2024-06-14_488bc5bcecc947b3089478d0a55090d8_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-14_488bc5bcecc947b3089478d0a55090d8_mafia
Size

12.1MB
MD5

488bc5bcecc947b3089478d0a55090d8
SHA1

85dfae541b40782252fb2dfc6951a2da48d8b4b2
SHA256

73230b626902327f76350a0e8c59502e100e914108decc415ee3af1bb0140978
SHA512

d236c8f5be29e64f33bb3d33f1ac30cc89212a7f538b5badb94e82df9bd307d3001004125f76a5bacc3362e85ae7d9b84f1259afe180f7fdaef7cbaf14d41922
SSDEEP

393216:U3V10H2BgDy98POpILqlkXmxwTitsKBloK56apkt3vaG5:8V10H2BgDy98POpILqlkXmxwTitsZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-14_488bc5bcecc947b3089478d0a55090d8_mafia

Files

2024-06-14_488bc5bcecc947b3089478d0a55090d8_mafia
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Builds\3\LabTech\Build - LabTech Software - Patch\Sources\Labtech Software 2013 Patch Release\LTSilent\LTSilent\obj\Release\LTSilent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.1MB - Virtual size: 12.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ