2024-01-26_38823b839c4c552b56ec6cd2a88b6846_mafia | Triage

Sharing

General

Target

2024-01-26_38823b839c4c552b56ec6cd2a88b6846_mafia
Size

472KB
MD5

38823b839c4c552b56ec6cd2a88b6846
SHA1

01f68bc7c41ce0cedc2a140c04b3ab8d73184fc2
SHA256

dbb038fe7f3e7fe98864a2ec294d403941c4373e9fcce7560ea75019f116ca87
SHA512

d69596478d03eb4d4874cf39a07181cb016839dfc47e67721d1e1c9ad788c9c30d3d8e902730ce3fb7ca3616411c48f7b5e562e19df6e86e7445bf3a9b09db7f
SSDEEP

12288:0O4rfItL8HJFS/N4v8NPQYox1vk2vriYHHqRuAg0:0O4rQtGJcNC8N1oxGYHKRuAg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-26_38823b839c4c552b56ec6cd2a88b6846_mafia

Files

2024-01-26_38823b839c4c552b56ec6cd2a88b6846_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE