2024-02-01_a3581f3ae53d23cd0fb73630bb90e1b4_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-01_a3581f3ae53d23cd0fb73630bb90e1b4_mafia
Size

855KB
MD5

a3581f3ae53d23cd0fb73630bb90e1b4
SHA1

1c137c705086d64753c131147aba4e0619728c41
SHA256

9dbac2b2130084c31296b0f5d45bd4c2e22e96fa35fe7407938273600ffe4f23
SHA512

e0726f7983e44128671960f92070cb8909d0ff080c56b25f6a4f90a609d813fe65ed5cce9daa98499b557773f1aa1f2a3720d8e094c0e4d5e1fab9e186c8e01a
SSDEEP

24576:cSXrXHRlh9mFFo6GEjMG7kDbh0Y4JIicn21hWBMPTf:/XZaMG7Mh0Y4Jgn21hWyf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-01_a3581f3ae53d23cd0fb73630bb90e1b4_mafia

Files

2024-02-01_a3581f3ae53d23cd0fb73630bb90e1b4_mafia
.exe windows:5 windows x86 arch:x86

daadd1fbd8a7aa95a995761381822d0a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
LocalAlloc
GetModuleHandleA
VirtualProtect
LocalFree

Sections

.text
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ