2024-02-29_12d34328263fe123ca847e7805d26584_mafia_revil | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-29_12d34328263fe123ca847e7805d26584_mafia_revil
Size

3.2MB
MD5

12d34328263fe123ca847e7805d26584
SHA1

642da90325256c29c59f35bcc1944e288645ecbf
SHA256

7bc2d1ee69ab10b3e573859f089ef4d5d3817ede3d6e4b0e3f23283d00ba30a7
SHA512

b25450e40f012043c1ae13b1cb4892d1044cd44f6cadb34069a498a35fe227c26b6dab85030d7b418efb044050975715302d912ed6aecca0580b8847015dcbf4
SSDEEP

49152:TI5E7Pz9xqfxTmigyKGLtPP16Dw+N3p5NmTX5n8vmGK+VyhOWh:TOE7Pz7qfxLtkDnNHGj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-29_12d34328263fe123ca847e7805d26584_mafia_revil

Files

2024-02-29_12d34328263fe123ca847e7805d26584_mafia_revil
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 622KB - Virtual size: 621KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ