3a8620279e16539030a900a53316e064_mafia_nionspy_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a8620279e16539030a900a53316e064_mafia_nionspy_JC.exe
Size

327KB
MD5

3a8620279e16539030a900a53316e064
SHA1

043d4b3ef5808545162f030b894b837ddcf4a88a
SHA256

618e3d61e626f947570b6305ef9ca05ced9973614b61d2fa181b2af1c7411e2c
SHA512

5caa5b6d8fdfbd1d1742754d884951d16b2e7ad0a4cfdb0a03bb0b07b3f4948a71ef5571916fa93d1dcc1720766c5ff6068277df7c9bff0f677d085399f4588f
SSDEEP

6144:Y2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:Y2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8620279e16539030a900a53316e064_mafia_nionspy_JC.exe

Files

3a8620279e16539030a900a53316e064_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ