9f8ab42397960be0fcbf1a52c6cc0b76_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f8ab42397960be0fcbf1a52c6cc0b76_mafia_JC.exe
Size

5.0MB
MD5

9f8ab42397960be0fcbf1a52c6cc0b76
SHA1

5a6e6d8c03254f232f93c548355b8ea647f30415
SHA256

66301c426ebb5993442f417507d7aea5bf682fd51aab4cfa1ef6b56468283b68
SHA512

57450c6abc94fe74568cb90ea7c66aa04e71d5100a92e83c1bf4a3972cca9daeecbaf643baf2b8fdeabe6429a91ffeac1b5c6d3af24ce17c34b22f873ace376b
SSDEEP

98304:ctizOQwOSU9x2Pthsiwloj3MkDIztbkz:lrw3Qk4GMkDIzWz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f8ab42397960be0fcbf1a52c6cc0b76_mafia_JC.exe

Files

9f8ab42397960be0fcbf1a52c6cc0b76_mafia_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 679KB - Virtual size: 678KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 189KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 2.6MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE