2024-03-29_446b5b5c665239e6c4ad7d3f3768afb4_mafia_nionspy | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-29_446b5b5c665239e6c4ad7d3f3768afb4_mafia_nionspy
Size

327KB
MD5

446b5b5c665239e6c4ad7d3f3768afb4
SHA1

76cc66f182f06b926c690d963c36ac19075065ae
SHA256

e661bb5419cb261dce56f373c8db436e9265c9186b3ada3cc3d3ca7ca60b3a74
SHA512

67418b9cddf393aee8bae4f0ea6f7ffe8537e33306a39abf26675c480440ea58d9ed59a9c4ffa944173792868990997b8a922e0f94b2b8370af2c366875a3bc7
SSDEEP

6144:j2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:j2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-29_446b5b5c665239e6c4ad7d3f3768afb4_mafia_nionspy

Files

2024-03-29_446b5b5c665239e6c4ad7d3f3768afb4_mafia_nionspy
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ