170b447a204655exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

170b447a204655exe_JC.exe
Size

959KB
MD5

170b447a204655f0ebdc455a00a3b6c3
SHA1

42be4acf8d8c3361fabe9f442ab38976ee8ccd6b
SHA256

00a420b6a3ee90fa9a4263955bd70b9f8b05c4ba1d1f9651220fce4edf426af9
SHA512

d276b357280472216dc34b14a1294158fa2ba3885552503d29ef8420d11e5e6a455f2583a88081ecc53e887dce2d3d10a575fa0b34bf43eee19081c01d6a305d
SSDEEP

24576:uLjr3s2nScu1i1tz3f++5kRzFxk7rMxNeR1R9qpd5F:Ujrc2So1Ff+B3k796b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
170b447a204655exe_JC.exe

Files

170b447a204655exe_JC.exe
.exe windows x86

216df81b1ef7bc2aa8ec52bbeef137c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW

activeds

ord9
ord15

kernel32

CreateProcessW
GetSystemTime
lstrlenW
LocalFree

advapi32

CheckTokenMembership
CreateWellKnownSid

ole32

CoCreateInstance
CoSetProxyBlanket

Sections

.text
Size: 896KB - Virtual size: 895KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ