1ab76e06266fc3exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ab76e06266fc3exe_JC.exe
Size

61KB
MD5

1ab76e06266fc3289dc4fc8a8b8ce11e
SHA1

ee2efe03f93e33bbc98843e52ff7454535609d41
SHA256

f797ae6af9db3bc4cd91b842275ab71ab64a86fd024dafc22550499b2823a740
SHA512

072baaa7f3cc1a041b3cc54527d2e63d4d1f87611e25ed7883a2ec2c27e544a81460ecd35d36b229f6d5451c130b314c75b4fea3cfa6b1990f01068dc880f343
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MzIJ:i5nkFGMOtEvwDpjNbwQET

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab76e06266fc3exe_JC.exe

Files

1ab76e06266fc3exe_JC.exe
.exe windows x86

e021c9fc2c12265365fad587d43783fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

gdi32

CreateFontIndirectA

Sections

.MPRESS1
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE