908670bc4eebc24a84e5097af59f3888_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

908670bc4eebc24a84e5097af59f3888_mafia_JC.exe
Size

955KB
MD5

908670bc4eebc24a84e5097af59f3888
SHA1

2bf901b54dede8d9d16523d382b4a9d3e15b524e
SHA256

acc307b04cc5d627dd2f04d5b2b53cd9d2bead06c209f23a4254c3c0159423c3
SHA512

50e8d651e510ec7884e2cc498d8eab9e0e109151da6773cdd42b68e38dd63dc904434ca1986a875a20d917dc90702462b134c7e8e17c9b1411c8dc486e54623e
SSDEEP

24576:GQxdTphEbZ/gLviWhOzxR5Hp4Rhvo3/7C1cf:Td1qBgRO1HHp4RZ8/mc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
908670bc4eebc24a84e5097af59f3888_mafia_JC.exe

Files

908670bc4eebc24a84e5097af59f3888_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ