2024-09-04_afe5e3074bbc8750decaef4eed07d499_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-04_afe5e3074bbc8750decaef4eed07d499_mafia
Size

1.1MB
MD5

afe5e3074bbc8750decaef4eed07d499
SHA1

c841f415a851a4180b47866b59fe7475d7f9c3c8
SHA256

98d307d7c75c28355aa2c970e4040fb2b1a20e840d50e510ff2ff7a5808c5f13
SHA512

7907242478fb6c55c5d167cc8ed0789faee2e17c9f6482c9612e7c145a5e02e6f6dcc686c3548ff3542ac0b7f1bd3fe24877d3cc930b7b89d8b0e8f0453bc0f3
SSDEEP

24576:YVI1drh4I1OmOF91yBb3p2pA4IH7+SF/+FxflIO27s15aFp4vjH1:Ymp1Oh9cxp2pM+w2JIjsyp4vjH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-04_afe5e3074bbc8750decaef4eed07d499_mafia

Files

2024-09-04_afe5e3074bbc8750decaef4eed07d499_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ