2024-08-10_0ef481ab5f1f54fd049824da6ab89877_mafia_nionspy | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-10_0ef481ab5f1f54fd049824da6ab89877_mafia_nionspy
Size

279KB
MD5

0ef481ab5f1f54fd049824da6ab89877
SHA1

13cc7aa1a181070a1f3232e8c7f9dd93fc388182
SHA256

18623701b1e3a649a56b75161022be025086b89e2264dd22573a57539aa17bdb
SHA512

2b6c70b0c53f3b066685c20a04119289c0a66e9e2b8aaede7c2ff6bdf91fd232b34ad052837d17cbdcaad13f08f712b0f9b41c6a25453cd507e094fa1532c233
SSDEEP

6144:fTz+WrPFZvTXb4RyW42vFlOloh2E+7phg7ozD:fTBPFV0RyWl3h2E+7ph

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-10_0ef481ab5f1f54fd049824da6ab89877_mafia_nionspy

Files

2024-08-10_0ef481ab5f1f54fd049824da6ab89877_mafia_nionspy
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ