General

  • Target
    2024-06-13_fef44c112b349c8aee82fd22faf1a8f1_mafia
  • Size 1.0MB
  • Sample240613-b7ndvatdkp
  • SHA256 0e558623b4955e6ad7fa492be9afd3916e71e249451b221b0a3ead83164404d0
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs

File Explorer

  • 2024-06-13_fef44c112b349c8aee82fd22faf1a8f1_mafia
    .exe 1.0MB

2024-06-13_fef44c112b349c8aee82fd22faf1a8f1_mafia

  • IMPHASH f0568b88c8cba1b99954e429f48872a6
  • SHA256 0e558623b4955e6ad7fa492be9afd3916e71e249451b221b0a3ead83164404d0
  • MD5 SHA1 SHA512 SSDEEP
  • UPX dump on OEP (original entry point)

PE Signature issue

Digest
de:b3:e4:42:5f:55:8d:84:53:13:7b:bd:1c:3b:34:1d:92:29:4b:7d
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Leapfrog Software Systems Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Leapfrog Software Systems Limited,L=Road Town,ST=Tortola,C=VG
Chains

Jun 12, 2024

Minor OS version
1
Major OS version
5
Entry point
95491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths