419779f2a9cdea89a2cc3682f56bd19d_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

419779f2a9cdea89a2cc3682f56bd19d_mafia_JC.exe
Size

855KB
MD5

419779f2a9cdea89a2cc3682f56bd19d
SHA1

e9d2e8d7876e2a93da080dd295ab572fdce48829
SHA256

60dab04eda6945429af6f0e770b7ba89138657884d1ac1535ca80537c2af9452
SHA512

30834d06ce1ff1e9d4a76ad1fbda9146c550bf649479a4d1d777f62bd72f5b05298566880d22bc62fdb88eb8eadebf53a15bcc871788b37e4ad9ebc3fb4e6158
SSDEEP

24576:7It7bafh4R1m0gqBvgSDbcS0A84Zcbcn21hW5cPTf:CbnpBvgucS0D4Z9n21hWKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
419779f2a9cdea89a2cc3682f56bd19d_mafia_JC.exe

Files

419779f2a9cdea89a2cc3682f56bd19d_mafia_JC.exe
.exe windows x86

daadd1fbd8a7aa95a995761381822d0a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
LocalAlloc
GetModuleHandleA
VirtualProtect
LocalFree

Sections

.text
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ