2024-03-11_dab218145c88734d57deca18a3fcb747_mafia_nionspy | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-11_dab218145c88734d57deca18a3fcb747_mafia_nionspy
Size

327KB
MD5

dab218145c88734d57deca18a3fcb747
SHA1

d87d14fe79c6fc17848167e34fa030dad43b5cc3
SHA256

f5e967f3e26503cb05caadba9633e301aa039b0930bf6e988b1e6aa41d47893e
SHA512

e18a9684ec72fbc088251effb3004c09ee6a351eb884c27958ea3851b5386839a6edd0dd8c8f24b28671cc339c31a1bfafbd8ee8285dd87f5c1f92cf03466774
SSDEEP

6144:o2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:o2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-11_dab218145c88734d57deca18a3fcb747_mafia_nionspy

Files

2024-03-11_dab218145c88734d57deca18a3fcb747_mafia_nionspy
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ