2024-04-16_561306196a641f31962f9e6b14cbed21_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-16_561306196a641f31962f9e6b14cbed21_mafia
Size

414KB
MD5

561306196a641f31962f9e6b14cbed21
SHA1

ded8a9411b60f62fbd690eea0b22556b2f381379
SHA256

3f6a3481978f3e82bbd41146e9490a63f4d33a82a657c527b91b07d8bf29a7dc
SHA512

8981c45b60a3ad4bb37b54ccefa7e7107e481d8bbb3610cd1eb86db403e7cbab38d72a9c04497f73814c3e6874bf27639983ea07e7338db93d8fc9ca12a8f6a4
SSDEEP

12288:Wq4w/ekieZgU6jQgqFLrXwadispoqtk6ucX:Wq4w/ekieH6jWLbwadisaqt0W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-16_561306196a641f31962f9e6b14cbed21_mafia

Files

2024-04-16_561306196a641f31962f9e6b14cbed21_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 218KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ