2024-04-23_deb57350f89eac09b30e1c506fc8ced0_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-23_deb57350f89eac09b30e1c506fc8ced0_mafia
Size

3.3MB
MD5

deb57350f89eac09b30e1c506fc8ced0
SHA1

8ebae9bbdb30739d6e54223dfc1fa45df1011829
SHA256

7702fddf2bf459c3e3b796069e38450d614ab92d36644c69e5254399801ec1dd
SHA512

d1a9cb67b068b4ffdae6f80cafaae9f0d5d1ee1efd56dbc2220027f05370ea0d2f8f8034f1dbddfffbec8ad71c0824a0ae6ca811dfaf97374f4df3389d7862a6
SSDEEP

49152:qpnYAsPs13ppIH929Wwr6ipLsRPjT+VHFYZwQuKlKuuG:qpnYAsE1XWq6ip8bOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-23_deb57350f89eac09b30e1c506fc8ced0_mafia

Files

2024-04-23_deb57350f89eac09b30e1c506fc8ced0_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ