c8831f141dfb0b05cd428cc8952bba65_JC[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8831f141dfb0b05cd428cc8952bba65_JC.bin
Size

134KB
MD5

8498ef1a4ea97df32f0237ef1b6780fd
SHA1

967b1c561afa44acb31793f129a48c523ea01897
SHA256

976d1513db8ec5dfe35079a6d9719c9dc34ee558afa89f6bff7e16b9d4593df3
SHA512

a81dd176b046db4b1818adbd56dfa5fd827b2b9fa8dd1a033420c3bb42ccdd6b3c23f802ab85ee2a4b0a78ae6dfb93656d862d7be2a95e046c60828d7bbc364f
SSDEEP

3072:D/4C3OpcL0ZkAaXBxFVDFkawu6Yuj1Oimbd2jkvFiJwsK5F0oQ6Re:DkFaXBJRJwu6YuxjWd2jkdiJwsKnfc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Invoice #280202308.exe

Files

c8831f141dfb0b05cd428cc8952bba65_JC.bin
.zip

Password: infected
3092c25d39105005d7340f30a2147d13c79afd0a0b65eb22ec07ec7b190c8336.rar
.rar
Invoice #280202308.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ