Static task
static1
Behavioral task
behavioral1
Sample
2023-08-27_69b057966dee6bfd05087f0b3faadb17_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-27_69b057966dee6bfd05087f0b3faadb17_mafia_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-27_69b057966dee6bfd05087f0b3faadb17_mafia_JC.exe
-
Size
3.0MB
-
MD5
69b057966dee6bfd05087f0b3faadb17
-
SHA1
e61153e7e6b566e9437c2c0cdc925fbfb44e3d25
-
SHA256
5ac833b631a3ec1bedcf56b97aba3b04599a39a8362db1618b5840b04a3cb9be
-
SHA512
9846ada6ce79235c3e3d9a1895e495d372a238ab88e6e470ab52e9f8fc94eb07faacd2bd458e344cea9034f903f1db7b0b82b5af84706a75a87bb205cfbeeed6
-
SSDEEP
49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlhzW3fQXxkIBB0RzGsb:Q+8X9G3vP3AM/WajKzGi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-27_69b057966dee6bfd05087f0b3faadb17_mafia_JC.exe
Files
-
2023-08-27_69b057966dee6bfd05087f0b3faadb17_mafia_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ