46c0e9925ad681749b90b52a701b849c_mafia_nionspy_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46c0e9925ad681749b90b52a701b849c_mafia_nionspy_JC.exe
Size

503KB
MD5

46c0e9925ad681749b90b52a701b849c
SHA1

2eced11ad3ab31aead89583bd4669c09f769f44a
SHA256

7c50be2119944dd2aa4652a25d8a615c86ed32af67e07371ba536cdaaf2f005c
SHA512

2ae0cd763d7df008327468dd3869b0e21f9d25b558636cf065f45d57365fecaebc9c316d328f4939d25bf23e4b14e8fd886bd4cb53e67e931b29d9a28cf0d96b
SSDEEP

12288:42TFafJiHCWBWPMjVWrXK0CB1FBxrLaarxh:42TFU+CWYPMeXbAX2mxh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46c0e9925ad681749b90b52a701b849c_mafia_nionspy_JC.exe

Files

46c0e9925ad681749b90b52a701b849c_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ