2024-04-19_297bad294f2e7947775a2ff5841ba38b_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-19_297bad294f2e7947775a2ff5841ba38b_mafia
Size

213KB
MD5

297bad294f2e7947775a2ff5841ba38b
SHA1

b5acd99253e5dc1efa80f2827f3767e1fad84393
SHA256

1f46a9de0d6e800cc57f180fbf8a8c32875ee69b45ce6f98d926d57fd44a058c
SHA512

f33a3931e53d6973b3eb9a807c46d247853fd7563979cef627b0198fe14a9aabd429b2eda8a4d9c93c595ed9ad5660db73bc88b91516384ed73e52c7d91a10bc
SSDEEP

3072:YA/M9bsNkQgkHKNpokAXJhC36FbGi5ZQfWz6rsiRnQqrzQHg1HR5cBEs:YqMC5gBotXLy6Boez6I2nQqrM+HRhs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-19_297bad294f2e7947775a2ff5841ba38b_mafia

Files

2024-04-19_297bad294f2e7947775a2ff5841ba38b_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.{865771
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

</vYc7
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

oK3J0W
Size: 512B - Virtual size: 256B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE