39a745d79c736dexeexe_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

39a745d79c736dexeexe_JC.exe
Size

727KB
MD5

39a745d79c736d9437a3953329721594
SHA1

a01c5210162c36806a083134845daac2c9a6e56f
SHA256

363b5d605a152b2bcbcdc9331af962ef04f29e9797d72a66d76f2029bc6b3f36
SHA512

6580ba8817afa37fec509838af1d9c4e77402fdf73620e73d1fbca88170e9de5697c45abc0f8b4fdf22791cd5dbe2cc815562131155008e4b149c4b9eefff0ca
SSDEEP

12288:gbUCw43pfKxgfAcPETr8RT7JmKso5szUxAk4/dIuj2GSF7pCKDyh9Rfj:gbUCT3pfKxgfAbTrGJmPomUxR4lIk2py

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a745d79c736dexeexe_JC.exe

Files

39a745d79c736dexeexe_JC.exe
.exe windows x86

a64480b5952c812e93e51c47ffd7d342

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod

imm32

ImmAssociateContext

kernel32

GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
FreeLibrary
GetProcAddress
LoadLibraryA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GetModuleHandleA
ExitProcess
SetThreadExecutionState
SetPriorityClass
GetCurrentProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
WriteConsoleW
GetConsoleOutputCP
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
RaiseException
LCMapStringW
LCMapStringA
FlushFileBuffers
GetConsoleMode
CreateFileA
SetHandleCount
ReadFile
SetFilePointer
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetStartupInfoA
GetCommandLineA
RtlUnwind
CreateThread
WriteFile
MultiByteToWideChar
GlobalFree
AllocConsole
SetConsoleTitleA
GetConsoleWindow
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleWindowInfo
SetConsoleScreenBufferSize
CreateProcessA
WriteConsoleA
SetConsoleTextAttribute
SetConsoleCtrlHandler
FreeConsole
ReadConsoleInputA
CreateFileW
DeleteFileA
GetCurrentThreadId
ExitThread
HeapFree
HeapAlloc
WideCharToMultiByte
GetLastError
GetConsoleCP
Sleep
GetVersionExA
WaitForSingleObject
GetFileAttributesA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetLocalTime
GetLongPathNameA
GetCurrentDirectoryA
GetModuleFileNameA
GetFullPathNameA
GetFileType
CloseHandle
SetEndOfFile
GetProcessHeap
FreeEnvironmentStringsA

user32

BeginPaint
DefWindowProcA
SetWindowLongA
GetWindowLongA
EnableMenuItem
GetMenu
GetMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
GetAsyncKeyState
FindWindowA
GetForegroundWindow
SetWindowPos
RemoveMenu
GetSystemMenu
EndPaint
ReleaseDC
GetDC
SetRect
UpdateWindow
CheckMenuItem
CheckMenuRadioItem
SetMenuItemInfoA
AppendMenuA
DeleteMenu
DrawMenuBar
GetMenuItemID
GetSubMenu
PostMessageA
MapVirtualKeyA
GetMenuItemCount
SetMenu
ShowWindow
DestroyMenu
IsMenu
InvalidateRect
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
TranslateAcceleratorA
SetWindowTextA
SendInput
DestroyWindow
PostQuitMessage
DialogBoxParamA
CreateWindowExA
SendMessageA
CallWindowProcA
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
OpenClipboard
GetClipboardData
CloseClipboard
AdjustWindowRect
ChangeDisplaySettingsA
GetClientRect
SetCursorPos
EnumDisplaySettingsA
GetWindowRect
LoadMenuA

gdi32

TextOutA
GetDeviceCaps
GetTextMetricsA
SetTextColor
SetBkMode
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
CreateDIBSection
SetStretchBltMode
BitBlt
GetStockObject
SelectObject
DeleteObject

comdlg32

GetOpenFileNameA

shell32

DragQueryFileA
DragAcceptFiles
DragFinish

ole32

CreateStreamOnHGlobal

wsock32

WSAStartup
recv
WSACleanup
closesocket
shutdown
send
inet_ntoa
accept
listen
setsockopt
bind
htons
htonl
socket

comctl32

ord6
ord17

gdiplus

GdiplusStartup
GdipDrawImageRectI
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageI
GdipCreateFromHDC
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown

avifil32

AVIStreamSetFormat
AVIFileInit
AVIFileOpenA
AVIFileExit
AVIFileRelease
AVIStreamRelease
AVIStreamWrite
AVIMakeCompressedStream
AVISaveOptionsFree
AVISaveOptions
AVIFileCreateStreamA

dsound

ord1

dinput8

DirectInput8Create

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a64480b5952c812e93e51c47ffd7d342

Headers

DLL Characteristics

File Characteristics

Imports

winmm

imm32

kernel32

user32

gdi32

comdlg32

shell32

ole32

wsock32

comctl32

gdiplus

avifil32

dsound

dinput8

Sections

.text Size: 318KB - Virtual size: 318KB

.rdata Size: 83KB - Virtual size: 83KB

.data Size: 10KB - Virtual size: 65KB

.rsrc Size: 314KB - Virtual size: 314KB

.text
Size: 318KB - Virtual size: 318KB

.rdata
Size: 83KB - Virtual size: 83KB

.data
Size: 10KB - Virtual size: 65KB

.rsrc
Size: 314KB - Virtual size: 314KB