2024-04-29_e7dec0a47ede9a61d094bfbcc202b253_mafia_nionspy | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-29_e7dec0a47ede9a61d094bfbcc202b253_mafia_nionspy
Size

327KB
MD5

e7dec0a47ede9a61d094bfbcc202b253
SHA1

3d2147d4e5ac780a12928215bfaab7d02dcd1693
SHA256

c6b6d374a2b5777140bf8177c344806171990ff4829d074caf2dad45c9278bec
SHA512

b42ab2da2d1dbc2fb2ee28671006f8a218b2a7a0a3508c66c7183ae817ac569a58cee022607267370da246f395e641db7049c21b170ce35933944cb661afafa9
SSDEEP

6144:G2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:G2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-29_e7dec0a47ede9a61d094bfbcc202b253_mafia_nionspy

Files

2024-04-29_e7dec0a47ede9a61d094bfbcc202b253_mafia_nionspy
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ