2024-03-09_2359265a9210153d9c36db85d664b824_mafia_nionspy | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-09_2359265a9210153d9c36db85d664b824_mafia_nionspy
Size

327KB
MD5

2359265a9210153d9c36db85d664b824
SHA1

f72e8456d743ec63bdb3fadeb00d9221a10dd48e
SHA256

17c0c632fed99c6c50ef2771df8d53d6394632c2fba6e18e4540ffc84537ca18
SHA512

4fa30e91ddd48677850668580d34396cc3882a92807432f94c4cf02b82ed19b6d29aacd255f97889a6dd5d393adb376c2589bfe4697f43e79eccb3f4864ebc40
SSDEEP

6144:22+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:22TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-09_2359265a9210153d9c36db85d664b824_mafia_nionspy

Files

2024-03-09_2359265a9210153d9c36db85d664b824_mafia_nionspy
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ