2023-08-22_0c608f88757c8ce3fb185c9d56e91460_mafia_nionspy_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-22_0c608f88757c8ce3fb185c9d56e91460_mafia_nionspy_JC.exe
Size

327KB
MD5

0c608f88757c8ce3fb185c9d56e91460
SHA1

9a9ca2c9502c34b970c058b8d9bbbda8c71d815e
SHA256

88d9d97dcbf89fec2c6c88fb33cd44f0359db587aee46f37f18dc38faae6655a
SHA512

683898b7507f4f84bf127cd5f02025c600ede055c42f1fcb2f1f92597997910d74e805b59190fcb2e2296dadf5f72a616901fa4cdcca820d2ee70ae70ac30542
SSDEEP

6144:X2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:X2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-22_0c608f88757c8ce3fb185c9d56e91460_mafia_nionspy_JC.exe

Files

2023-08-22_0c608f88757c8ce3fb185c9d56e91460_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ