2024-04-10_1a4197e0d2b31d3d4f0cd6432e464f3b_mafia | Triage

Sharing

General

Target

2024-04-10_1a4197e0d2b31d3d4f0cd6432e464f3b_mafia
Size

486KB
MD5

1a4197e0d2b31d3d4f0cd6432e464f3b
SHA1

3e264451929088851379eec0e5077085f4ba8916
SHA256

ed49a0f9064f4cfb94b842ccbba6e1661c3cff058f40e09db8aebfa182d64df0
SHA512

a07b13c07ca4ed17674c42bdfeaf727237e7f48873c5134bdd1ef22315376103eabdba722261eee1e30f64e1275a38e4d4a49614caa7260b74179ad9b3ee14d3
SSDEEP

6144:Sorf3lPvovsgZnqG2C7mOTeiLfDJv1v9JS3qLfszQlKwN3EXUR4TW9LBXb8kAlHu:/U5rCOTeiDd1+3qLfs8lkYouOkab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-10_1a4197e0d2b31d3d4f0cd6432e464f3b_mafia

Files

2024-04-10_1a4197e0d2b31d3d4f0cd6432e464f3b_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ