2024-06-29_515b7e5ad7392e9aa0d06b81f1220498_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-29_515b7e5ad7392e9aa0d06b81f1220498_mafia
Size

712KB
MD5

515b7e5ad7392e9aa0d06b81f1220498
SHA1

08bfc58a382ffa682c1e39a2494c007f80f2c483
SHA256

b15807af64c2574c252e3e8d7c61974ef47a953bbcc63ca24d6ee06f67b5d864
SHA512

2c96624a22fd4ec8c7348d2b74c51940e5b821bed97dd0a70c61538f66253b369d0739d1d33fdb7e3c76aa9c8a6a5bff2482d7df08aaf5d73dad03c50b641f39
SSDEEP

12288:FU5rCOTeiD3EIyahJkzhMeC+dwvNZdCvq5TJLCvY90D8/LVBlVk736Y79GWzNbA:FUQOJDU4Jkz5C+dwvNnCvq5TJLCvY90E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-29_515b7e5ad7392e9aa0d06b81f1220498_mafia

Files

2024-06-29_515b7e5ad7392e9aa0d06b81f1220498_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ