2024-05-24_50a06cf1ffcf8a0597935705cd5b4560_mafia | Triage

Sharing

General

Target

2024-05-24_50a06cf1ffcf8a0597935705cd5b4560_mafia
Size

13.4MB
MD5

50a06cf1ffcf8a0597935705cd5b4560
SHA1

f952e7ab85abf7d49dd65792c2d6ff254391fd1d
SHA256

db8ba08bea909b53189c9096373c84db3f580021ef2ed416615d928008ee3be4
SHA512

305609028964654216a1e19849ad272c575996610e46536ec06b3198dd1618780557705864c21481936fb436f91ba8dddd6b2f8fe3a8015496bd2ef565e31cec
SSDEEP

393216:cZRT1dK3sROLQ1iP0pmj4taHcOZGS63SIG/EBpKZkWd:cZRT1dK3sROLQ1iP0pmj4taHcOZL6iIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-24_50a06cf1ffcf8a0597935705cd5b4560_mafia

Files

2024-05-24_50a06cf1ffcf8a0597935705cd5b4560_mafia
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\LabTechSoftware\Labtech Software-2012\LTSilent\LTSilent\obj\Release\LTSilent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.4MB - Virtual size: 13.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ