2024-05-22_aae53fa5797a66c3429c77751a3a3773_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-22_aae53fa5797a66c3429c77751a3a3773_mafia
Size

712KB
MD5

aae53fa5797a66c3429c77751a3a3773
SHA1

7d832a1e39f878b421b8cbfd67d57237a18be8ad
SHA256

2359ef306034f8a94458f1a453a879392254a75d443e3a46a4a194d2aa880287
SHA512

60a3268148c0ba77ace56a648fbd9cc2a820a9499023041f5d298e03f5103603ad95c21e7e4c6a3f0a4c01856b22b0052768f48e5b97c188d761797c9f0078d5
SSDEEP

12288:FU5rCOTeiDus/3P6APp/QSKuITCT/6bnQHMLHNZdCvq5TJLCvY90D8/LVBlVk730:FUQOJDusKAPlQpuITCTAnysHNnCvq5Td

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-22_aae53fa5797a66c3429c77751a3a3773_mafia

Files

2024-05-22_aae53fa5797a66c3429c77751a3a3773_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ