2024-04-19_3f3a80aa22020d5af77b92eb2f503c66_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-19_3f3a80aa22020d5af77b92eb2f503c66_mafia
Size

486KB
MD5

3f3a80aa22020d5af77b92eb2f503c66
SHA1

56a05c364dfcb110419783150a0f8156c2e6fbc6
SHA256

c15729042a37274431978d1109a896a48764f9c820ae36d18b7c0f5b409857d8
SHA512

461974830ba35900f493e1a3381f583de5658be1f0222b67f755e3c1481ba310c16afbe383c5860d384301001e47e63cbf1b59aab8f1397ab526eeef160e223f
SSDEEP

12288:/U5rCOTeiDxKkahe9+kwr40tX644iZux:/UQOJDxKkahTkAh64Vux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-19_3f3a80aa22020d5af77b92eb2f503c66_mafia

Files

2024-04-19_3f3a80aa22020d5af77b92eb2f503c66_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ