2024-10-12_ce5e781311712e5a05bec5134674c4bc_mafia_nionspy | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_ce5e781311712e5a05bec5134674c4bc_mafia_nionspy
Size

327KB
MD5

ce5e781311712e5a05bec5134674c4bc
SHA1

7fbd17fd6846620283769561672e0ef3ea0f3440
SHA256

b42b367e2c1904577729c90bbf4c16ae09e62938ca9ab2a36560f0463d309e57
SHA512

67d9c145730cb49c861d05f8066201eb1203ca94a1c6589ff01c28a8cd17a9db72c121c2e96daf774bd0d1327c81b18c3e5f623ac8eafb29176eae029526a3f3
SSDEEP

6144:/2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:/2TFafJiHCWBWPMjVWrXK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-12_ce5e781311712e5a05bec5134674c4bc_mafia_nionspy

Files

2024-10-12_ce5e781311712e5a05bec5134674c4bc_mafia_nionspy
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ