Static task
static1
Behavioral task
behavioral1
Sample
2024-10-02_868b99a10477cc917c8eb9b950f93b96_mafia.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-02_868b99a10477cc917c8eb9b950f93b96_mafia.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-02_868b99a10477cc917c8eb9b950f93b96_mafia
-
Size
536KB
-
MD5
868b99a10477cc917c8eb9b950f93b96
-
SHA1
a33f8bb58fa5351c6e67301b0ab571e4944e79c2
-
SHA256
5255e243b34b5f085bd83fb03d4eb26e5385d4635be25b85ac9aa101ec62761c
-
SHA512
3a4c55df0f43512dc6b12ae8b5178a9ad6df5157c042bb5a1bac82609e3a31f310ccd2c917039bae7906d355df456047538ff256aa25738f5757c2aa9fea6218
-
SSDEEP
12288:wU5rCOTeiU2rOFTc7LCZxrFFJdcIZxVJ0ZT9:wUQOJU2rOdc3AxFFgIRJ0ZT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-02_868b99a10477cc917c8eb9b950f93b96_mafia
Files
-
2024-10-02_868b99a10477cc917c8eb9b950f93b96_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ