Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_d85f99f9da564f4cb80265c473524728_mafia.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-05_d85f99f9da564f4cb80265c473524728_mafia.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-05_d85f99f9da564f4cb80265c473524728_mafia
-
Size
476KB
-
MD5
d85f99f9da564f4cb80265c473524728
-
SHA1
81f98389804279b93e63c0b7726dcfe0b16e1b19
-
SHA256
a97cd2b183d6334a3154f8d9c7a348d64b4c73a535ffab616ff3acafce246763
-
SHA512
6742271fef1d05a90f01a5a4630ea4f76a66ca63544203d336db84daa67dacac2731b208fa03c643c8740185cf99be8d839e0f6932f4f7a2a2939e89558288ea
-
SSDEEP
12288:aO4rfItL8HRLUARneti8KOq6RpaRC80rEFF2R53c7K9wlsDpVFd:aO4rQtGRLxfnOXpaRC8n25M+9wlsDpVT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-05_d85f99f9da564f4cb80265c473524728_mafia
Files
-
2024-04-05_d85f99f9da564f4cb80265c473524728_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ