2024-01-10_59dd63a27ee7dbac080fd91306c6b421_mafia_nionspy | Triage

Sharing

General

Target

2024-01-10_59dd63a27ee7dbac080fd91306c6b421_mafia_nionspy
Size

327KB
MD5

59dd63a27ee7dbac080fd91306c6b421
SHA1

904b69464c2fe7b3249e3b947b831db1345d21e4
SHA256

e40846a9331d4d1b6e1d9f354ae7af3f23237514e3057e3cb3eaa87bed3c2259
SHA512

90390dadda629ec73bf1cda0cbfa29c9355127442b25d7c13c1e44d0a02ec17db115025dbef641e46177ec61654910b51bf085068f9c2b8411a7caf712670e66
SSDEEP

6144:e2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:e2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-10_59dd63a27ee7dbac080fd91306c6b421_mafia_nionspy

Files

2024-01-10_59dd63a27ee7dbac080fd91306c6b421_mafia_nionspy
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ