71d76de46737689d61839bce593ec2ab_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71d76de46737689d61839bce593ec2ab_mafia_JC.exe
Size

951KB
MD5

71d76de46737689d61839bce593ec2ab
SHA1

a03f0f28f312258d3350225a7771758851392275
SHA256

6049e0d29d69572df9bdff5c2687b43f78dbe1ff3b10456bde69fdb573bbfc3c
SHA512

a043af520a3a10a699b24093e2cb5bd05cc3ad3c1fd9cae9a999af79466fed249dae39c27ba44ca07d1ebb7ec5b1757a7de469f9b7eae330e166d500079a365b
SSDEEP

24576:1HbJlf+jFURa7NQh2GEkVStTI4kxlo9NiioB9:JJjSGbotc4kjyg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71d76de46737689d61839bce593ec2ab_mafia_JC.exe

Files

71d76de46737689d61839bce593ec2ab_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ