2024-05-26_fa4e0fec8ef48739e267bc01cf6be424_mafia | Triage

Sharing

General

Target

2024-05-26_fa4e0fec8ef48739e267bc01cf6be424_mafia
Size

414KB
MD5

fa4e0fec8ef48739e267bc01cf6be424
SHA1

69ff855006d6806cde4f1be346c79b32d01c338d
SHA256

1aaa9dc81d380618290cb44f68be9279ba573992de4c9a9a5ba3fa35bfe2888c
SHA512

f8a0e92e79f01282d2c20d180c4e2a663f7a3367e04c68868407a1c23103ee9ad8f8e3569952f84b62a94a070ab0c55ba94ce51a7b6d2e44fe153e64a52e313a
SSDEEP

12288:Wq4w/ekieZgU67YPAtI4NXelanIeHxBmvTAcn:Wq4w/ekieH67qf4delsfRBmx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-26_fa4e0fec8ef48739e267bc01cf6be424_mafia

Files

2024-05-26_fa4e0fec8ef48739e267bc01cf6be424_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 218KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ