3231193f255da807ca5375c5c1df1641_mafia_nionspy_JC[.]exe | Triage

Sharing

General

Target

3231193f255da807ca5375c5c1df1641_mafia_nionspy_JC.exe
Size

327KB
MD5

3231193f255da807ca5375c5c1df1641
SHA1

9d49d3bedcb59d55e92945997dd3ee640e1800e3
SHA256

3e6618ea8b51404dc2b686f54dd9ff9671ca91329900e6797c0219df7bb5f465
SHA512

b075a769b64a3d7bd2a0f018262195e023066ec0db605de8d10dfa588d0ecb61b0d85f563251817197fcc760b060940a303fe8de8ad877b5ad8f23adccfa889e
SSDEEP

6144:o2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:o2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3231193f255da807ca5375c5c1df1641_mafia_nionspy_JC.exe

Files

3231193f255da807ca5375c5c1df1641_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ