2d368b89af1121exeexe_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2d368b89af1121exeexe_JC.exe
Size

1.5MB
MD5

2d368b89af1121ddbc8a885f6a2c2aaa
SHA1

ebe35a0092cb561cf231e23a53d2f56026832990
SHA256

f32664477e0a32d47476c13aaf2f3117c13e5e871db9dec6dc207a70a08f6837
SHA512

985a1fbacf071e9289f1098d65a0d46245b5869a883ac9e928aa551c7d1b1c94dff2ce9500c7bdba3904c3e6ccfc0f158a76e5a688851acc4ffda8b27af34ac1
SSDEEP

24576:swonhpfoqRvpfQTfC8cUQkh0A2g5kx75Dl9:swonhjJpHDkh0Mk19

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d368b89af1121exeexe_JC.exe

Files

2d368b89af1121exeexe_JC.exe
.exe windows x86

cf1589890ca20514a9992ea56c18720f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

EnumPrintProcessorsW
EnumPrintersW
GetPrinterDriverDirectoryW
DeletePrinterDriverExW
EnumPrinterDriversW
DeletePortW
ClosePrinter
DeletePrinter
SetPrinterW
OpenPrinterW
DeleteMonitorW
GetPrintProcessorDirectoryW
DeletePrintProcessorW
DeletePrinterDriverW
DocumentPropertiesW

setupapi

SetupCloseInfFile
SetupOpenInfFileW
CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupGetStringFieldW
SetupGetFieldCount
SetupFindFirstLineW
SetupFindNextLine
SetupGetLineCountW
SetupGetLineTextW

kernel32

ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetStartupInfoW
RtlUnwind
ExitProcess
TerminateProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
WritePrivateProfileStringW
InterlockedDecrement
GetCurrentThread
GetModuleFileNameW
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryW
SetLastError
MulDiv
lstrcpyW
GlobalAlloc
FormatMessageW
LocalFree
lstrcpynW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
lstrlenW
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
MultiByteToWideChar
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
SetCurrentDirectoryW
GetSystemDefaultLangID
CreateDirectoryW
LoadLibraryExW
lstrcmpiW
GetEnvironmentVariableW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateEventW
CreateThread
SetEvent
GetPrivateProfileStringW
GetVersionExW
lstrcatW
GetWindowsDirectoryW
GetSystemDirectoryW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
GetProcessHeap
HeapAlloc
HeapFree
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
MoveFileExW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
WideCharToMultiByte
GetTickCount
Sleep
CreateFileW
WriteFile
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
FreeLibrary
GetCurrentProcess
GetLastError

user32

RegisterClipboardFormatW
PostThreadMessageW
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetWindowContextHelpId
MapDialogRect
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
ReleaseDC
GetDC
wsprintfW
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
ShowWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
InvalidateRect
SetFocus
IsChild
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
PostMessageW
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
EqualRect
GetClassInfoW
RegisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
LoadIconW
MessageBoxW
UnregisterClassW
KillTimer
SetTimer
SendMessageW
LoadStringW
EnableWindow
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
CharUpperW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
ReleaseCapture
SetCapture
GetFocus
DestroyMenu
UnhookWindowsHookEx
MoveWindow

gdi32

ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
SetWindowExtEx
RectVisible
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
PtVisible
GetWindowExtEx
GetViewportExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetDeviceCaps
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
TextOutW

comdlg32

GetFileTitleW

advapi32

SetSecurityDescriptorDacl
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
QueryServiceStatus
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
InitiateSystemShutdownW
StartServiceW
OpenServiceW
CloseServiceHandle
OpenSCManagerW
ControlService
RegCloseKey
RegSetKeySecurity
FreeSid
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW

comctl32

ord17

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree

oleaut32

SysAllocStringLen
VariantCopy
SafeArrayDestroy
SysStringLen
VariantInit
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
SysFreeString

Sections

.text
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cf1589890ca20514a9992ea56c18720f

Headers

File Characteristics

Imports

winspool.drv

setupapi

kernel32

user32

gdi32

comdlg32

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 196KB - Virtual size: 194KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 16KB - Virtual size: 64KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 196KB - Virtual size: 194KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 16KB - Virtual size: 64KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB