2024-05-17_080291f978a55c70ff4ac3e9eced4acc_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-17_080291f978a55c70ff4ac3e9eced4acc_mafia
Size

466KB
MD5

080291f978a55c70ff4ac3e9eced4acc
SHA1

87e806c546c78618356cf5d27a10dd44ab541c58
SHA256

5709acf8ccf1d96ff8e5a430f6c022e560acc14a80266d176398dfab278a943c
SHA512

5cd4215a5c435550e21b966202a49dc6c22f44e2c5b1a2f4568e8516dee4336daa3e68fef90e5a21f53e2ae8f3700d32bec14c0f59f978107459d0e5d0aa51e4
SSDEEP

12288:Xqwv3djptuaT32Hz/Y1SOG061J0tp+5XeDs4Gx:X7Vjptb3kz/y3GYVZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-17_080291f978a55c70ff4ac3e9eced4acc_mafia

Files

2024-05-17_080291f978a55c70ff4ac3e9eced4acc_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ccViews\autobuild1_BR-1302-00PT_9.5_Snapshot\AMT_Development\SW\Src\Apps\PAVP2\PAVP30\IntelCpHeciSvc\Release\IntelCpHeciSvc.pdb

Sections

.text
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE