2024-10-12_ec6010a26cc94a50cbc96399537d3f91_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_ec6010a26cc94a50cbc96399537d3f91_mafia
Size

712KB
MD5

ec6010a26cc94a50cbc96399537d3f91
SHA1

c107dcb1a2db141f2764a6c7dc6e7995908dfe4e
SHA256

6d6c0ddc4e8be2d8be46ac24a09fc3b4f127d90bbb8e85450c6c06268e4256b0
SHA512

86519f14f19119ef1caf04de582b9e098f4202eeb3126f031d03c696db8b03007640fef13ed68a9d160811e395d2d31c7c3778d6bc63a8cc65e4f6ba2e137542
SSDEEP

12288:FU5rCOTeiDgnMnmUAe7vwrNZdCvq5TJLCvY90D8/LVBlVk736Y79GWzNbA:FUQOJD1nAe8rNnCvq5TJLCvY90D8/LVH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-12_ec6010a26cc94a50cbc96399537d3f91_mafia

Files

2024-10-12_ec6010a26cc94a50cbc96399537d3f91_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ