482cb8a75e12b174c34cd541f6e387be_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

482cb8a75e12b174c34cd541f6e387be_mafia_JC.exe
Size

983KB
MD5

482cb8a75e12b174c34cd541f6e387be
SHA1

a27781287437a9eac12ab72de432d76a6f36901a
SHA256

763cf85203ca4c6e537e90934203e613aef29b9e1bd3bf20a481544b89e3c0c4
SHA512

7e724d7995e5c80119c187f887d362630033e47b91894e2c5847be5e9df60c930655b8c8530e834e21c742bcdb7a93ecb5cdc784b4ae426afc88b54d5ea145af
SSDEEP

24576:orr4FBDn2XkU/bleQfB96gYj+bES1d4dzAXwuRKtRXyEJak:wr4FBj2LBCj+YA4dkOjiEJak

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
482cb8a75e12b174c34cd541f6e387be_mafia_JC.exe

Files

482cb8a75e12b174c34cd541f6e387be_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ