2024-06-15_27b9bf90bb7edd04c856d0123508d2fb_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-15_27b9bf90bb7edd04c856d0123508d2fb_mafia
Size

571KB
MD5

27b9bf90bb7edd04c856d0123508d2fb
SHA1

99776ac8a627b8902a67bbcfa1b45a740f57cd58
SHA256

6f161394892c472f9baee4dbb2cee5425c04d60e82755a79a9bffc541741ea65
SHA512

d62f60cb74d107d1068284c660a7292bf8850d21fd1a7c1a375387c9118a57ce92bb62d0c9aef10f93446e124d935f09c2e67e5fc1308ff39d6b58f4b25a8818
SSDEEP

12288:kWFDIUADf/Zg4N4MKZXR53xD8EHYhOkcSuLT9ukeAESAkDsxydHBqu/d11KEd9e:7FDFADHvKZXR5BSOkcSuLJukvABYHx1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-15_27b9bf90bb7edd04c856d0123508d2fb_mafia

Files

2024-06-15_27b9bf90bb7edd04c856d0123508d2fb_mafia
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ngcuka\Documents\V\New Exe Spiker + Btc Clipboard Rig\WindowsFormsApplication1\obj\x86\Release\MainV.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ