e26cac68f911d3exe_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

e26cac68f911d3exe_JC.exe
Size

780KB
MD5

e26cac68f911d36bed5066f8e61f0970
SHA1

97895642bb6724e1e87c4a6cb5e45faef95cec0b
SHA256

c4c2e2bb77b62ac47df1a7c10c9aa90250d855736b7aa000334e0ed93de364b1
SHA512

9f817d2285152030140d8351cf2e8b969de45fde5cd1e2e0d69d36677dc45f3618f1bbd3d79efbacc50a7cf1cc447565d1f675c55be5a2745d20a0a48a11aa5c
SSDEEP

12288:R0EmhokcP/aK2vB+yWwnDBb9tvNybtgqEQ/XBAVwUIHpkyfqNX+eKNYBP:R0rfsCKABZWwdbn2tiQ/KwUEpk/N+8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e26cac68f911d3exe_JC.exe

Files

e26cac68f911d3exe_JC.exe
.exe windows x86

d7129aae9752882910617b8042fa90f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

kernel32

IsBadCodePtr
SetStdHandle
InterlockedExchange
LCMapStringA
GetProcAddress
FreeLibrary
CreateFileA
WriteFile
GetTickCount
GetModuleFileNameA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA
GetQueuedCompletionStatus
CreateIoCompletionPort
Sleep
SetWaitableTimer
CreateWaitableTimerA
GetEnvironmentVariableA
GetExitCodeProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
SetUnhandledExceptionFilter
IsBadWritePtr
ReadFile
PeekNamedPipe
CloseHandle
CreateProcessA
CreatePipe
GetProcessHeap
SetHandleCount
LoadLibraryA
HeapCreate
VirtualFree
SetFilePointer
HeapDestroy
GetVersionExA
SetErrorMode
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
GetCurrentThreadId
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
GetVersion
SetLastError
GetLastError
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetProcessVersion
lstrcmpA
GlobalFlags
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetCurrentProcess
GetStartupInfoA
FlushFileBuffers
RtlUnwind
RaiseException
HeapSize
TerminateProcess
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
VirtualAlloc

imagehlp

MakeSureDirectoryPathExists

shlwapi

PathFindFileNameA

user32

PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
MsgWaitForMultipleObjects
WaitForInputIdle
GetMessageA
GetSubMenu
GrayStringA
DrawTextA
SetWindowsHookExA
CallNextHookEx
GetKeyState
SendMessageA
UnhookWindowsHookEx
LoadStringA
GetNextDlgTabItem
GetParent
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA

gdi32

Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ord17

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 588KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7129aae9752882910617b8042fa90f0

Headers

File Characteristics

Imports

shell32

kernel32

imagehlp

shlwapi

user32

gdi32

winspool.drv

comctl32

Sections

.text Size: 100KB - Virtual size: 98KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 588KB - Virtual size: 648KB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 100KB - Virtual size: 98KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 588KB - Virtual size: 648KB

.rsrc
Size: 68KB - Virtual size: 66KB