2024-01-28_329c411365b6fdd28fe0ee6870a42030_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-28_329c411365b6fdd28fe0ee6870a42030_mafia
Size

5.4MB
MD5

329c411365b6fdd28fe0ee6870a42030
SHA1

2c0e52aa3065a42380760961e76ced5a9de8311b
SHA256

ef4733d108a8c1cad04da38646934abbf79ae72b671a891053c83ac1af9292b6
SHA512

69ced823d88941001b325079e82c4cb57d0f4a1d9a7cfabf590ee3a8b1c45f48ea12057a9ecb790c4b67edb4feff914075131ca03050e1eeafee4bda45ad09a5
SSDEEP

98304:wHsGjCfYKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87aW7tW:8O+CyzPpCLA1qf/1qf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-28_329c411365b6fdd28fe0ee6870a42030_mafia

Files

2024-01-28_329c411365b6fdd28fe0ee6870a42030_mafia
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ