2024-09-13_1a8122db5d3846bc397399cea459b5c7_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_1a8122db5d3846bc397399cea459b5c7_mafia
Size

1.1MB
MD5

1a8122db5d3846bc397399cea459b5c7
SHA1

c0690f020becb7c0b41774fcf55e5f1e9d769cd4
SHA256

c301dc437997e5eabc549290885fab66c88d61578d9614c6c78f2f62cf99783c
SHA512

d7e2bd6554db3ee6ef6610ac68ffa12e1af1f8b8bfbec62fb56c4939be4dd85ab1dffa5d66baea53dbff1b85f01bfec500d71c499a4a744ff7ed8f09d495020d
SSDEEP

24576:d1+5b91wdRCLtoVG45nQ0OwpJexOyQnBai3cBTZnxUYsbCJioNtzYxaluxpolv:d1+5R1wdRCLtoV9gLqbCJidolwpoR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_1a8122db5d3846bc397399cea459b5c7_mafia

Files

2024-09-13_1a8122db5d3846bc397399cea459b5c7_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99.9MB - Virtual size: 99.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ