87e4e1eb8a7abed4db133e9e6d3dbfc2_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87e4e1eb8a7abed4db133e9e6d3dbfc2_mafia_JC.exe
Size

978KB
MD5

87e4e1eb8a7abed4db133e9e6d3dbfc2
SHA1

070208ac033d5c263b074d811fa9800037602037
SHA256

fd6865e52ba22a460162bdd3aae762d7561ff2fd41d2055a041804ec935e8d8b
SHA512

ed20d12338664449198a44ea4f5d0ead7981528dd4b9ab8b876307de759fb7f282491688cf74e018d1dfd924b89b47ef463fdd863895c71b72da318260dbc773
SSDEEP

24576:6YsdpnTQNT1h7NWrgovNg+S4l+cKOS2TAuf:5sdesv+F4lsYf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87e4e1eb8a7abed4db133e9e6d3dbfc2_mafia_JC.exe

Files

87e4e1eb8a7abed4db133e9e6d3dbfc2_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ