e93c0ee6cb5458exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e93c0ee6cb5458exe_JC.exe
Size

60KB
MD5

e93c0ee6cb5458d32dbb7ed15af6f464
SHA1

8a25d83989c09bd53809c081d7748a61c19851b0
SHA256

9ff9461ba6c0762bfcf1fc0cd48558dbbc73f5b016902bcdebdd06f397b989ba
SHA512

1f996fe3c584368105d421ff4a23c54af1854f74e52a0de1adb4dc70713954919d55b4f53aeb3f0a41ee1f1600f7994f6fa13ee98094f0b2e31af6faf4d75f6f
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MzI17pO:i5nkFGMOtEvwDpjNbwQE7pO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e93c0ee6cb5458exe_JC.exe

Files

e93c0ee6cb5458exe_JC.exe
.exe windows x86

e021c9fc2c12265365fad587d43783fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

gdi32

CreateFontIndirectA

Sections

.MPRESS1
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE