60cd2badb3cfae_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60cd2badb3cfae_JC.exe
Size

956KB
MD5

60cd2badb3cfae16baa06b07f332afa8
SHA1

6b889a162337523a5ceabf7d610c86efed5ce1fb
SHA256

0d3b8bba6cda854a947545eaad6f5fe077f4227ffb0b05b629dbd48efd0bb5b8
SHA512

58a8e99d2d016c367f2688b428f0af90a3b32f452d08b2c852fa87fae2875777613112ead73bb1b7d11ff6bb15d4d6fce3a5b615cba4b46bd81fd704bab45e87
SSDEEP

24576:Ex+hFGDdLWPsviWhAzxRvTD4l7lo3/7OVh+:Th4gPOA1pTD4lJ8/e+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60cd2badb3cfae_JC.exe

Files

60cd2badb3cfae_JC.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ