6db7c5a27ccc43_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6db7c5a27ccc43_JC.exe
Size

1.3MB
MD5

6db7c5a27ccc43f709919369bae12570
SHA1

47aabc38dedf635c40792e45be4b9708de731879
SHA256

1af811faed6e4277d8328c97f98f472d70429104ee29dbf29759619b27be7eb4
SHA512

cfbd4429987aa22576ee9f8c66e1ee3b20408189ff5dd149b83e09fb33a5fb26985fb459cd9d7ecdc5979c4bd1a701723d3eb5bddc1ad69eee9edb109c6d114b
SSDEEP

12288:U14ZC1O+xY8pfUsnArK6J3vC88Rhmbkm4khF9WXA2g5kjYi75TIvBel94:e2CfvpfQTfC8cUQkh0A2g5kx75Dl9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6db7c5a27ccc43_JC.exe

Files

6db7c5a27ccc43_JC.exe
.exe windows x86

a35a0b282c5ab04cde2019b3faa6e451

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
GetCurrentDirectoryA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
IsBadReadPtr
ExitProcess
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
TerminateProcess
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
GlobalFlags
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetTimeZoneInformation
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetDriveTypeA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetEnvironmentVariableA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetModuleHandleA
GetFileTime
GetFileSize
GetFileAttributesA
CreateFileA
CloseHandle
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynA
FormatMessageA
LocalFree
OutputDebugStringA
DeleteFileA
CopyFileA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
LoadLibraryA
GetProcAddress
FreeLibrary
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcmpA
CompareStringW
CompareStringA
lstrcatA
lstrcpyA
lstrlenA
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetStdHandle
InterlockedExchange

user32

SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
MessageBoxA
GetKeyState
SetForegroundWindow
GetClientRect
GetMenu
PostMessageA
GetSysColor
AdjustWindowRectEx
CreateWindowExA
GetClassInfoA
RegisterClassA
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindowTextA
GetCapture
CharUpperA
UnregisterClassA
SendMessageA
GetWindow
GetSystemMetrics
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
WinHelpA
RegisterWindowMessageA
FindWindowA
EnableWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
SetWindowTextA
LoadBitmapA
PostQuitMessage
DestroyMenu
ValidateRect
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
DefWindowProcA
GetMenuCheckMarkDimensions
GetFocus

gdi32

DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
DeleteDC
SetTextColor
GetClipBox
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

comctl32

ord17

shlwapi

PathStripToRootA
PathIsUNCA
PathFindFileNameA

oleaut32

VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a35a0b282c5ab04cde2019b3faa6e451

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

Sections

.text Size: 124KB - Virtual size: 121KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 124KB - Virtual size: 121KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB