2024-02-28_c54916e6f9c39c7203188ed55ab391bd_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-28_c54916e6f9c39c7203188ed55ab391bd_mafia
Size

192KB
MD5

c54916e6f9c39c7203188ed55ab391bd
SHA1

e294d3cc79ce832c6d1c22eb47a77a6ffa5107a6
SHA256

8fc1fae8e47d09ab7a5574d1a3b09d1c0f35d6245b140ec49f59375cc279f043
SHA512

d9ba07965f58704476fa74926260aa1e66bc1bbd4fbbacc7ef29611b8abf0d96f9e94e442c8fa4e3dbbc3bb2f957eb3ac04606f7dfd7ce65488089d26536c438
SSDEEP

3072:ni1TlCN3DeL0dA/VkvpS6zpQDt0v2E6LGHxdOWTtDwqytR2TBf9AqqpUwIq:nslGXd4OvDzewKLGHj0qTBlznBq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-28_c54916e6f9c39c7203188ed55ab391bd_mafia

Files

2024-02-28_c54916e6f9c39c7203188ed55ab391bd_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ