Static task
static1
Behavioral task
behavioral1
Sample
2024-07-04_f4f1b121d8e8b33c72f74eadc1796339_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-07-04_f4f1b121d8e8b33c72f74eadc1796339_mafia.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-07-04_f4f1b121d8e8b33c72f74eadc1796339_mafia
-
Size
536KB
-
MD5
f4f1b121d8e8b33c72f74eadc1796339
-
SHA1
80feea8d00ddf98f982b1e6abe702ae145010deb
-
SHA256
f7e33266ad8111402d2ac42690785c80b4bf07ff5402475c16250f992c4ad8c6
-
SHA512
8d9ed48cef6bc8be97a7c6288a6cab69cb8c4a5ca303fa67db5e55e5e440bd1e2a58955fced56c090cbe96447e57bad2fb88e4b6c37731933dc6e992118b2535
-
SSDEEP
12288:wU5rCOTeiUbWw787BBAtCBsXJd1juaXs5/IZxVJ0ZT9:wUQOJUz8MtCmHu3xIRJ0ZT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-04_f4f1b121d8e8b33c72f74eadc1796339_mafia
Files
-
2024-07-04_f4f1b121d8e8b33c72f74eadc1796339_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ