2024-07-25_d6ca9d3f92bc045b5533b1fccf988f0b_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-25_d6ca9d3f92bc045b5533b1fccf988f0b_mafia
Size

3.7MB
MD5

d6ca9d3f92bc045b5533b1fccf988f0b
SHA1

e6dab74715ec0015080e24ee1636706c4a54d90a
SHA256

15c2426f3b2f53dc7808879624105ce860f3f829b1ff7bdcb0d6e6c48d5509ac
SHA512

e9dc6968c5a923ca87df90d4547427f2668ebe8d82a94f8437d74a8ec298f4622cb95f4282b30d608db178f2880d02905f55f274aa223b2ce71ad1d5b8b80abe
SSDEEP

98304:y7k64/BtjUaGQyPDCQq1qfIotEa5aHaA00DrChK0Ie1ncJxpbIiOvjr:y+/Btj4NQNaqV/C2JRIiOvj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-25_d6ca9d3f92bc045b5533b1fccf988f0b_mafia

Files

2024-07-25_d6ca9d3f92bc045b5533b1fccf988f0b_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\wizzlabs2\Desktop\cmb_NV_2016\1.10.1-av_flags_removal\Release\ComBroadcaster.pdb

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ