2024-06-30_a3bb8f548652e084bc2053ce8edaedb6_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-30_a3bb8f548652e084bc2053ce8edaedb6_mafia
Size

560KB
MD5

a3bb8f548652e084bc2053ce8edaedb6
SHA1

388c1c883e6d66ac8878ee5c9259476230904f23
SHA256

b85964f5dec3e4d78c5e145900b2bfda589e27d60b15b342445dddb8719c7fe9
SHA512

c21fd1024a9525742e54c85b7a3936fa97f72ce48b001dfee13fb97c6c6629d3b6524397a94c4f4414c70764a1a39aab33fc7e089b5f7c64f8e4733ddd135f75
SSDEEP

12288:jpdVQFCRdtxZ7QbFnUjSjlEmwAKDbIRFrRgurPo:9CCFUFnaSwAKDbIz9gurg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-30_a3bb8f548652e084bc2053ce8edaedb6_mafia

Files

2024-06-30_a3bb8f548652e084bc2053ce8edaedb6_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ