Behavioral task
behavioral1
Sample
2025-01-04_06326395c9c3fed6ad351057e5081565_mafia.exe
Resource
win7-20240729-en
General
-
Target
2025-01-04_06326395c9c3fed6ad351057e5081565_mafia
-
Size
6.6MB
-
MD5
06326395c9c3fed6ad351057e5081565
-
SHA1
821c35f18490cb9bb91c9c05d0e16f831a626213
-
SHA256
786ea3af142ae370e6b11570da294c51ad272aed69f6223dcc45ece1cc7b0fcd
-
SHA512
99ad8457c1b28ed06ee618a5503cdd4a3a4d7ef97c8287e92b8c862fa10ab23cb7605260ddfea299298db5a4cfe250f221015760a5757312a8f138b3dd294b45
-
SSDEEP
98304:fqzz/+OjH9aT1JUUjngAHNndfmAl9MK/nmO+ZNA:aH+3UUjngAHNntmAfMK/nOZNA
Malware Config
Signatures
Files
-
2025-01-04_06326395c9c3fed6ad351057e5081565_mafia.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rodata Size: - Virtual size: 3.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 455KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.shared Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE