Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_2f2db36d8c7aea2f9a181bfa3a575551_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-19_2f2db36d8c7aea2f9a181bfa3a575551_mafia.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-19_2f2db36d8c7aea2f9a181bfa3a575551_mafia
-
Size
479KB
-
MD5
2f2db36d8c7aea2f9a181bfa3a575551
-
SHA1
a158da8f8b2c3ad344be87daf295b530b635764f
-
SHA256
c5e992a8f4c889d8194e288f935432bc36f164b50c9857732f769ba3ae9aaf14
-
SHA512
bb1f8e798e038fdf1a8f812d4ca033cc07cf5f06cccf1d2c7b3435fced7311a59c6ecca30018004d08d0a95f97df31b573e434532ae988766462acd1e696b95a
-
SSDEEP
6144:b9EyS4oMxIkjxcWqHtg88HARRgFURUq5p6YizmsLe3p34JpEagsxraJoqU75UNY:bO4rfItL8HAiUuyZiz6B8AsBaJo575UO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-19_2f2db36d8c7aea2f9a181bfa3a575551_mafia
Files
-
2024-03-19_2f2db36d8c7aea2f9a181bfa3a575551_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 257KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ