0d6a3a662e448227dced05792414a717_mafia_nionspy_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d6a3a662e448227dced05792414a717_mafia_nionspy_JC.exe
Size

327KB
MD5

0d6a3a662e448227dced05792414a717
SHA1

f8790998ba62399bb01b4efa8495d08b0f23b79e
SHA256

11fcb8afce57a1bf41ee59200ee22db95d3a0fb2f339d5c8935281a39ba970c3
SHA512

2951161ebc23d2cd0760e28460f1ed72c4143239dbec5472a2663556da24320c190ed721100e2f7386d457f70e9ffc8cfc3a92bd732b49fe63ed72a5ef681526
SSDEEP

6144:f2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:f2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d6a3a662e448227dced05792414a717_mafia_nionspy_JC.exe

Files

0d6a3a662e448227dced05792414a717_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ