Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_d7b171dd25d9e50adad747e249a0ab95_mafia.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-24_d7b171dd25d9e50adad747e249a0ab95_mafia.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-24_d7b171dd25d9e50adad747e249a0ab95_mafia
-
Size
536KB
-
MD5
d7b171dd25d9e50adad747e249a0ab95
-
SHA1
27561412a45c29d650df19ebba8258f8b9075a76
-
SHA256
fbf5e4276874007614a78196ad3c89c64cfb1464fd1ad62221930659e2dc411b
-
SHA512
c25db924baa1156a1761cec82337045c04f22c18e65dc785f91a5d178fd199df4fa7d2a0bdeb5394d6937492ca373c9e4608c49ac2afe95d9a5e15ad3f21aa2c
-
SSDEEP
12288:wU5rCOTeiUq5PJjhkijxINquKdASLAIZxVJ0ZT9:wUQOJUMJjhkguMAiAIRJ0ZT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-24_d7b171dd25d9e50adad747e249a0ab95_mafia
Files
-
2024-05-24_d7b171dd25d9e50adad747e249a0ab95_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ