JC_0bb7a70962056ec8df2a54121160c2be720e675b2329268add98beced3070552 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

JC_0bb7a70962056ec8df2a54121160c2be720e675b2329268add98beced3070552
Size

8.4MB
MD5

03d318b6eca0f3b788681ff8cde92cd5
SHA1

2ef6268387cab781dee3a679c51c274e538b524e
SHA256

0bb7a70962056ec8df2a54121160c2be720e675b2329268add98beced3070552
SHA512

133ae155e94d93aa49dcf616aa75de2f436fb4f5b39c63df7789f90e1dc58b6b7d086868c45cfdb3ebdc619ab75623ef17bed27a4af6682813d16f4be46e09c8
SSDEEP

98304:SjrAeuhy3tHmj7Veu71qay4cI68Y0Wpm7yXWDt8GR:cAz94up3cR8YY9/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JC_0bb7a70962056ec8df2a54121160c2be720e675b2329268add98beced3070552

Files

JC_0bb7a70962056ec8df2a54121160c2be720e675b2329268add98beced3070552
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.&f,
Size: - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.|(Y
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1Q:
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ