General

  • Target
    2024-06-16_d76259e65d3a9f2b4dabe2668521e488_mafia
  • Size 1.1MB
  • Sample240616-jcdvxsyepm
  • SHA256 fa109645b7f319e7025cd54cb460a0c86bd25ee4dd7247892c1503173da11ef2
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-06-16_d76259e65d3a9f2b4dabe2668521e488_mafia
    .exe 1.1MB

2024-06-16_d76259e65d3a9f2b4dabe2668521e488_mafia

  • IMPHASH a462d83481b88f9779b0a31392afd500
  • SHA256 fa109645b7f319e7025cd54cb460a0c86bd25ee4dd7247892c1503173da11ef2
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
45:63:3a:80:21:2c:71:60:b2:9e:ee:79:ba:77:98:e7:12:c8:ee:15
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Baidu Online Network Technology (Beijing)Co.\, Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baidu Online Network Technology (Beijing)Co.\, Ltd,L=Beijing,ST=Beijing,C=CN
Chains

Jun 12, 2024

Minor OS version
1
Major OS version
5
Entry point
601049
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\ci\workspace\nbrowser_tool_master\tool\BDBrowserOutput\Release\SparkDoctor.pdb