Behavioral task
behavioral1
Sample
2023-08-25_89418234c8d3ef01885b16d2418009a5_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-25_89418234c8d3ef01885b16d2418009a5_mafia_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-25_89418234c8d3ef01885b16d2418009a5_mafia_JC.exe
-
Size
444KB
-
MD5
89418234c8d3ef01885b16d2418009a5
-
SHA1
b5b6d889a20b8550f721e50dc8a10915d08af0d7
-
SHA256
2502141d29a5836a61f5cf42ddedecfdc2da928488e5087183384a6fcbf4abc7
-
SHA512
cb373caaa0a8688ee703d467817faa54fa85c5c8f2ac56971adbca93de0fcb394f3511cf5abb12134ad5ba22fb18d754eddff433bca5cf058c9bde5475d28813
-
SSDEEP
6144:WQSHG5PqPjoYT0ZQEcZ5mHeZyiubIV5muWbYF4krz3ttUfB:W1HG549Wcfm+ZYIV5muWbI4krzdI
Malware Config
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-25_89418234c8d3ef01885b16d2418009a5_mafia_JC.exe
Files
-
2023-08-25_89418234c8d3ef01885b16d2418009a5_mafia_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ