2024-04-21_2460fa1670c4da26c12d63b6657b8d8b_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-21_2460fa1670c4da26c12d63b6657b8d8b_mafia
Size

13.4MB
MD5

2460fa1670c4da26c12d63b6657b8d8b
SHA1

1caeca206ee32294b47b155399e132633bb73916
SHA256

e9430ad9ae6987c2029edf270f6b1ae26699801ae595d2a93a454b2ea9b76179
SHA512

15c357843107147a96937d6016877029f963c47c95ac8d6b88f4301920540924daae163ac1dd366bff3eb3325b858fcbd6e2a9fbdbbf832bf32bbe53494ac7b3
SSDEEP

393216:EZRT1dK3sROLQ1iP0pmj4taHcOZGTwjSIG/EBpKZkWd:EZRT1dK3sROLQ1iP0pmj4taHcOZGwOIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-21_2460fa1670c4da26c12d63b6657b8d8b_mafia

Files

2024-04-21_2460fa1670c4da26c12d63b6657b8d8b_mafia
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\LabTechSoftware\Labtech Software-2012\LTSilent\LTSilent\obj\Release\LTSilent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.4MB - Virtual size: 13.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ