2024-10-12_c80a4da54bdb86ff24042ea2952dde3c_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_c80a4da54bdb86ff24042ea2952dde3c_mafia
Size

712KB
MD5

c80a4da54bdb86ff24042ea2952dde3c
SHA1

756835c2ea021b55d910998ee1bfbed48e1f9bc1
SHA256

1f5979f84fd8fa1d628c59c96d7d13c1b2571495248c29e63d2f39006e7f3cbe
SHA512

6efbe8ec0749ca326c82fda44db89d299ce5e37d0e0f82767c6ee2cd68b841081bb67fe1f4a6b29dfc2a8cd998d4a13bb951208fe8dc6da30019bfff22bb9eef
SSDEEP

12288:FU5rCOTeiDHzc0QRlS0LINt8p2wHtfmpc9FNZdCvq5TJLCvY90D8/LVBlVk736YI:FUQOJDHzzQRlS+ACtNFNnCvq5TJLCvYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-12_c80a4da54bdb86ff24042ea2952dde3c_mafia

Files

2024-10-12_c80a4da54bdb86ff24042ea2952dde3c_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ