Static task
static1
Behavioral task
behavioral1
Sample
2024-09-12_58f76d816b3838a1d97707308a1b66a4_mafia.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-12_58f76d816b3838a1d97707308a1b66a4_mafia.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-12_58f76d816b3838a1d97707308a1b66a4_mafia
-
Size
203KB
-
MD5
58f76d816b3838a1d97707308a1b66a4
-
SHA1
fb6da03868a137299eba8f84dc2d792ee27ca2d9
-
SHA256
a7c2e2eb25888d384f587a3090d8bd7c9bfe1188a41caae5227723bdab7a0897
-
SHA512
41383922881345bc510745e6c6d9fabf7a99761f37775a840a26fffb0c4d3b8d3ba32c47cb2f7cd3b2c7dffa1031b94a2bbcb159a8ea2e94e84a78df87cce6d0
-
SSDEEP
6144:HRuw48bussVUU7T7oSMF9FUexG380/9u+1Y:AjAu7VUKT79cVG380/Y+i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-12_58f76d816b3838a1d97707308a1b66a4_mafia
Files
-
2024-09-12_58f76d816b3838a1d97707308a1b66a4_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ