Static task
static1
Behavioral task
behavioral1
Sample
2024-05-20_c50a0d8b777940575f6d817d4034a4bf_mafia.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-20_c50a0d8b777940575f6d817d4034a4bf_mafia.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-20_c50a0d8b777940575f6d817d4034a4bf_mafia
-
Size
541KB
-
MD5
c50a0d8b777940575f6d817d4034a4bf
-
SHA1
2038e1a31408783a779e1d6140d9d7ab8bb59413
-
SHA256
9d57b0e24bcc73407668524a1eb2dc078978fb57aeed6946b9745df8819c80a6
-
SHA512
bd0c2f27ce574d7e5210f40742c5b938ee66366335724fcb696d6ec3d3e84f403c27c3e5efeb74391a797ed989bbe457b03e3885efaeb1043d98b8607c932b55
-
SSDEEP
12288:UU5rCOTeifBo6kZaeXEaEu9EImYHpmWLFyrZa73ctO:UUQOJfrkp+Y1crU73ctO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-20_c50a0d8b777940575f6d817d4034a4bf_mafia
Files
-
2024-05-20_c50a0d8b777940575f6d817d4034a4bf_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ