Static task
static1
Behavioral task
behavioral1
Sample
2023-08-25_d1257d5f8116ab93b2e65515d9fb8649_mafia_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-25_d1257d5f8116ab93b2e65515d9fb8649_mafia_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-25_d1257d5f8116ab93b2e65515d9fb8649_mafia_JC.exe
-
Size
2.9MB
-
MD5
d1257d5f8116ab93b2e65515d9fb8649
-
SHA1
f06589080f81576068900fc9f4c0cf6f724047b9
-
SHA256
a2fc3469954943cd9736ab3df5346e76144b3952eead758111ca5c6378f70810
-
SHA512
99456139ca8d934372c595ac07d151b0860ffd722dd7e53a4d268b4611e5b3b273ea1d6967e87bc62666c21be5ff778b5448150ed12d9ab8ac057133f8ad9295
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlhruffC82Y:c+8X9G3vP3AMefC82Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-25_d1257d5f8116ab93b2e65515d9fb8649_mafia_JC.exe
Files
-
2023-08-25_d1257d5f8116ab93b2e65515d9fb8649_mafia_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ