b4de9471a08941_JC[.]exe | Triage

Sharing

General

Target

b4de9471a08941_JC.exe
Size

260KB
MD5

b4de9471a08941d6e1ba587947ce8fe3
SHA1

1082c6328b83d9d8fe7bbde350f880a0518ac443
SHA256

6d1b763e8e19c883de828ce2c36ed81bb57689ce6c3c11ca3751ca33bf13be96
SHA512

379e2143be5130b0b43d98e0ad4cb7f61c60cb0c04559dfb3d649b966950642c17ea448c2483a766e4fc640bbc8ed62e4d2bfe987ec19ceb0dde098e3619066d
SSDEEP

3072:9lz+aCda5X5OTNkTkLlrCT9d1TqRFY9Vj47JWSJivEN/GRzkJgfj64PeJjHvDz:9lKa74TNk+rM9oFAMnJNL4j64PeJjH/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4de9471a08941_JC.exe

Files

b4de9471a08941_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ