Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_e3eb2a687bcec7ea4be7574e98fc5a10_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-11_e3eb2a687bcec7ea4be7574e98fc5a10_mafia.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-06-11_e3eb2a687bcec7ea4be7574e98fc5a10_mafia
-
Size
536KB
-
MD5
e3eb2a687bcec7ea4be7574e98fc5a10
-
SHA1
8d5e02b5de5c641574571deff2c9c9fe057f132e
-
SHA256
98d53b902336814eb40248c73b4e3109297c19f1221354e0a1c2c6cbca76f124
-
SHA512
fab38aa713af2ed1ee690905852a12248dee92e74ad64ce2e81f0396b4905d0784fb3bacf313d67ce77de76cbea1f9c060081825f7783428e21a9912fde2beaf
-
SSDEEP
12288:wU5rCOTeiUiZH79wuMrSKp+63WWwL+Ektyt5OcyuHIZxVJ0ZT9:wUQOJUiZHauOpxWRT70uHIRJ0ZT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-11_e3eb2a687bcec7ea4be7574e98fc5a10_mafia
Files
-
2024-06-11_e3eb2a687bcec7ea4be7574e98fc5a10_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ