Behavioral task
behavioral1
Sample
2024-03-01_5ce118fc507a0dc06550cd11eca8a514_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-01_5ce118fc507a0dc06550cd11eca8a514_mafia.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-01_5ce118fc507a0dc06550cd11eca8a514_mafia
-
Size
5.1MB
-
MD5
5ce118fc507a0dc06550cd11eca8a514
-
SHA1
0d89aa409a56693c9eb59cf36fbf561b0580c364
-
SHA256
2cc2339e108f5f3237ab9459fd475e77f4399f259fd623a3912826eec83b70bd
-
SHA512
f31a09e1a24d50fcf83950d18085987358c1419f1861779349360108a779e402afb7fd8bcc603801122457846d97d8a66463679616a644843b9bcff65405f3bc
-
SSDEEP
98304:XpG4Q0v10ltLBCOyHwXPQCvWq/+WDSg58hnkL1x5EftwgUsexrDaFmGdUEFJsv66:X/otHzPJW6R58hnkn2ftwgUPDdKFJsv1
Malware Config
Signatures
-
Bruteratel family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-01_5ce118fc507a0dc06550cd11eca8a514_mafia
Files
-
2024-03-01_5ce118fc507a0dc06550cd11eca8a514_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ