Static task
static1
Behavioral task
behavioral1
Sample
2024-01-10_20e46c7e4b501dffc82ee0d6fa90e0ee_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-10_20e46c7e4b501dffc82ee0d6fa90e0ee_mafia.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-10_20e46c7e4b501dffc82ee0d6fa90e0ee_mafia
-
Size
476KB
-
MD5
20e46c7e4b501dffc82ee0d6fa90e0ee
-
SHA1
5e38e223fb14c3c52ec21b63e74097c3f03141ab
-
SHA256
9014c483d9cb0147e89a3fdd1d591d798256cb64a47b6ac1cd884875e4517081
-
SHA512
c81b7c0f6ab6720bb6a2506ec344ca3de26fdbe71a1ce661a1c74a600082e83ff90b7f1fee7dc784a2e891118be0756a4e32056d2318f1e716cb6a945503f669
-
SSDEEP
12288:aO4rfItL8HRQnYmp4xpT5S049Rwo/GL7K9wlsDpVFd:aO4rQtGRQnY4KnSMvL+9wlsDpVFd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-10_20e46c7e4b501dffc82ee0d6fa90e0ee_mafia
Files
-
2024-01-10_20e46c7e4b501dffc82ee0d6fa90e0ee_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ