Static task
static1
Behavioral task
behavioral1
Sample
2024-01-27_74c0cb7113db61cffcd666f0e2c5a16d_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-27_74c0cb7113db61cffcd666f0e2c5a16d_mafia.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-27_74c0cb7113db61cffcd666f0e2c5a16d_mafia
-
Size
541KB
-
MD5
74c0cb7113db61cffcd666f0e2c5a16d
-
SHA1
afb65d5baa1f319f4f8d4e4949153944f47e20e1
-
SHA256
5533fa18e7cefa2e63ef902fd86fe867e39353dcc7a1b9ec076c407879930ca9
-
SHA512
df2b19c97f893de4b1d9d87c6c7e7e1f1b97c3bfe4d5cd0a34ff95c334a071cdd304c9a014556c90c210c58d27128fcee2c43ea329b6905c4c3014658b84b2fb
-
SSDEEP
12288:UU5rCOTeiftSOKwQJ3xI/E0B9/2InrZa73ctO:UUQOJf3dgGpH+InrU73ctO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-27_74c0cb7113db61cffcd666f0e2c5a16d_mafia
Files
-
2024-01-27_74c0cb7113db61cffcd666f0e2c5a16d_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ