2024-10-14_dc525d3eda048a188ed200c3c42f4644_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-14_dc525d3eda048a188ed200c3c42f4644_mafia
Size

712KB
MD5

dc525d3eda048a188ed200c3c42f4644
SHA1

df3b5444888a0153ff5961e8f46116f94e702fd6
SHA256

e575a85662a29a4538c3e9789cd8c43cd08c253915e75537baadb6d9f137b293
SHA512

ebc3fa29054465b957288f9c64136d40d933f445547b241c2cc59bf9c74cd5ff9417f0452023724d54c47c436b1e4cac669df340973566583786e9140e1b1940
SSDEEP

12288:FU5rCOTeiDinTUt5KGy0sn9ILzhKCbFH3HNZdCvq5TJLCvY90D8/LVBlVk736Y7k:FUQOJDiT4OC3oQRHNnCvq5TJLCvY90DA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-14_dc525d3eda048a188ed200c3c42f4644_mafia

Files

2024-10-14_dc525d3eda048a188ed200c3c42f4644_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ