764245d59a422b5b0480ba9ef482696a_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

764245d59a422b5b0480ba9ef482696a_mafia_JC.exe
Size

839KB
MD5

764245d59a422b5b0480ba9ef482696a
SHA1

1c60b2587552724d037e867ccd7c73d185850c59
SHA256

9d77210f15d18a9d3a795e9137c2b68b17ccec5a6112fe474ce4e4b4f204d693
SHA512

b8e392e9929b8015708a1d6f41a311180ff25465cc95ba02ef3b1134e1c4f9c74603976d8f7aa9b0dc4e0d73b7f1b98284559c79aa1222f64b627b55c388ca8c
SSDEEP

24576:weX8YxJ8Mk4hQjBEZfgvqqPbO4DuPglWLggE9rE1S:d86kENgyqPbO4D8knEo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
764245d59a422b5b0480ba9ef482696a_mafia_JC.exe

Files

764245d59a422b5b0480ba9ef482696a_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ