2024-05-22_d500b667724bfdcef4b6194877f1596f_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-22_d500b667724bfdcef4b6194877f1596f_mafia
Size

1002KB
MD5

d500b667724bfdcef4b6194877f1596f
SHA1

1936791d3efbd12107e708bef8516c01f5af0f3d
SHA256

49016173f89c7c858ba1a566373f10a1335e918b41a45f49385fde7515c2d143
SHA512

b4a93b6cf05c500d0663a17eebe8a1a0894b9e033da577d85660b03a85826909860d5140cbe68a50c2a7629ac1449b474ac5f68aff076456627f3828ea84c514
SSDEEP

12288:TC94I/knTiljanmAy+s1FKMgTOv3n4J2dXL3FbIJ4Kh2zMCf2DSlgYiii6SBNG:UP+eKMvv3I2lVIJ4Hbf2zYiiidBNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-22_d500b667724bfdcef4b6194877f1596f_mafia

Files

2024-05-22_d500b667724bfdcef4b6194877f1596f_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 523KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ