c6d242b3186782422d32e2f350b241b8_mafia_nionspy_JC[.]exe | Triage

Sharing

General

Target

c6d242b3186782422d32e2f350b241b8_mafia_nionspy_JC.exe
Size

327KB
MD5

c6d242b3186782422d32e2f350b241b8
SHA1

a9eb357f0c38637b024a5cada6929fd89cdceb46
SHA256

2907ab09d0e8e414e275fc03d5ce548d78405953d2a7cf73f93b7ae79a2f4459
SHA512

45a5ce03810929008ab4aea9965fcfdde73ff4afd9f0874250f2e5c68609cc6f33ac6f3da8a613e4b24a5718e179fe7b26945789251408d24478dd5800f59080
SSDEEP

6144:O2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:O2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6d242b3186782422d32e2f350b241b8_mafia_nionspy_JC.exe

Files

c6d242b3186782422d32e2f350b241b8_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ