2024-05-15_94d489bd77dfb83beacc8c806b59f1ea_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-15_94d489bd77dfb83beacc8c806b59f1ea_mafia
Size

712KB
MD5

94d489bd77dfb83beacc8c806b59f1ea
SHA1

500579e4079108d38d8d48dc57412fc1b060078e
SHA256

856334688b3691c5048a11d3f0507e7d8d4c6a44335b1179191f1676cb3ebc88
SHA512

1e6b3f09bbd75f0a23441c7254de299281b6d6a597bfec72b89e1ab9c31e5e7490c1ca90b58dbf2ef0def1530575de1ec1ee6a669e011f71dea934d8db18f2ad
SSDEEP

12288:FU5rCOTeiDWtRrRecp0L8rl8K2tAjO9uNZdCvq5TJLCvY90D8/LVBlVk736Y79G5:FUQOJDCdeq0sWKFO8NnCvq5TJLCvY90E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-15_94d489bd77dfb83beacc8c806b59f1ea_mafia

Files

2024-05-15_94d489bd77dfb83beacc8c806b59f1ea_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ