Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_281f8f0cbeb3f6b4ae7b158c15bf98e0_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-24_281f8f0cbeb3f6b4ae7b158c15bf98e0_mafia.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-24_281f8f0cbeb3f6b4ae7b158c15bf98e0_mafia
-
Size
712KB
-
MD5
281f8f0cbeb3f6b4ae7b158c15bf98e0
-
SHA1
6fd4306fe39030d6d0c6bbd2b0d00a95255dc0ca
-
SHA256
d28f8cff5b92129b95ff4e5b83ccd0f61cf2c898f92b5dfc18af13b49ab35e10
-
SHA512
89b8a249199ac1d2df5f2c57a3aa9cdeecb6628a6f4cfe6085113b862c3d94252cd786c515a997cc0fc5392425832dc81e5865d205bbbfc5a1836a5c097b8291
-
SSDEEP
12288:FU5rCOTeiDyoE2exhu3xMZGJ0WyApwMGNZdCvq5TJLCvY90D8/LVBlVk736Y79G5:FUQOJDyJ2sI3xMiSMGNnCvq5TJLCvY93
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-24_281f8f0cbeb3f6b4ae7b158c15bf98e0_mafia
Files
-
2024-01-24_281f8f0cbeb3f6b4ae7b158c15bf98e0_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ