2024-08-23_0b973681a75f26d504ee70fd7e6bb886_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-23_0b973681a75f26d504ee70fd7e6bb886_mafia
Size

712KB
MD5

0b973681a75f26d504ee70fd7e6bb886
SHA1

f90b849d852f3d68e4af6f9c6e8b231d75c3f810
SHA256

b7b974e66bd83d25a7dd1231eb626d8ac7f5de17837dff93e7c261c2c7ef80e8
SHA512

84861b03ac8c360695d232b70ee160dfc5be3eb51b865c7703c6ec9bc78c820159db1dd2344aef08efdb0e566c6bfa6187f1f76cd9253f12f190d86361ba52c3
SSDEEP

12288:FU5rCOTeiDJqXIAxpxeJ4wq1ovpzPlS7ERZZADxNZdCvq5TJLCvY90D8/LVBlVkQ:FUQOJDJ8eJ4wqmzPQERrA9NnCvq5TJLT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-23_0b973681a75f26d504ee70fd7e6bb886_mafia

Files

2024-08-23_0b973681a75f26d504ee70fd7e6bb886_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ