2024-01-18_eea75c8949865db3de46fb618972dc55_mafia | Triage

Sharing

General

Target

2024-01-18_eea75c8949865db3de46fb618972dc55_mafia
Size

3.8MB
MD5

eea75c8949865db3de46fb618972dc55
SHA1

2e60b8e6b108e0bbf2a2cc87a428303fbc62b327
SHA256

b0e8d37def3b7f5b20cbcd8fc1f7262477cfe4043db09f516e73a70dd1186c45
SHA512

c1cf4b104d559dc2cda322ffb0c71af841aa90cb36ffcab1094f572fbdc9af9600082d27d00becba8a8c347338b5080d2a475554383c655c657b2ab3c7b5f746
SSDEEP

98304:yMk5q0QcSgSMR4Z2Ed+v0dccsUzmKmJkpiDCFe0IbJYvasabP/3:hks0Q1MYNmpkINUasabPv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-18_eea75c8949865db3de46fb618972dc55_mafia

Files

2024-01-18_eea75c8949865db3de46fb618972dc55_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 763KB - Virtual size: 763KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ