Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_221277d8c2d8bec2109202418fdd1519_mafia.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-09_221277d8c2d8bec2109202418fdd1519_mafia.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-09_221277d8c2d8bec2109202418fdd1519_mafia
-
Size
5.2MB
-
MD5
221277d8c2d8bec2109202418fdd1519
-
SHA1
911f462f924ef3e8ec29bc432fc2a5df8df04c20
-
SHA256
8de563e0d6ea2de0955a4ad0db65486b87711e33696e338f04ec759a51099500
-
SHA512
a01a315a6a2a88e275ac63e22cdf085da7476c38674eec7d8cd7f09234f271cb4df5889aa02dc581916fe946b5b99e00f8e106735f9b26911d184689b444a805
-
SSDEEP
49152:bKn0UTtO8S9lZqhaK6zbfqdl0qnstLet3LyvDzx:mNaxZqnstLEoDF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-09_221277d8c2d8bec2109202418fdd1519_mafia
Files
-
2024-05-09_221277d8c2d8bec2109202418fdd1519_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ