NEAS[.]2023-09-05_64db45b338d899651d0e26762af4c2fb_mafia_JC[.]exe | Triage

Sharing

General

Target

NEAS.2023-09-05_64db45b338d899651d0e26762af4c2fb_mafia_JC.exe
Size

2.8MB
MD5

64db45b338d899651d0e26762af4c2fb
SHA1

048e2b0de0a5f288b4be300dd1524ca1c911eea1
SHA256

9d12c0820f60d42d64ad6bf09a3e6044d2f3e21eed786bb104b6c1eef9c7f34e
SHA512

032045e5b24e7a0c98dbb41dfdf417a6ed62a7151961b43cbe35f17d38f7ebc4b7115b215b6296ce56b4091be798899d2369493b4e6630d6942c6e643e8f69fa
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlLiDAiyKoM9C:c+8X9G3vP3AMOABPMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2023-09-05_64db45b338d899651d0e26762af4c2fb_mafia_JC.exe

Files

NEAS.2023-09-05_64db45b338d899651d0e26762af4c2fb_mafia_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ