2024-02-24_99ef42f05759d75ad0e6a9fad511d962_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-24_99ef42f05759d75ad0e6a9fad511d962_mafia
Size

1.2MB
MD5

99ef42f05759d75ad0e6a9fad511d962
SHA1

b8ce1043417631360ebf944de9bde703377f2d99
SHA256

b60ed02eed317c319996b51c666d8545acf6e503487038d32bca3233b44e9396
SHA512

eecc2e89e79e27466b50fefb30a5a9a2c6da88eab0c11186d4fd4e82dbc4358ff91acc188dbad92d0264fa5071e5e8a34914e00f2d5b8aeb01eb56f8cfc60b0f
SSDEEP

24576:0MAbKdU3ogWEpZULMgehx8oqgiXF5nw2fPDHIdWAEViIYUJvL4UyAshhcxYGPsx7:/U3on6ZdgehxD0XF5nw23bIXQYU3yAsF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-24_99ef42f05759d75ad0e6a9fad511d962_mafia

Files

2024-02-24_99ef42f05759d75ad0e6a9fad511d962_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11.7MB - Virtual size: 11.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ