211cd73032cb00f8efabf103b729f864_mafia_nionspy_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

211cd73032cb00f8efabf103b729f864_mafia_nionspy_JC.exe
Size

327KB
MD5

211cd73032cb00f8efabf103b729f864
SHA1

1250d189317727e7cf0dbfacd3740d54c9929769
SHA256

7c1f993107a39794e3dcec022530a10b40c6dc1541f0ed5802786e08b273fed6
SHA512

cfbf6866576124775efa68fbfe9d4a9560753759e1d0dfddf81c922dcf80f85313b729a8ede972d3f7318161d2b09d1fc5db545e34f00dec7be057470a212238
SSDEEP

6144:x2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:x2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
211cd73032cb00f8efabf103b729f864_mafia_nionspy_JC.exe

Files

211cd73032cb00f8efabf103b729f864_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ