2024-04-19_abe3aeade96d57317ea2dfd3bbfaa930_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-19_abe3aeade96d57317ea2dfd3bbfaa930_mafia
Size

218KB
MD5

abe3aeade96d57317ea2dfd3bbfaa930
SHA1

c7691c7be6f2da0fa9af9d166023f7bbe9cc380a
SHA256

717da9a27b7f991dc3ba4ba55c13368eba9ad8b65d23d49b80ae2bd323531f35
SHA512

09282e440a8377a991619c183b7ef96862110231ec6cfc8caaf11e4d6d05a1dc84940beeac9fe593605cdcf5c7e8a72d490fd9dcec0e370fa5aed25ddde78799
SSDEEP

3072:HA/M9bsNkQgkHKNpokAXJhC36FbGi5ZQfWz6rsiRnQqrzQHp1HR5cBEXiL:HqMC5gBotXLy6Boez6I2nQqrMXHRhyL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-19_abe3aeade96d57317ea2dfd3bbfaa930_mafia

Files

2024-04-19_abe3aeade96d57317ea2dfd3bbfaa930_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.{865771
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.extjmp
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

[V:?4\
Size: 512B - Virtual size: 64B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE