Static task
static1
Behavioral task
behavioral1
Sample
2024-08-20_274c533b4f8a83cd3e68de4eb828fed1_mafia.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-20_274c533b4f8a83cd3e68de4eb828fed1_mafia.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-20_274c533b4f8a83cd3e68de4eb828fed1_mafia
-
Size
529KB
-
MD5
274c533b4f8a83cd3e68de4eb828fed1
-
SHA1
570fb38d5c25381152fd1dd3558ec432f57d4f46
-
SHA256
f1cb864e094b8236e9ec80a8ece69adecd1b7f75ef2c698a313a079514050d62
-
SHA512
6ae647e032bef7916188b97a71379fef8c8f71f374bba9cb35e5dd29c6e269679899911ece0e2424205c3e53f97d9afd4ac6b1250b6d7713c684c346269af954
-
SSDEEP
12288:NU5rCOTeij+PZVP1zpsDoH5LXx0VTZwlH4Hp:NUQOJj2VfscX0VTSlH4Hp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-20_274c533b4f8a83cd3e68de4eb828fed1_mafia
Files
-
2024-08-20_274c533b4f8a83cd3e68de4eb828fed1_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ