JC_aa124c995bcde7c2d54c99742864a5050b3d6ad543500c101a39aeab21878682 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

JC_aa124c995bcde7c2d54c99742864a5050b3d6ad543500c101a39aeab21878682
Size

5.0MB
MD5

8bcbcfbc7c587eca1346e75a3783bbe4
SHA1

6c8c6484fd218c5b5b699e5a8ee869bfe8843e5a
SHA256

aa124c995bcde7c2d54c99742864a5050b3d6ad543500c101a39aeab21878682
SHA512

032e7945f917736daf3e867666f1c49dcf6fe161879544b127b804a847c1e189a0d1d12ae0adb44d4550444a4899876e971d01779be9319d0640abededa5af2c
SSDEEP

98304:gzkE5Q/b7PJax0JhvWTp+jkET912XkjvnYOIIQZwM/2YV1eDX:Oi/RaeJh+dcxTrdjgPZwbyc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JC_aa124c995bcde7c2d54c99742864a5050b3d6ad543500c101a39aeab21878682

Files

JC_aa124c995bcde7c2d54c99742864a5050b3d6ad543500c101a39aeab21878682
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ