2024-09-12_f52ba36627f88dd0425f2f737d81dd9d_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-12_f52ba36627f88dd0425f2f737d81dd9d_mafia
Size

267KB
MD5

f52ba36627f88dd0425f2f737d81dd9d
SHA1

1c4384877f688a06f82710300dff380d227e2f38
SHA256

eece2cd4ae75baedd171c313c30e04fb835f1dc429572a67df52007186edc00d
SHA512

4313c7445787dc532dc7ddb3965bae08b664d83c0c4a47b4f074c09c202889797a5a043e1b9e1e8166b42e268d1887b379d7cd10d18fa1067eec0b51f3d7d733
SSDEEP

6144:wVHT+X6KP6qNLPK21yvXR+TgEv//0lpFTZcLRku:sz+XDP6qNLPK21yZ+Tgs/0pFTZcL+u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-12_f52ba36627f88dd0425f2f737d81dd9d_mafia

Files

2024-09-12_f52ba36627f88dd0425f2f737d81dd9d_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ