c3301b5ccea04ca6115d151945a3377c_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3301b5ccea04ca6115d151945a3377c_mafia_JC.exe
Size

839KB
MD5

c3301b5ccea04ca6115d151945a3377c
SHA1

4328a1d109a5baff4b8c03059da94066b7f10c0b
SHA256

5ff59824bc43f7537f2670a8732f664ae9ca6a4285402bb1e75ef80f9fa3bd49
SHA512

5ab48aad5cbec46fc631559e3822d107aaf04d2018846b25974aeb78c83e0e412c6e2c95f76835f0d44bc5b5a4269efd9b2a8492fb6611d381d825283e0b7021
SSDEEP

24576:hiZWKj+u6L7T5uMIkagb6H3X4BAjIZO6Pc5sPb:AZTM78MjaA6H3X4BZZOIcGPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3301b5ccea04ca6115d151945a3377c_mafia_JC.exe

Files

c3301b5ccea04ca6115d151945a3377c_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ