13b8945cb1717cae1351ec72893d8359_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
13b8945cb1717cae1351ec72893d8359_JC.exe
Size 436KB
Sample230918-vcw72sda87
SHA256 73d7f5bdab71a22467b79e95c5258a99a8c50fcac8ddd3b7d0d97251be11b057
MD5 13b8945cb1717cae1351ec72893d8359
SHA1 5fd88a39a66decead6a1cf78822138590f766800
SHA512 3cedb5cd00b4005acc72db575b2f72a6cb088b8efa237b11899c4757898f3a46984dee1e86f62cf6eb9aad8a58eea75d203d4fb9b36067f2cc8e9385681de213
SSDEEP 6144:WcNhJgX9z9TB0YRX8nwhKy4K612iXPMX98L6DFu3:phJ6nTOYREYK46zi9lDM3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13b8945cb1717cae1351ec72893d8359_JC.exe

File Explorer

13b8945cb1717cae1351ec72893d8359_JC.exe

.exe 436KB

13b8945cb1717cae1351ec72893d8359_JC.exe

IMPHASH da610ca700d3fcd07221889fd01b5be9
SHA256 73d7f5bdab71a22467b79e95c5258a99a8c50fcac8ddd3b7d0d97251be11b057
MD5 13b8945cb1717cae1351ec72893d8359
SHA1 5fd88a39a66decead6a1cf78822138590f766800
SHA512 3cedb5cd00b4005acc72db575b2f72a6cb088b8efa237b11899c4757898f3a46984dee1e86f62cf6eb9aad8a58eea75d203d4fb9b36067f2cc8e9385681de213
SSDEEP 6144:WcNhJgX9z9TB0YRX8nwhKy4K612iXPMX98L6DFu3:phJ6nTOYREYK46zi9lDM3
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18483

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

WSAStartup getsockname ntohs listen closesocket WSACleanup accept select recvfrom inet_ntoa sendto htons socket bind recv inet_addr gethostname gethostbyname

kernel32

WaitForSingleObject HeapAlloc SetErrorMode GetProcAddress SetEnvironmentVariableA LoadLibraryA CompareStringA FlushFileBuffers GetStringTypeW GetStringTypeA SetStdHandle CreateFileA GetModuleFileNameA ReadFile SetFilePointer GetFileSize LocalFree CloseHandle WriteFile LocalAlloc GetWindowsDirectoryA GetTempFileNameA Process32Next TerminateProcess OpenProcess Process32First CreateToolhelp32Snapshot GetCurrentProcess GetVersionExA DeleteFileA WinExec UnmapViewOfFile MapViewOfFile CreateFileMappingA LockResource SizeofResource LoadResource FindResourceA FreeLibrary EnumResourceNamesA FlushViewOfFile LoadLibraryExA SetFileTime Sleep CopyFileA GetFileTime SetFileAttributesA GetFileAttributesA GetComputerNameA CreateThread TerminateThread GetOEMCP LCMapStringA FindClose FindNextFileA FindFirstFileA HeapDestroy CreateProcessA GetModuleHandleA GetCurrentProcessId CompareStringW GetTimeZoneInformation GetSystemTime GetLocalTime GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapFree WideCharToMultiByte MultiByteToWideChar FreeEnvironmentStringsW LCMapStringW GetEnvironmentStrings HeapCreate VirtualFree VirtualAlloc HeapReAlloc UnhandledExceptionFilter FreeEnvironmentStringsA GetFileType GetEnvironmentStringsW SetHandleCount GetStdHandle GetCPInfo RtlUnwind GetLastError GetACP

user32

ExitWindowsEx GetDesktopWindow GetWindow SendMessageA GetWindowTextA GetWindowThreadProcessId IsWindow

advapi32

OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyA RegCreateKeyA RegSetValueExA RegCloseKey

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA