f11ba74784126ade050c6c006998832b_JC[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f11ba74784126ade050c6c006998832b_JC.bin
Size

661KB
MD5

75397a1fa47f78bd26d8d71b0204abff
SHA1

29441ed00e7ccb5b51d79cb6068e7fa91f52d81a
SHA256

34dd4fdb0624210386990698bee8439f4aff6df1adea002c8783f644adad7139
SHA512

ca0c5eb00509fce85f80bb8453f09900ef38fb6eca219eb9391f48138730f3016b24c1f18df4a0510f1c6c29dca59e89d1a1c0ef174ae49e7b06052d4ca23fcf
SSDEEP

12288:m+gHOC2vR1u/yVqBS1D9YuThouc8356Z9nimEkA/XxEFmhPQBadG3Qpx/99GUH:mhfg4yVqBSTl53s9UXxEFmhoBag3Qr9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/jJUeCDI6c5cP51A.exe

Files

f11ba74784126ade050c6c006998832b_JC.bin
.zip

Password: infected
f3de8479ea062998ebb1af24f58e7441780901e4a071438f34b9b4d4a0c84bc2.img
.iso
jJUeCDI6c5cP51A.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ