d05ee7c5c1211476767e30b71b9ad0b2_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d05ee7c5c1211476767e30b71b9ad0b2_mafia_JC.exe
Size

839KB
MD5

d05ee7c5c1211476767e30b71b9ad0b2
SHA1

fa9b90194b7f34b9157550d8e8f088859b4e427a
SHA256

0af7a441af2059b95f11572e3d5b6c058f302aa616fc545b51e89b34d832ae79
SHA512

d31774b4fd74a8931746c10e834afa915a9e388cafe469bd03f32a233b6ac366589084fbbbfd9a9019a39d805da222332399e9353614605ff4bf9e3449ea05e7
SSDEEP

24576:8mh6w2Huq7rNaAkYOU6vjr410DeIZO6PcZMPb:lh8cAbO3vjr410vZOIcmPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d05ee7c5c1211476767e30b71b9ad0b2_mafia_JC.exe

Files

d05ee7c5c1211476767e30b71b9ad0b2_mafia_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ