60c24a4c6b54b1f4baeaee585e5e2486bbd3ab4733de36bb28da1fdb20596e21exe_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
60c24a4c6b54b1f4baeaee585e5e2486bbd3ab4733de36bb28da1fdb20596e21exe_JC.exe
Size 138KB
Sample230917-kn3tvsbb82
SHA256 60c24a4c6b54b1f4baeaee585e5e2486bbd3ab4733de36bb28da1fdb20596e21
MD5 7c055e203155b749a047987736400bfc
SHA1 17f48b45920e1f3e6581e60b0ed346b5770e8363
SHA512 8bccbac3f0e761ef19c7a97e7474ac9dc68ac58d4bdfbe095a4778400d2655b2a98d70c301c47f7cb072e77b3e3fde07a0c9a39c151908be5f7c47e1d5f24cb7
SSDEEP 3072:UPgv1uTga8za7/aApO6fCR6kMgNjTX8jI8VD/dJJO04aN5uvvmRE7xIxT62Br09Q:oKZTMPVDdzR1N5sAxBN9dRd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60c24a4c6b54b1f4baeaee585e5e2486bbd3ab4733de36bb28da1fdb20596e21exe_JC.exe

File Explorer

60c24a4c6b54b1f4baeaee585e5e2486bbd3ab4733de36bb28da1fdb20596e21exe_JC.exe

.exe 138KB

60c24a4c6b54b1f4baeaee585e5e2486bbd3ab4733de36bb28da1fdb20596e21exe_JC.exe

IMPHASH ca33a8184e94a42bd80f3c63b367c41f
SHA256 60c24a4c6b54b1f4baeaee585e5e2486bbd3ab4733de36bb28da1fdb20596e21
MD5 7c055e203155b749a047987736400bfc
SHA1 17f48b45920e1f3e6581e60b0ed346b5770e8363
SHA512 8bccbac3f0e761ef19c7a97e7474ac9dc68ac58d4bdfbe095a4778400d2655b2a98d70c301c47f7cb072e77b3e3fde07a0c9a39c151908be5f7c47e1d5f24cb7
SSDEEP 3072:UPgv1uTga8za7/aApO6fCR6kMgNjTX8jI8VD/dJJO04aN5uvvmRE7xIxT62Br09Q:oKZTMPVDdzR1N5sAxBN9dRd
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28107

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW lstrlenW lstrcpyW lstrcmpiW EnterCriticalSection WriteFile GetModuleFileNameW LeaveCriticalSection InitializeCriticalSection SetFilePointer CreateFileW lstrcatW CloseHandle GetLocalTime DeleteCriticalSection SetPriorityClass GetCurrentProcess Wow64DisableWow64FsRedirection TerminateProcess CreateMutexW WaitForSingleObject ReleaseMutex OpenProcess Wow64RevertWow64FsRedirection GetLastError GetProcAddress ExitProcess GetModuleHandleW ReadFile GetLogicalDrives FindFirstFileW GetFileSizeEx FindNextFileW WaitForMultipleObjects SetThreadPriority GetQueuedCompletionStatus lstrlenA FindClose PostQueuedCompletionStatus SetFileAttributesW Sleep GetCurrentThread GetSystemInfo LoadLibraryW CreateThread MoveFileExW GetCurrentProcessId CreateIoCompletionPort GetDriveTypeW GetConsoleWindow HeapFree HeapSize HeapAlloc GetProcessHeap DecodePointer GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc SetFilePointerEx LCMapStringW CompareStringW WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetStdHandle GetModuleHandleExW GetCommandLineA GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW

user32

wsprintfW ShowWindow wsprintfA

shell32

ShellExecuteW CommandLineToArgvW SHEmptyRecycleBinW

rstrtmgr

RmRegisterResources RmStartSession RmEndSession RmGetList

shlwapi

wvnsprintfW PathFindExtensionW PathRemoveFileSpecW