Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_448d4a47bf91939e15523d5bf5f9a929_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-18_448d4a47bf91939e15523d5bf5f9a929_mafia.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-18_448d4a47bf91939e15523d5bf5f9a929_mafia
-
Size
468KB
-
MD5
448d4a47bf91939e15523d5bf5f9a929
-
SHA1
fd8bba3c15bc8f894148152e2d24a25364ec5acc
-
SHA256
064576cb68e6c3cad1154a90cc3420337b61f29cf88002c8a88ab0db04a861bf
-
SHA512
bb5e9b67f8f2d116e3cf04f37093e30ce1ac5474d60ef4f94289d409519c1eb466c7e5e2cd5f070042e00ecbd52520b2681afabd7fecd50f2a4b6de23439d427
-
SSDEEP
12288:qO4rfItL8HGOtEohao2paQMIrYRs+H9vQ5DSAf7bWmeEVGL:qO4rQtGGwkn4Rs09viSMumeEVGL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-18_448d4a47bf91939e15523d5bf5f9a929_mafia
Files
-
2024-02-18_448d4a47bf91939e15523d5bf5f9a929_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ