2024-04-28_6d7b5fd044a1c344d703ce03d58cfdf0_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-28_6d7b5fd044a1c344d703ce03d58cfdf0_mafia
Size

1.9MB
MD5

6d7b5fd044a1c344d703ce03d58cfdf0
SHA1

d78d9e2d7b8e382ebe7469be73d30e2aa6c93e43
SHA256

cea6d23299a9d1bad11daa615e6bd18912689428acadf654b6fbcef1358d7a8b
SHA512

ed3f18200e9726f580e336836194d38aa9f1fd5ffcc0d735d241c92e576962c7c128153961690b95031fcce09c8658858fb7ffeec5fa7591659001bad7d17e48
SSDEEP

24576:OU2tYXd6uZShYE5Hc1LEWpbtsDQIZDpGhKVD5Cm:O/tYN6uZzE5ULEWpbtsDVGhKV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-28_6d7b5fd044a1c344d703ce03d58cfdf0_mafia

Files

2024-04-28_6d7b5fd044a1c344d703ce03d58cfdf0_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ