Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_1123dd185c6f24af333c4a218f35cf42_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_1123dd185c6f24af333c4a218f35cf42_mafia_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-26_1123dd185c6f24af333c4a218f35cf42_mafia_JC.exe
-
Size
3.3MB
-
MD5
1123dd185c6f24af333c4a218f35cf42
-
SHA1
1a2394c8717f2954415758a1696245635062667d
-
SHA256
9d804c44e076408e3cceba90e1b2a579e331b37154934ee0cdf1549a53a4cee3
-
SHA512
66a6996c592a89a94401a8f1ac9112d6a4b1a699f7e942a50666c740b822232d914053b2b567a54b68693762b586d6513782500d54f432e3d3a1c740ec0fffe0
-
SSDEEP
49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl7gmPugdlQA6mG:Q+8X9G3vP3AM2mmgdlkmG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-26_1123dd185c6f24af333c4a218f35cf42_mafia_JC.exe
Files
-
2023-08-26_1123dd185c6f24af333c4a218f35cf42_mafia_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ