338bb2a07eb59bb67d098188179f62ae1b9eb66b062ce0749c9c9a33acfa25601aa7e8af2fe1033e5
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlEcyrnCfdGq99kU/iJW:c+8X9G3vP3AMeBLCFGhRW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-27_61505c0b20fe9e79a9ee58b74943f5af_mafia_JC.exe
Files
-
2023-08-27_61505c0b20fe9e79a9ee58b74943f5af_mafia_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ