General

  • Target
    2024-06-03_0a450a13e7f20eb7598e0dfe446a32f9_mafia
  • Size 1.0MB
  • Sample240603-le15caaa9t
  • SHA256 ea26ad6c9875a39acd00fd353f41ee9140f1f03d311797d6ec80f2a72f043a3a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs

File Explorer

  • 2024-06-03_0a450a13e7f20eb7598e0dfe446a32f9_mafia
    .exe 1.0MB

2024-06-03_0a450a13e7f20eb7598e0dfe446a32f9_mafia

  • IMPHASH f0568b88c8cba1b99954e429f48872a6
  • SHA256 ea26ad6c9875a39acd00fd353f41ee9140f1f03d311797d6ec80f2a72f043a3a
  • MD5 SHA1 SHA512 SSDEEP
  • UPX dump on OEP (original entry point)

PE Signature issue

Digest
1a:26:74:9c:5e:f9:9b:f5:aa:42:5a:1e:9a:0a:e3:f5:f6:43:ac:31
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Leapfrog Software Systems Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Leapfrog Software Systems Limited,L=Road Town,ST=Tortola,C=VG
Chains

May 23, 2024

Minor OS version
1
Major OS version
5
Entry point
95491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths