NEAS[.]2023-09-06_b56e7f16272553203c37c66f6a592f7a_mafia_JC[.]exe | Triage

Sharing

General

Target

NEAS.2023-09-06_b56e7f16272553203c37c66f6a592f7a_mafia_JC.exe
Size

280KB
MD5

b56e7f16272553203c37c66f6a592f7a
SHA1

0af45d99328b64d84a434668686e5539d642860a
SHA256

ef9d8e851cc458de205e69161a6109efa5bffbda287f994bac4b126944216925
SHA512

d486786309d3a79a506d6de7c0eb9f3983bd0355c65380b1a4f4a6bc9d6886ce82c598859a4cd55a8972c3da052c4913038b4f8a3ab30b26196f266585158ced
SSDEEP

6144:hkC5J/ahfDDWczVZUBoH5Kxz1OCQNok8kMOy2DMqhtZblA:hf2DDtw8KLWN58f2+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2023-09-06_b56e7f16272553203c37c66f6a592f7a_mafia_JC.exe

Files

NEAS.2023-09-06_b56e7f16272553203c37c66f6a592f7a_mafia_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

kakxcjb
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE