Static task
static1
Behavioral task
behavioral1
Sample
2024-05-04_a75684cbe72d1107ba7b84e04cc0cb83_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-04_a75684cbe72d1107ba7b84e04cc0cb83_mafia.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-04_a75684cbe72d1107ba7b84e04cc0cb83_mafia
-
Size
43KB
-
MD5
a75684cbe72d1107ba7b84e04cc0cb83
-
SHA1
99d4cab9b2777c6b53f11b4ddb8376ae564c810e
-
SHA256
b3f229da1df2d18fb043756d4179b294ef936e01aad2a07a52d20cfafe37d1e4
-
SHA512
51a1ddb225398c41ee797319565c8eaf48617764f27f5d33dc05f681e1a7508e298109657a8c53f9174ee66ff4b63a1505bffaa6e3fc06fbfd73daaef91d3dd2
-
SSDEEP
768:rivqm8p5co90eHvmz0UH0JEDVlFu/luGWulq7UvAR4WRzVDJe:riw8oV+wB8Zu/lDVlYUvY4AXe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-04_a75684cbe72d1107ba7b84e04cc0cb83_mafia
Files
-
2024-05-04_a75684cbe72d1107ba7b84e04cc0cb83_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 545KB - Virtual size: 545KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ