2024-04-25_2869ed66fc6c091a5bd453984fad9923_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-25_2869ed66fc6c091a5bd453984fad9923_mafia
Size

2.6MB
MD5

2869ed66fc6c091a5bd453984fad9923
SHA1

65497e84a31e9a417d5d91b9318aa6aceaa3ae7e
SHA256

dcb10570841e79d6e29f9c9376d1829e940d6c007c4c297cdbaff9e086015320
SHA512

dec781da0db4e67d01757697b3a641c9c513a558aeec71c9c597fc8f9e973807753cbadd2729639980d51ba6769a4f40a4277c23fac5a97b16bc315419124025
SSDEEP

49152:wwnNTBmnTDNKxC9Y5lpuGIPQxMXj8iuF2QJ4O8b8ITDnlv:fKgxC9Y5lpuG8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-25_2869ed66fc6c091a5bd453984fad9923_mafia

Files

2024-04-25_2869ed66fc6c091a5bd453984fad9923_mafia
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\Target\x86\ship\setuptools\x-none\Flattener.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ