f754b450f9b5c93d17acaa34eda14bef_mafia_nionspy_JC[.]exe | Triage

Sharing

General

Target

f754b450f9b5c93d17acaa34eda14bef_mafia_nionspy_JC.exe
Size

327KB
MD5

f754b450f9b5c93d17acaa34eda14bef
SHA1

036c65209b0e66a223bd45f40ad2bf3ae3eb473e
SHA256

05c12ba1bdfb6265d73f831975e5064f9d321bc184f13d97dd11710a3b1debb9
SHA512

1af63605146744b918846d9b1879994c9ca74a4885ed5dbcdae2546fbd896cba762cf819dfc2e04f50b4f99de0c7221c7730760176afe1969e054e19deaffda3
SSDEEP

6144:U2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:U2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f754b450f9b5c93d17acaa34eda14bef_mafia_nionspy_JC.exe

Files

f754b450f9b5c93d17acaa34eda14bef_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ