acc0a321ab17c24baa8c9ae3dd7c9c3a_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acc0a321ab17c24baa8c9ae3dd7c9c3a_mafia_JC.exe
Size

839KB
MD5

acc0a321ab17c24baa8c9ae3dd7c9c3a
SHA1

c709f1cd360329657272d28ad507dad92ef5fbe7
SHA256

3bd204be7393aaa1127cf3dcb5ca5c73c12c08ac71a9793c49701a7edf161f24
SHA512

22864fb477799e5d942dd70d528c3b65bd5a34de7379af93c8e93d62801f53b833b1d44e9306c25065166cb37a43a54a93d4f928dae2bf0f923971e8b276cd38
SSDEEP

24576:FP1YW8/Nchv0svwK2D/1o0pay4+4JELlWLggE9rEesA:p1YBFiSK+/CwD4JbknELA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acc0a321ab17c24baa8c9ae3dd7c9c3a_mafia_JC.exe

Files

acc0a321ab17c24baa8c9ae3dd7c9c3a_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ