Static task
static1
Behavioral task
behavioral1
Sample
2024-05-26_3d494bf3769a14f6575df3e6ffcc1dde_mafia.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-26_3d494bf3769a14f6575df3e6ffcc1dde_mafia.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-26_3d494bf3769a14f6575df3e6ffcc1dde_mafia
-
Size
536KB
-
MD5
3d494bf3769a14f6575df3e6ffcc1dde
-
SHA1
22eb453454689b44dfdf664afcc3818f1518fcc7
-
SHA256
99b817a3d88a22065ea76fec0f9430001ea5586ef16f451b6c90c52b0a9c91b1
-
SHA512
3b0e9842786d3106ede55fb55143bf1ac83436c918837f5f5c6db538b355007383d9a58af23515f0397d0cabb369b69af52a8459a65c491a2c4fbb1f0573fa6e
-
SSDEEP
12288:wU5rCOTeiUl/1+U0VnjqbxbMCKI2oTMIZxVJ0ZT9:wUQOJUl/EnqbmvoTMIRJ0ZT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-26_3d494bf3769a14f6575df3e6ffcc1dde_mafia
Files
-
2024-05-26_3d494bf3769a14f6575df3e6ffcc1dde_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ