000b697ba3c11ee58bd8ff5496fca014_JC[.]exe

General

Target
000b697ba3c11ee58bd8ff5496fca014_JC.exe
Size 37KB
Sample230917-t167gsbc2s
SHA256 a6a336d3db96a9096d5f05c0ab52f87777966c60c366ace9a4fa2457e3556123
MD5 000b697ba3c11ee58bd8ff5496fca014
SHA1 baf81b2f3c1aad6b97e556faa9f6055bbe653911
SHA512 712e014b4a2584b3600cd095d4fc575e2ea42f3e16002770ddd4fec17e52d856311c991f510345be8ceeb35feaf781a715ee5e360f6cf6c47af36fa8732c1bcb
SSDEEP 384:pvNaPqvtAs3su/I8xWI/cbZ/GdS3qBOi4Zj7aDn6k+TvnI89g0E:gipsu/H/ux+c7aDwI8K0E
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000b697ba3c11ee58bd8ff5496fca014_JC.exe

File Explorer

000b697ba3c11ee58bd8ff5496fca014_JC.exe

.exe 37KB

000b697ba3c11ee58bd8ff5496fca014_JC.exe

IMPHASH f736665ac33b6775ed4c156ddf9c52af
SHA256 a6a336d3db96a9096d5f05c0ab52f87777966c60c366ace9a4fa2457e3556123
MD5 000b697ba3c11ee58bd8ff5496fca014
SHA1 baf81b2f3c1aad6b97e556faa9f6055bbe653911
SHA512 712e014b4a2584b3600cd095d4fc575e2ea42f3e16002770ddd4fec17e52d856311c991f510345be8ceeb35feaf781a715ee5e360f6cf6c47af36fa8732c1bcb
SSDEEP 384:pvNaPqvtAs3su/I8xWI/cbZ/GdS3qBOi4Zj7aDn6k+TvnI89g0E:gipsu/H/ux+c7aDwI8K0E
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

WSACleanup WSAStartup closesocket connect gethostbyname htons inet_addr recv send socket

kernel32

ExitProcess FindFirstFileA FindNextFileA FreeLibrary GetCommandLineA GetCurrentProcess GetFileSize GetModuleFileNameA GetModuleHandleA CloseHandle GetProcAddress GetSystemDirectoryA GetTickCount GetWindowsDirectoryA CopyFileA IsBadReadPtr LoadLibraryA MapViewOfFile OpenMutexA OpenProcess Process32First Process32Next CreateFileA ReadFile CreateFileMappingA ReadProcessMemory ReleaseMutex RtlUnwind RtlZeroMemory SetCurrentDirectoryA SetEndOfFile SetFileAttributesA SetFilePointer SetThreadPriority CreateMutexA TerminateProcess UnmapViewOfFile VirtualProtect WriteFile CreateThread CreateToolhelp32Snapshot

user32

LoadCursorA SetTimer KillTimer RegisterClassA GetMessageA TranslateMessage DispatchMessageA CreateWindowExA DefWindowProcA

advapi32

GetUserNameA RegCloseKey RegOpenKeyExA RegQueryValueExA RegSetValueExA

crtdll

__GetMainArgs _strcmpi toupper abort exit fclose feof fgets fopen fputc fputs fread free fseek ftell fwrite malloc memcmp memcpy memset raise rand signal srand strcat strchr strcmp strstr

Sharing