Overview

overview

10

Static

static

1

2024-10-13...ia.exe

windows7-x64

10

2024-10-13...ia.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2024-10-13_422ebc5203d2a74ff0c73f08d581c3a0_mafia
  • Size 459KB
  • Sample241013-cm59layamr
  • SHA256 c69ab262ac3f73277c4b9a777a408f57feb618e2e00bc2e66e8d97274083c742
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-10-13_422ebc5203d2a74ff0c73f08d581c3a0_mafia
    .exe 459KB

2024-10-13_422ebc5203d2a74ff0c73f08d581c3a0_mafia

  • IMPHASH 3c214c8050a1a2606dc2b346d8391e5e
  • SHA256 c69ab262ac3f73277c4b9a777a408f57feb618e2e00bc2e66e8d97274083c742
  • MD5 SHA1 SHA512 SSDEEP
windows:5windowsx86arch:x86

PE Signature issue

Digest
b5:a5:e5:b4:56:d6:ee:ff:cb:6f:e3:a3:1f:b3:ce:9c:6d:4f:1a:5b:bb:01:1b:12:23:75:21:bf:b5:2a:22:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=1091701-0,CN=AESUMON SOFTWARE Incorporated,O=AESUMON SOFTWARE Incorporated,L=Ottawa,ST=Ontario,C=CA,1.3.6.1.4.1.311.60.2.1.3=#13024341,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains

Oct 9, 2024

Minor OS version
1
Major OS version
5
Entry point
16823
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
H:\Desarrollo\TFS\Installers\Products\CloudAv\Dev\Dev-Installers\Source\Code\Projects\PSINanoRun\ProjectWin\bin\Release\PSINanoRun.pdb