2024-05-30_1ff43f3b670ebe1dca122bbb40109684_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-30_1ff43f3b670ebe1dca122bbb40109684_mafia
Size

656KB
MD5

1ff43f3b670ebe1dca122bbb40109684
SHA1

07fc13cc82f7738a19d730c213b0b6091fb85692
SHA256

fd306781bc7a5346ce1da3173d423dec9efce90d5f0b2fd193da88cde7922dff
SHA512

429a369bc3e96fdb4a788a7916e302d1dcacffba92371b411a9cc4b8d7f7398ab38f02b4da9eba06342155d09edcf223945912300f788e06c983b65dcc0f4395
SSDEEP

6144:6iHI1hMNByK6jAJQq3gKeMFEbcB9KkZHXkn9h0kgXYhMy4d0peN:6iiJ0ft5rZ0n9KkgXYhfu0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-30_1ff43f3b670ebe1dca122bbb40109684_mafia

NSIS installer 1 IoCs

resource	yara_rule
sample	nsis_installer_2

Files

2024-05-30_1ff43f3b670ebe1dca122bbb40109684_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ