2024-03-19_42b40d94c49dd019a744bb7a518d1b92_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-19_42b40d94c49dd019a744bb7a518d1b92_mafia
Size

712KB
MD5

42b40d94c49dd019a744bb7a518d1b92
SHA1

556c92bae6a6c62299c06088c420310fc95a8a9a
SHA256

3efa28fc2a1d026d3bf013e47f85b26a92201e18717bcb94ffe75ba4d566ef4b
SHA512

28b41b0dfc4c3187bcfa208d9281ecf6cd5e5e9b8102273302d543e1795083b5fd4ebed4e81aad43652bdea71afc402e5437456aa038105ed81ad2113e6e0b82
SSDEEP

12288:FU5rCOTeiDmp98OEe57deI3xYbBN1NZdCvq5TJLCvY90D8/LVBlVk736Y79GWzN0:FUQOJDmp9XE8cwxKBN1NnCvq5TJLCvYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-19_42b40d94c49dd019a744bb7a518d1b92_mafia

Files

2024-03-19_42b40d94c49dd019a744bb7a518d1b92_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ