Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_ee692950794b97d41fa6ec221774fbf4_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-03_ee692950794b97d41fa6ec221774fbf4_mafia.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-03_ee692950794b97d41fa6ec221774fbf4_mafia
-
Size
712KB
-
MD5
ee692950794b97d41fa6ec221774fbf4
-
SHA1
a0795d6f1d7d74a3882fbe3b2db833c78436b965
-
SHA256
6eb0f0c83d1cfb5f05dec394fa3a1db7311f3f2367a0536afa0617155227e7c6
-
SHA512
5257241db675ac89fb53847de11a9e5d452560617d38162d7107d873201eaaaa38fc809cf1acecd38ba8b5a5acdbea5e28fe053b94de877d4a411068d6639482
-
SSDEEP
12288:FU5rCOTeiDzw118F5XX55s9ZDLvMck/W4mR2zCNZdCvq5TJLCvY90D8/LVBlVk7k:FUQOJDS8bJ58Zo3m0GNnCvq5TJLCvY93
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-03_ee692950794b97d41fa6ec221774fbf4_mafia
Files
-
2024-06-03_ee692950794b97d41fa6ec221774fbf4_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ