14a54b64539ca474c6a15f3f6ff6e655_mafia_nionspy_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14a54b64539ca474c6a15f3f6ff6e655_mafia_nionspy_JC.exe
Size

327KB
MD5

14a54b64539ca474c6a15f3f6ff6e655
SHA1

e94c50091c41a2ca27b37f8144e0e49e851f042d
SHA256

f65eaf69e51a148f33a8b6c15832e873a4a2caef7dea1f8362ae2467db214364
SHA512

a2b732237db3f551281b19ad768a4deb94e6d2c5164a195ca9b0c39ba85a09d1eefef54d87a2f40c537433fc61c660adb2a2ab5413b26fb2b756ea34328e4dd0
SSDEEP

6144:K2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:K2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a54b64539ca474c6a15f3f6ff6e655_mafia_nionspy_JC.exe

Files

14a54b64539ca474c6a15f3f6ff6e655_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ