2024-02-24_4e9d292ba23b8259c3fd0c7d609c2d94_mafia_nionspy | Triage

Sharing

General

Target

2024-02-24_4e9d292ba23b8259c3fd0c7d609c2d94_mafia_nionspy
Size

327KB
MD5

4e9d292ba23b8259c3fd0c7d609c2d94
SHA1

8fecb3abde63fe5ebabc09a7deb710c8f3d9f33f
SHA256

0b34d07da9e8b694e69d8b12a35a3ea863784ae3a5cb8384fb9cf94bdde1b18d
SHA512

dab87966fdcfa193a29ad450c68b8398aae577ffa9452757a54502cc0a10de3d586f6db25d9b325362169484684996dac4f4230889c6e8994ac62393711d7c4e
SSDEEP

6144:Q2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:Q2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-24_4e9d292ba23b8259c3fd0c7d609c2d94_mafia_nionspy

Files

2024-02-24_4e9d292ba23b8259c3fd0c7d609c2d94_mafia_nionspy
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ