2024-02-17_49a5849b8f975043cf261bf86347575e_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-17_49a5849b8f975043cf261bf86347575e_mafia
Size

6.9MB
MD5

49a5849b8f975043cf261bf86347575e
SHA1

c4d4c2dede7b498d6376f9e3863d1c3b711d937e
SHA256

c312958aec3ce21f3f426c575ca60c19a3d719fbe8b48f6cb5a1bf573486b95c
SHA512

970d00e11a42fb377d5a70eb701489c3967655ee3c31f18c63adb458b75f746b490166da851ff7ac172311337f01a106e18065a75bb56828c10a4a10631b1322
SSDEEP

98304:mwSo85ECTfQgA/Ha8vg8iB49w3X37k8t5gpTGewOVFD8Gj2SlLka3A:diEjZg8iBFHYo5gpTGewvM2aka3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-17_49a5849b8f975043cf261bf86347575e_mafia

Files

2024-02-17_49a5849b8f975043cf261bf86347575e_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 621KB - Virtual size: 621KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ