8f49aa9106777528abca52702ab9bac1_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f49aa9106777528abca52702ab9bac1_mafia_JC.exe
Size

979KB
MD5

8f49aa9106777528abca52702ab9bac1
SHA1

acd0fc9f387a24074276e934670e9217faa7dc47
SHA256

1b21ae58b0418d10473e92c7f5fee7329cc2339dd100e16d7b22d104bcc7c2de
SHA512

929a57eccb8883c80e65587f2ab01a2e07c69262b4422dd74f7648d576147d5a01794299a17de31e7f1c2b7ee06741fd87b27e2ed7ddd462302737cd7e48163f
SSDEEP

24576:EEIpuW9H4sgHO9kba1IkIIspAkP4qUEUM4h8ztDuwFTP3aKl4:EEIpuW9Hj9+kIIarP4qUEUM4h8ztDHTs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f49aa9106777528abca52702ab9bac1_mafia_JC.exe

Files

8f49aa9106777528abca52702ab9bac1_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ