94a02a17cf303a31d6ea38c279ca1cb9_mafia_JC[.]exe | Triage

Sharing

General

Target

94a02a17cf303a31d6ea38c279ca1cb9_mafia_JC.exe
Size

976KB
MD5

94a02a17cf303a31d6ea38c279ca1cb9
SHA1

dc1df5fbc56a126c35c43d2c0803e49e9eef2e67
SHA256

dbc48e8f61e867d3e6088de216f2eb67ea33fe1771c137e6d1e8ad86a2249a38
SHA512

bf75f94927c3c70a373a59ffd01e9f3bb2e6dee063ff336a86446e1c435889a743a0e17b90a00727ed20f11b8aa9360079e8261e821f1a66e38f3be01e8ae400
SSDEEP

24576:VWjlKSFlYiG5F/hEopaW4+E4gF0bpO2asqJm:VWjlVBIQo8L4gFyhqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94a02a17cf303a31d6ea38c279ca1cb9_mafia_JC.exe

Files

94a02a17cf303a31d6ea38c279ca1cb9_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 588KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ