Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_1a710468479462a05bb99605ea87f8b2_mafia.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-27_1a710468479462a05bb99605ea87f8b2_mafia.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-27_1a710468479462a05bb99605ea87f8b2_mafia
-
Size
325KB
-
MD5
1a710468479462a05bb99605ea87f8b2
-
SHA1
6a70f9e214dea50cb84f35ac1e192cccf564ec4a
-
SHA256
d768adea016ae8cdc002200dff43925dbd7d825199fcdca9700d6a1dbfde366f
-
SHA512
f5093524b60aa600e03fd7e85d9b00446c6f93e5d3b88fd78039faade771b872b5956caf17e61c81c4fb3556a8d0cb4f64a20daba1dee45dee9db5d6aa09f636
-
SSDEEP
6144:WSnRdwhsRFnpNlxNB0CUpNUyYJczpZIMFfvfPiwrgC:lRdwefpNlxNB4NUDJcz7zfvfqqgC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-27_1a710468479462a05bb99605ea87f8b2_mafia
Files
-
2024-09-27_1a710468479462a05bb99605ea87f8b2_mafia.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 774KB - Virtual size: 774KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ