Static task
static1
Behavioral task
behavioral1
Sample
8e26d7e62a97365a0e67922a0c4798c6_mafia_nionspy_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8e26d7e62a97365a0e67922a0c4798c6_mafia_nionspy_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
8e26d7e62a97365a0e67922a0c4798c6_mafia_nionspy_JC.exe
-
Size
327KB
-
MD5
8e26d7e62a97365a0e67922a0c4798c6
-
SHA1
2767cef45a914f649958f258c89832aadbf41bc6
-
SHA256
d02016acc3e5a3e3d6787e29d0a0cde0e4399574e0db4f7ca33e4cecc18677e8
-
SHA512
32a253c05af1c788d58360507f39c40b4d3f9a7182ad1dc17deeda343a55f2135132afa37c29a7fdd49f956b7d26e7b3fd2e19fd28b64d22f04dbe5f1dfcb632
-
SSDEEP
6144:c2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:c2TFafJiHCWBWPMjVWrXK0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e26d7e62a97365a0e67922a0c4798c6_mafia_nionspy_JC.exe
Files
-
8e26d7e62a97365a0e67922a0c4798c6_mafia_nionspy_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 222KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ