2024-02-01_5a6397677311ab0ea7a4053d300c7b95_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-01_5a6397677311ab0ea7a4053d300c7b95_mafia
Size

855KB
MD5

5a6397677311ab0ea7a4053d300c7b95
SHA1

0f3ec95dcde5c51e6dc6db1fc30fea1724f53697
SHA256

2e0555ff48c3d4f9e295597ec7291bb0491007ba3af0ec0f063f110267da6ca8
SHA512

c7cdb86ff73655be6dc9ab644dda1c5f01e8d6badcfee46b4dc52aba174ba0bd0f3a969324cc38b9e0ff275ac54b59e7dfa94760364f09c8d33b119112c690b2
SSDEEP

24576:gaXLHh5NAvxO2M3YlWEVQnvd0bM417icn21hWBMPTf:/HZ3kWEVQd0bM41dn21hWyf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-01_5a6397677311ab0ea7a4053d300c7b95_mafia

Files

2024-02-01_5a6397677311ab0ea7a4053d300c7b95_mafia
.exe windows:5 windows x86 arch:x86

daadd1fbd8a7aa95a995761381822d0a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
LocalAlloc
GetModuleHandleA
VirtualProtect
LocalFree

Sections

.text
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ