Static task
static1
Behavioral task
behavioral1
Sample
2024-05-07_58fd2d4cbe767456632631b2f0b13883_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-07_58fd2d4cbe767456632631b2f0b13883_mafia.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-07_58fd2d4cbe767456632631b2f0b13883_mafia
-
Size
536KB
-
MD5
58fd2d4cbe767456632631b2f0b13883
-
SHA1
e436c897ff9d0501728482e1a3d43b6f8c4e76ec
-
SHA256
5d0197ebf76fa5c365eeaef7a82295f15031270300ede3b54df0a7f55715cb46
-
SHA512
09abb627db46569f19ceaaf413b892ad711eb02a4da6decd85a538406e4545bd40b5ea1f326da1c8a4037f305f2c9c20114d52d1773f38a72ee53f40dd4a6987
-
SSDEEP
12288:wU5rCOTeiUQ34y+6GGWOpf6WLYSPLfugjfL4ycIZxVJ0ZT9:wUQOJUAho63LfukJcIRJ0ZT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-07_58fd2d4cbe767456632631b2f0b13883_mafia
Files
-
2024-05-07_58fd2d4cbe767456632631b2f0b13883_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ