2024-05-15_bdce822352ac10829f357e7aa62b243d_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-15_bdce822352ac10829f357e7aa62b243d_mafia
Size

712KB
MD5

bdce822352ac10829f357e7aa62b243d
SHA1

7a4147c08e6855cd755ec58beae5f1c4847b44de
SHA256

a7dde1ca87a5de15ca8b991fea2e9e3d3a62403b08f5c8339c0863f38610e852
SHA512

46ad2a526b4590ff71478ba0e641457585b1ae131d2440ec6b58cba748fea756badf9577769f01bb1d682f5622f957a067a3cd6589a7dcdcaf4836d9b80a414b
SSDEEP

12288:FU5rCOTeiDo4Q/W2HN1CfZ4nLgmZ9hv8adNZdCvq5TJLCvY90D8/LVBlVk736Y7k:FUQOJDh+WRZyd82NnCvq5TJLCvY90D8N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-15_bdce822352ac10829f357e7aa62b243d_mafia

Files

2024-05-15_bdce822352ac10829f357e7aa62b243d_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ