571bf5ffcbae91ecdc4312c34ebe168f_JC[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

571bf5ffcbae91ecdc4312c34ebe168f_JC.bin
Size

720KB
MD5

88414e7f4da4a361b261ae39e176be16
SHA1

f658902c5409f6230f77a68938670f30b9def45c
SHA256

9055dda392ecc2b91c273fe44fc60fa7745836923498b4bee6b4f9648359dfe4
SHA512

b61e1d75cc919dd16d4a7d5441f3ba13f202e441fc0ca498683b6b0b17e142dcac4387e6fe87dc6a24a4b02e908f2c73003073ba3fc62087e0233c2a8f973771
SSDEEP

12288:k4Bvi4phFfcUNKhr4oPeKXIZRARDZn6RNoCbK7ot0dEbQPj8rg4:kY0NIrMDZ63oCOo0b4E4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Payment Advice_PA 23JCO526_Jiecang_USD.pdf.exe

Files

571bf5ffcbae91ecdc4312c34ebe168f_JC.bin
.zip

Password: infected
98c702a601a235ac0a0b7699a397efd82bcac5500a35ec0de3a0d925d9e74a65.7z
.7z
Payment Advice_PA 23JCO526_Jiecang_USD.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ