Static task
static1
Behavioral task
behavioral1
Sample
2024-02-01_86a810cc90712d449aacad05f76f612b_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-01_86a810cc90712d449aacad05f76f612b_mafia.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-01_86a810cc90712d449aacad05f76f612b_mafia
-
Size
855KB
-
MD5
86a810cc90712d449aacad05f76f612b
-
SHA1
28a2b580a56e7dde88135bd89a4e59ce6f47dd0c
-
SHA256
eee92ad60093c6284d163560563dd741e9d5e5190d6c3a14fe92034b33e2c53a
-
SHA512
3b52beba5b2eb41a4e122a68c3bdc5d01387a87154e2257446699455f88532ae9a7f2f401301fbcd817fd19a5819286a5a4232aab8d0c7a4d1ed2b65dd01d7bb
-
SSDEEP
24576:E3sBfLy/pVOHf+GcIHZsoDtT044v9Micn21hWBMPTf:jLjFHZsCT044v98n21hWyf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-01_86a810cc90712d449aacad05f76f612b_mafia
Files
-
2024-02-01_86a810cc90712d449aacad05f76f612b_mafia.exe windows:5 windows x86 arch:x86
daadd1fbd8a7aa95a995761381822d0a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
LocalAlloc
GetModuleHandleA
VirtualProtect
LocalFree
Sections
.text Size: 475KB - Virtual size: 475KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ