3c4a589a9a68bb760ed396d18da7d4a4_mafia_nionspy_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c4a589a9a68bb760ed396d18da7d4a4_mafia_nionspy_JC.exe
Size

503KB
MD5

3c4a589a9a68bb760ed396d18da7d4a4
SHA1

67f8dd03d979947f7040f22db4df4f4f8b04ca79
SHA256

8c345fe321f034beed99e8ec6049aef3e4c950b1b984bf3eddfcad1ac2a977bf
SHA512

86ad5cb59926aa7810ec35093ac16f3d4460bd7974dabe20f471a8cafda89667543a3e9a283d3f30891a8b70ca6b4e276763ceaba196c33b0857e585a75666a4
SSDEEP

12288:+2TFafJiHCWBWPMjVWrXK0CB1FBxrLaarxh:+2TFU+CWYPMeXbAX2mxh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c4a589a9a68bb760ed396d18da7d4a4_mafia_nionspy_JC.exe

Files

3c4a589a9a68bb760ed396d18da7d4a4_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ