2024-09-13_35620e573d6ad06d6a4a54fa4bc67224_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_35620e573d6ad06d6a4a54fa4bc67224_mafia
Size

236KB
MD5

35620e573d6ad06d6a4a54fa4bc67224
SHA1

0360aacb39ced67cee2cc3093404f615fd3788c4
SHA256

079b0c17a6ad90478dbd4ad151b3ed66f186403f74b407c1184c3424f9dedc8c
SHA512

331023861405e046a720217e1f2a46e982ff556df3e339ef219992296bc820cb37120fb3a17b01dd7c07c3ba5956fb733f86960ff2e156e1552eb0a2ce1f7eff
SSDEEP

6144:5Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mO7:5QMyfmNFHfnWfhLZVHmO7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_35620e573d6ad06d6a4a54fa4bc67224_mafia

Files

2024-09-13_35620e573d6ad06d6a4a54fa4bc67224_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ