2024-10-13_44f2d341f5ef86cff44ce72c9ee00480_mafia | Triage

Sharing

General

Target

2024-10-13_44f2d341f5ef86cff44ce72c9ee00480_mafia
Size

848KB
MD5

44f2d341f5ef86cff44ce72c9ee00480
SHA1

29628e3bbd3870a4edf9ded26e17f7fd62979b9b
SHA256

177514adf9987718e9f8ec6dc5f0c9d22f5c0e1d7f488ef790c5925002faa858
SHA512

8a10dd086bb3baa0cda284ef003bca3b747542a22b1c7c854077e9e8864fe6d71cb582555f08dd96961813cddcda8dcf7fcd1a1c6c30ab0804c9b4663c116fb1
SSDEEP

12288:VFXulGXd4OvXkLGHj0qTDzdrHPgiFgtcYVGFXulGXd4OvXkLGHj0qTDzdrHPgiFQ:Vd8GmA0UTPhIiIcZd8GmA0UTPhIiIcc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-13_44f2d341f5ef86cff44ce72c9ee00480_mafia

Files

2024-10-13_44f2d341f5ef86cff44ce72c9ee00480_mafia
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\_Bld\10657\7994\Sources\obj\Win32\Release\EvaluationContainer.csproj\Microsoft.Mashup.Container.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ