2024-02-12_79c1b125e22eab6f44771e3b7b993879_mafia | Triage

Sharing

General

Target

2024-02-12_79c1b125e22eab6f44771e3b7b993879_mafia
Size

487KB
MD5

79c1b125e22eab6f44771e3b7b993879
SHA1

6c4b6bcfbc949f36f80ae125a86289d66fd949de
SHA256

d52da68592b5984878b83eec2212c2bea244ffa24f453d845a738133ec3dadad
SHA512

d0d564bfe87f758b3aa243150ab8630e9f6bd00f4f0c7c3135c0aa465524013c4b2d06a438c2e69bdbca8b293cda8cb86343269da15e7bbb7ab8117a007603c8
SSDEEP

12288:BvOos7XPOkGFQ/ujd+GMv9OaVsU86EM4Shh8AR:BvOZ7nGm/Yd+GM1aL6EM3hpR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-12_79c1b125e22eab6f44771e3b7b993879_mafia

Files

2024-02-12_79c1b125e22eab6f44771e3b7b993879_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 274KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ