2024-04-10_0d087fabe41ee16c99125d8ef0a44ecb_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-10_0d087fabe41ee16c99125d8ef0a44ecb_mafia
Size

414KB
MD5

0d087fabe41ee16c99125d8ef0a44ecb
SHA1

f1c184438c10b6cbf257606971b792854dda19ec
SHA256

4ba6351f6bbef9578d7a2542656bf94fc7ea40cef49da40533c625c8ab226a18
SHA512

f668f210b2b49bb194d3638f90817f85bd369f0cc16432b6128f7219c1ba3ae8f97a894b9e568679ae8903df7dd4df0d04ff323a72bdfc42d029237c39311889
SSDEEP

6144:Wucyz4obQmKkWb6ekie+ogU6zmHbjpfASorhAGWiKveA3N42DBVDjRiHxGslc1w9:Wq4w/ekieZgU62bjpfAtkvn4MnAHAsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-10_0d087fabe41ee16c99125d8ef0a44ecb_mafia

Files

2024-04-10_0d087fabe41ee16c99125d8ef0a44ecb_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 218KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ