c266aa547bec5464dccc3073437ff5b1_mafia_nionspy_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c266aa547bec5464dccc3073437ff5b1_mafia_nionspy_JC.exe
Size

327KB
MD5

c266aa547bec5464dccc3073437ff5b1
SHA1

5fe8561cd4f8829eb263cf2ec56c6d5a1bbf1e1f
SHA256

455a3614c3de1183027ba306e1fd0cd0499b0eca6aabcf2cd13c415971ee854a
SHA512

6d99bbc36771cd03c6c13f514b7854cf81b45c2793620ccf7d319899259e431635fc6c9dac1003d42aaca5786b9cc2447320afcc5e6fee7ee06c6b7acdd77845
SSDEEP

6144:O2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:O2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c266aa547bec5464dccc3073437ff5b1_mafia_nionspy_JC.exe

Files

c266aa547bec5464dccc3073437ff5b1_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ