95e5714d82b20b_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95e5714d82b20b_JC.exe
Size

26KB
MD5

95e5714d82b20b992588c142057b6eb1
SHA1

afb492e367d9428a38e2c2eb72fa0a05532b17cf
SHA256

768ac3a69512251c169768cef8a404abfe60531bd756ae7f04f30c4080894679
SHA512

04c98b814f8aa3febb4347e5715491f51a6dc3c7afd2087708362cf0d8fa3b5846e2afcecfc66dc3639bc121fcb1f59b5c6cf586240bb33b96bd552aff3be55d
SSDEEP

384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4YWy:bIDOw9UiaCHfjnIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95e5714d82b20b_JC.exe

Files

95e5714d82b20b_JC.exe
.exe windows x86

0bcae7989ef60f5550a7f5735f53a2aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DispatchMessageA
ShowWindow
UpdateWindow
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
PostQuitMessage
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ