025bde5cd4368c744ca19fefb46bff34_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

025bde5cd4368c744ca19fefb46bff34_mafia_JC.exe
Size

839KB
MD5

025bde5cd4368c744ca19fefb46bff34
SHA1

aa9f9e7318ce96e6b21af28e92271a56ebff3025
SHA256

61b6d5864c00aa4916b1ef344f9c556e0f0e45eb34e5d624b7861d847a7b54a6
SHA512

3cc416de07d1ae6a9f7b60077800c6a5c352f26400ec429f0ef14430289195b4dc75da6c58c8845e9c96a1967535ff464d722f9c747aa8c1110977f64b2e5179
SSDEEP

24576:ped9eG2a6RsmzQiRDHoChwYeK1+7J4rbjIZO6Pc5sPb:gd952a6juCFe8+7J4rQZOIcGPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
025bde5cd4368c744ca19fefb46bff34_mafia_JC.exe

Files

025bde5cd4368c744ca19fefb46bff34_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ