a17759c06b57c853de4253ad2b94023c_JC[.]bin | Triage

Sharing

General

Target

a17759c06b57c853de4253ad2b94023c_JC.bin
Size

768KB
MD5

c0f1d38592cde486d46ebd6ad768ab73
SHA1

8ecc7146d12d00debd07dfeaf05edf3377533dff
SHA256

b108a3fdf6e3b31ef521c9d44314d7ed97bbf0b5ddf2e1572ade860239a8d152
SHA512

0c7d8f557f90e079111955fbac5322609e341daa71531606703fcbd5c4847df1622b031ad37c649048ab6f57a01e02863299dfb61f03aaf2f90868f77bc481cb
SSDEEP

24576:s11P9jPZ9ZZoTj7tUSN1oe12XxekMBCHT:s111Hwj7taCKx/McHT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Ningbo - Invoices - Past Due.exe

Files

a17759c06b57c853de4253ad2b94023c_JC.bin
.zip

Password: infected
6f308ad2e03103c1ca1ed5537d341369e4d35fa0f377597ca592894617026b62.unknown
.7z
Ningbo - Invoices - Past Due.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ