a2c10b5d95151fefb06479bdf202bbce96a8f0a2db6398b6d4a34d6d2a1784dcexe_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

a2c10b5d95151fefb06479bdf202bbce96a8f0a2db6398b6d4a34d6d2a1784dcexe_JC.exe
Size

6.3MB
MD5

8cf53c2e44bb0ef6483736ded6e4c93b
SHA1

911902a9efba718fb3261d0fd542b30d8b924999
SHA256

a2c10b5d95151fefb06479bdf202bbce96a8f0a2db6398b6d4a34d6d2a1784dc
SHA512

1fb38d945fa58affca97e715175961a3d4222614ceb7850323f3a86371d1fa5c874978eabee26239e1b1ed30ad0a6126fc2151cf135b046dd62d9b173cceb62d
SSDEEP

196608:ccGGWlqs135BTOnlEvLphJKYaoMK0FXZ:/GGiqs1JMuLJjMK2J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a2c10b5d95151fefb06479bdf202bbce96a8f0a2db6398b6d4a34d6d2a1784dcexe_JC.exe

Files

a2c10b5d95151fefb06479bdf202bbce96a8f0a2db6398b6d4a34d6d2a1784dcexe_JC.exe
.dll windows x64

3061f6b4aed710e5ab0a75d7025cfa94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

wsprintfA
CharUpperBuffW

ws2_32

getaddrinfo

advapi32

GetTokenInformation

kernel32

WriteFile
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

secur32

GetUserNameExA

ole32

CoUninitialize

Exports

Exports

rundll

Sections

.text
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 595B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.<.<.<.<
Size: - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.<.<.<.<
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.<.<.<.<
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3061f6b4aed710e5ab0a75d7025cfa94

Headers

DLL Characteristics

File Characteristics

Imports

user32

ws2_32

advapi32

kernel32

secur32

ole32

Exports

Exports

Sections

.text Size: - Virtual size: 11KB

.rdata Size: - Virtual size: 2KB

.data Size: - Virtual size: 595B

.pdata Size: - Virtual size: 432B

.<.<.<.< Size: - Virtual size: 3.9MB

.<.<.<.< Size: 2KB - Virtual size: 2KB

.<.<.<.< Size: 6.3MB - Virtual size: 6.3MB

.reloc Size: 512B - Virtual size: 156B

.text
Size: - Virtual size: 11KB

.rdata
Size: - Virtual size: 2KB

.data
Size: - Virtual size: 595B

.pdata
Size: - Virtual size: 432B

.<.<.<.<
Size: - Virtual size: 3.9MB

.<.<.<.<
Size: 2KB - Virtual size: 2KB

.<.<.<.<
Size: 6.3MB - Virtual size: 6.3MB

.reloc
Size: 512B - Virtual size: 156B