Static task
static1
Behavioral task
behavioral1
Sample
2023-08-25_8d00995aef98d16426f8041a7a1b7e6b_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-25_8d00995aef98d16426f8041a7a1b7e6b_mafia_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-25_8d00995aef98d16426f8041a7a1b7e6b_mafia_JC.exe
-
Size
2.8MB
-
MD5
8d00995aef98d16426f8041a7a1b7e6b
-
SHA1
ffbe733622ba2b13d8a1605540f16b898eedfaac
-
SHA256
3f57cfef4e76d65e92d91302452ba71e429068d2651205a6204e854540292e49
-
SHA512
d301e5f21a44d34d98ad79c671a594385b053ef2b166986f2d837ad6cee688998bf9ae22bf8576a3f374c72962c09a60092fefc141e739411d229eea819fa52c
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl8AQEc385:c+8X9G3vP3AMWMi85
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-25_8d00995aef98d16426f8041a7a1b7e6b_mafia_JC.exe
Files
-
2023-08-25_8d00995aef98d16426f8041a7a1b7e6b_mafia_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ