2024-09-30_cc8a317e7816ea204ad6a31d2d89cc5a_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-30_cc8a317e7816ea204ad6a31d2d89cc5a_mafia
Size

705KB
MD5

cc8a317e7816ea204ad6a31d2d89cc5a
SHA1

319521f53b10080c5c0dac8c868be9c5b137f2dd
SHA256

2239f2aa27dd137b1a005e5fb69dad352a8993fbf96573567a1c50c959f87fdc
SHA512

a52055d8d22249b1cc64f80620c07dc3c7786b78b0867c47c97ef97fa233c545956c6cc0e1bc87365a80e490ff9dd7a3f826c7ec7d5d78068895bd84be2042bd
SSDEEP

12288:lU5rCOTeiDwaW/YdPgU6OPNsQNYp9hKNZGI1FitQAJKiZNAx9AIyZPALski1miSq:lUQOJDP56aLVN8I1FitQAJ/ZNAx9AIyJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-30_cc8a317e7816ea204ad6a31d2d89cc5a_mafia

Files

2024-09-30_cc8a317e7816ea204ad6a31d2d89cc5a_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ