881e3dd589fa0f_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

881e3dd589fa0f_JC.exe
Size

35KB
MD5

881e3dd589fa0f57871308650d3a05fe
SHA1

de18d70213342e1926eecc9b466eeae856bc7991
SHA256

b1ba80a8d0f84a78bb15f8825c8a1fbe07e038e4dd249f277695dda0a36933cb
SHA512

d317f9eef1e1bbe7920b98e153c48df3336ba1b4be502ed15ffdf715d816fbf19d0a37238e5ca14dc2c450e77909bed04c4932fa9f31a9ff50bbb778354e4816
SSDEEP

768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dd:bIDOw9a0Dwo3P1ojvUSDd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
881e3dd589fa0f_JC.exe

Files

881e3dd589fa0f_JC.exe
.exe windows x86

0bcae7989ef60f5550a7f5735f53a2aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DispatchMessageA
ShowWindow
UpdateWindow
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
PostQuitMessage
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ