General

  • Target
    2024-06-11_59079e63ceb0f3177207c230cf0fc687_mafia
  • Size 1015KB
  • Sample240611-nkceaavepd
  • SHA256 5fcbb10d3940c9d482b99c2491f7ed8b1bcd6cbd1f6e17cadae41ca793f73c92
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs

File Explorer

  • 2024-06-11_59079e63ceb0f3177207c230cf0fc687_mafia
    .exe 1015KB

2024-06-11_59079e63ceb0f3177207c230cf0fc687_mafia

  • IMPHASH f0568b88c8cba1b99954e429f48872a6
  • SHA256 5fcbb10d3940c9d482b99c2491f7ed8b1bcd6cbd1f6e17cadae41ca793f73c92
  • MD5 SHA1 SHA512 SSDEEP
  • UPX dump on OEP (original entry point)

PE Signature issue

Digest
23:2b:d3:d4:89:9c:56:3d:ca:8d:ca:13:84:27:de:e3:85:d4:f6:99
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Leapfrog Software Systems Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Leapfrog Software Systems Limited,L=Road Town,ST=Tortola,C=VG
Chains

Jun 10, 2024

Minor OS version
1
Major OS version
5
Entry point
95491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths