Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_79a830e0cd3fcb21fcbcac5adc38d6b8_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-03_79a830e0cd3fcb21fcbcac5adc38d6b8_mafia.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-03_79a830e0cd3fcb21fcbcac5adc38d6b8_mafia
-
Size
476KB
-
MD5
79a830e0cd3fcb21fcbcac5adc38d6b8
-
SHA1
3fc6a0cb0d12bce643e31adb512148c6e7c01ce6
-
SHA256
1c5632aa72ed6d91cc5716487cc65a5284abff822d111c73e166bda4a1e9e03c
-
SHA512
6bda1584242e85b52f08974a7c9a63c1d48442fac6a5e7267b1bf73bc567e90bd2bf94284988b42c53035b9d9ef3068105f80fd27a34e8cfb1ea21f9b52758db
-
SSDEEP
12288:aO4rfItL8HR3Njbbxd+k5FfZEc2Av02f7K9wlsDpVFd:aO4rQtGR3JxdX5FfHHc2f+9wlsDpVFd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-03_79a830e0cd3fcb21fcbcac5adc38d6b8_mafia
Files
-
2024-02-03_79a830e0cd3fcb21fcbcac5adc38d6b8_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ