2024-02-18_f49da0249afa3bfc61b1070487dfa71d_mafia_nionspy | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-18_f49da0249afa3bfc61b1070487dfa71d_mafia_nionspy
Size

327KB
MD5

f49da0249afa3bfc61b1070487dfa71d
SHA1

0619d0d806354028698b8059e7db3cb7d1423856
SHA256

67e004b4820386738139c40edff4bcc6faf5cee784d5b9284d7ddfe8ed40d45f
SHA512

12137e03442b22ee28d120b77ae3d5349cfaab02a93cee07a870f405b6605720e86a6a46b3ead8a7c5dd5db575b3aa9423a8e1964f5e770db3b3e32fd62fc93d
SSDEEP

6144:o2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:o2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-18_f49da0249afa3bfc61b1070487dfa71d_mafia_nionspy

Files

2024-02-18_f49da0249afa3bfc61b1070487dfa71d_mafia_nionspy
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ