431f9410ffed61a37536a5db1cd1f522_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

431f9410ffed61a37536a5db1cd1f522_mafia_JC.exe
Size

832KB
MD5

431f9410ffed61a37536a5db1cd1f522
SHA1

39990fd47543ea01e533cc88526bf9d8a8e411d4
SHA256

8c560f9f95c25eded9af72ff66d25d33833bb0bc58fd5a4cb8b83497c2e87573
SHA512

686c2ebc9d336b9011ddcc121a27b0f359de1c47045ef81b155573499ab73f5b641e183c44b70a4f72f54d5c93bbf88dd12fe628183385c717b86a5a2fa6955d
SSDEEP

24576:nkasK992iYoOQZ0aM1TDDP+Aitv84qN2jFyI:3stlhTDj+Aav84qQjFv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
431f9410ffed61a37536a5db1cd1f522_mafia_JC.exe

Files

431f9410ffed61a37536a5db1cd1f522_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ