1cd726fed248400f5e8075fe651c82c3_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cd726fed248400f5e8075fe651c82c3_mafia_JC.exe
Size

978KB
MD5

1cd726fed248400f5e8075fe651c82c3
SHA1

39d2dab0ed8edcf7d297769bdccff9ee3b3e674d
SHA256

e924f5f7487908105ce9e5403c3480702290788032aa186e9436339576e16ccb
SHA512

782d3390834042679a8fa6ada24dfb6a5968e4bd2d3a544f987079591223446099d6096104c3c39749eb48e6a73f5042329014b3ad583a99b6f37b2c19269087
SSDEEP

24576:DYsdpnTQNT1h7NWrgovNg+S4lqtKOS2TQef:8sdesv+F4lz4f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cd726fed248400f5e8075fe651c82c3_mafia_JC.exe

Files

1cd726fed248400f5e8075fe651c82c3_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ