6150572e83aac44d7c4e4cd835232061_mafia_nionspy_JC[.]exe | Triage

Sharing

General

Target

6150572e83aac44d7c4e4cd835232061_mafia_nionspy_JC.exe
Size

327KB
MD5

6150572e83aac44d7c4e4cd835232061
SHA1

a22847ad237b04875fe28e94b7383c9e5306f1b1
SHA256

61f934116fce25237e86b16059186f05f67aa4820e2847d435bff51ba88d66de
SHA512

e2e3daace32029c14a61a3179ffaa402af5fd95fc47751609ab9a917f8f473899788ac89257fcc66a96034622de892eddd84a2f0a070ced66903cedaf78daaeb
SSDEEP

6144:w2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:w2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6150572e83aac44d7c4e4cd835232061_mafia_nionspy_JC.exe

Files

6150572e83aac44d7c4e4cd835232061_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ