2024-04-06_6bb7022727ac3e9525513ada648b7a92_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-06_6bb7022727ac3e9525513ada648b7a92_mafia
Size

436KB
MD5

6bb7022727ac3e9525513ada648b7a92
SHA1

c3f784d861812c457d88f81d286dfb993f0e4c36
SHA256

9273135537e825d558ecfb28d4bb163fbad578123a773556a31ef331a0a037a5
SHA512

afea8f3463d45715bbd392ce286ecd05c1df3522fd5edeac4e3c2971755e97f1826ea9f0073656b92102b59fa19452a817041dbae877f4189e4247ab57000145
SSDEEP

12288:aO4GfBtL8HPbFmMt1w5pyQ4A9VYNkO1I17t6:aO4GZtGPbd3K4A9O1I1p6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-06_6bb7022727ac3e9525513ada648b7a92_mafia

Files

2024-04-06_6bb7022727ac3e9525513ada648b7a92_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE