2024-09-21_541d40bc285de8a56c4a9bf5cf35a720_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-21_541d40bc285de8a56c4a9bf5cf35a720_mafia
Size

712KB
MD5

541d40bc285de8a56c4a9bf5cf35a720
SHA1

fee40b74c2b5933c0166e8d52e8a7aa97bb4641e
SHA256

ac022e664e1a2d31de651b3e2fdce53d30bebd85b7ff0c9f64d5ad88abc83aa1
SHA512

2d0a39b35a81ca03cb7d1bfba68aec9cfa11d3e4c23997adc26235432d0ffd23369d4b7199762e9c0ae527aacda7b205016751faabd78f88b44f8503dc468c89
SSDEEP

12288:FU5rCOTeiDrlKiVP6jXHHugS1061zNZdCvq5TJLCvY90D8/LVBlVk736Y79GWzN0:FUQOJDrYiYjXHOgS10OzNnCvq5TJLCvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-21_541d40bc285de8a56c4a9bf5cf35a720_mafia

Files

2024-09-21_541d40bc285de8a56c4a9bf5cf35a720_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ