fd7c000045db73exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd7c000045db73exe_JC.exe
Size

80KB
MD5

fd7c000045db73f95c6781de46596dc2
SHA1

b2b158b001ba6a007fbd22a7475a10b4b53a4cde
SHA256

b776b8d0575dd41e9c3979fcedf0d1c7a042464ec18239aa0233e0ba7177e5bd
SHA512

5f5a0fd1a7476151348bca90c90af0759cef00a8345e2c6c49bde545eadbb193bd1174ba28ba3fe5126f3475187456c1f0a38c44553b0b89ad3bcab00f4ec9c4
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNc8wG6Dyj6:i5nkFGMOtEvwDpjNbwQEI8UtzNc8wr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd7c000045db73exe_JC.exe

Files

fd7c000045db73exe_JC.exe
.exe windows x86

e021c9fc2c12265365fad587d43783fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

gdi32

CreateFontIndirectA

Sections

.MPRESS1
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE