2023-08-22_d7d150be2324446899481118a1642583_mafia_nionspy_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-22_d7d150be2324446899481118a1642583_mafia_nionspy_JC.exe
Size

327KB
MD5

d7d150be2324446899481118a1642583
SHA1

a22f65787eb17c2580887c4cb930ac2902637434
SHA256

519fe9b9e0204e5da67475e08064c3e665e9544deeaf406a81d05ae4522e2a41
SHA512

5982918d5be59e40e3180f5bdcde5030fdfc0b89bba854f2947c123a4a7e2b1171db5cf4b508927f2d4bb0c02af27ffec9a7f6a6445e4d323bee0af6fb1008ee
SSDEEP

6144:N2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:N2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-22_d7d150be2324446899481118a1642583_mafia_nionspy_JC.exe

Files

2023-08-22_d7d150be2324446899481118a1642583_mafia_nionspy_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ