64b24331c3620417c8986cf314a8a3ef_mafia_JC[.]exe | Triage

Sharing

General

Target

64b24331c3620417c8986cf314a8a3ef_mafia_JC.exe
Size

832KB
MD5

64b24331c3620417c8986cf314a8a3ef
SHA1

b58c79874c9557a1be8ace8751058e94f11c7ac1
SHA256

c2d4b6c5623544c6af81c139bc6f988756851691063c2c298cbe0c4c1152eda5
SHA512

3e8fb58d4fe634a60b7601b1b367a854b3f342aa5a1b9925beeb534e347e3754e989248d037af15d362db6e2871a976866829eff52ddaff3253cc78583ce5ec5
SSDEEP

24576:sLsuD7rSEKiU5nDHjbeJfrrx4ac2jFqI:8srVnDDbqfZ4a3jFH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64b24331c3620417c8986cf314a8a3ef_mafia_JC.exe

Files

64b24331c3620417c8986cf314a8a3ef_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ