2024-01-18_79b1956254c7c3a492aba7552415536f_mafia | Triage

Sharing

General

Target

2024-01-18_79b1956254c7c3a492aba7552415536f_mafia
Size

312KB
MD5

79b1956254c7c3a492aba7552415536f
SHA1

6d70b5f4b215d4110aa9cfeb4fe396e79909f286
SHA256

5d503b2b63afc782923ad1a62b00582b9dc669bd1f0cf300328bd0199e1d88b8
SHA512

2cdfde4815e4aadc395ce512320dd0aac11b13ecdd8e4ec125231c4775fd74a20730868304a2ef491b542938e1e92f1bc5805952da9afdf99fc752c01214fd47
SSDEEP

3072:QUYIuox+akMd89BlZWVhWhP3FQ4zpfDluJWsAPcz5oqyQH16E+HeD:QFocMd8veV+VQSDuWsAPcFUQQE++D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-18_79b1956254c7c3a492aba7552415536f_mafia

Files

2024-01-18_79b1956254c7c3a492aba7552415536f_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ