2024-03-06_f714a7b818e515203bd351b766d00481_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-06_f714a7b818e515203bd351b766d00481_mafia
Size

487KB
MD5

f714a7b818e515203bd351b766d00481
SHA1

3e005e778b2ab8f7f26d4733ce5860d29085151f
SHA256

666939aaa500e5c0c9ce169b29f86d99264f0a3b6a88881afe1e170c46c26272
SHA512

c66de7661a289fcc0b906cd2f353d2be8d7098d2957ca570c2ef5764b539a3ecbbafd14fa050d46329ee708a64cb565261caba84bc5a75a1e90ee384ecc1c004
SSDEEP

12288:BvOos7XPOkGFQ/ujd+GMv9OaVsU86EM4Shh8AW:BvOZ7nGm/Yd+GM1aL6EM3hpW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-06_f714a7b818e515203bd351b766d00481_mafia

Files

2024-03-06_f714a7b818e515203bd351b766d00481_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 274KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ