2a322311502a333e4a35bb8042229838_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a322311502a333e4a35bb8042229838_mafia_JC.exe
Size

2.2MB
MD5

2a322311502a333e4a35bb8042229838
SHA1

3e373f3f310cd1abf92b56500ad8d99a4561d1a8
SHA256

9eb139ed1354f958ff926e502342374d1048101a1721f7113563adb4ad4e7748
SHA512

fbc335798a4f410012fee9ec484bf37e35af4c51c0d28bbf805da1a7ff327fc4766e764c59358cd66d244ea652574439ddb64b9a9831299a8fb538975aa7a495
SSDEEP

49152:0RvP6aq27rIvbEkXWgBx/A/xB72VS8PdAMs:KX6aq2rIvbEkXWgXAQls

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a322311502a333e4a35bb8042229838_mafia_JC.exe

Files

2a322311502a333e4a35bb8042229838_mafia_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 620KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ