972053624616b4be6a735618cf8713a0_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

972053624616b4be6a735618cf8713a0_mafia_JC.exe
Size

840KB
MD5

972053624616b4be6a735618cf8713a0
SHA1

b20ed973860feeabfb63bab5bf6d74dc7535624e
SHA256

0f6e7dbd8c429c48e5552b9bf89664890a3ce091fa0abc7b010edf7fa3345a6e
SHA512

93d5c9604d226e6a2faf7abb872e5a874a1ec0cec39788e0aafb6186daf3ea1696f53e980bac751f85228521479c89a2c5cc760f0dc7fb824efbc239c7d0c72a
SSDEEP

24576:cTHQw4/NMLvy6aySYBYmO9JBWyZJw49w5lWLggE9rE8MA:KHQFV8OmQJgybw49NknE9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
972053624616b4be6a735618cf8713a0_mafia_JC.exe

Files

972053624616b4be6a735618cf8713a0_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ