Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_adca2c23e00fe1ade9ffb42e8979eba7_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_adca2c23e00fe1ade9ffb42e8979eba7_mafia.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-22_adca2c23e00fe1ade9ffb42e8979eba7_mafia
-
Size
448KB
-
MD5
adca2c23e00fe1ade9ffb42e8979eba7
-
SHA1
f2539fc777b8fcb3e50819ca0e5291aef7e4f191
-
SHA256
83045f015fd2c68b45ef95e824a9e0e96ae9c562686809ecfaebab8a01b7b1f5
-
SHA512
16b25087f5860a8116f11463519fec817a9aa9d0a4d798a13fb0629cef234dcd167b9352a74612f96638b760f916d829ccce673553bb6fb07cf88da2b6d4bb44
-
SSDEEP
6144:3FrJxvldL4c5ONK1tgRbd1s79+i5+DRNfpWUqUoIkWgQ81MnS9Ssaisn1AS2S3QD:lb4bBxdi79LqRirbzWgQWJSFisnHiWlk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-22_adca2c23e00fe1ade9ffb42e8979eba7_mafia
Files
-
2024-04-22_adca2c23e00fe1ade9ffb42e8979eba7_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE