Static task
static1
Behavioral task
behavioral1
Sample
2024-02-02_9a2ffc142a149f4290a5d65412a5723c_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-02_9a2ffc142a149f4290a5d65412a5723c_mafia.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-02_9a2ffc142a149f4290a5d65412a5723c_mafia
-
Size
468KB
-
MD5
9a2ffc142a149f4290a5d65412a5723c
-
SHA1
8fd5076cc135ecf61d972f920eae0fc5ea6c2d77
-
SHA256
3b8cf2aa5c4fbd247cfaefe29521ac25523d0fc2d49d2f4171f9d80af058c01c
-
SHA512
b3f74cc3428af1c3cbb26796bf0d81f74f0c500bb099fe140e9ee16959be7a6112e3d7ed454e615c5990116f59f419ca83ccdfe0271a69913ef94d927e7d45b6
-
SSDEEP
12288:qO4rfItL8HGz5t5W+DjkPrMZx3fAtIn07bWmeEVGL:qO4rQtGGVtomjpZRoumeEVGL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-02_9a2ffc142a149f4290a5d65412a5723c_mafia
Files
-
2024-02-02_9a2ffc142a149f4290a5d65412a5723c_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ