bd6870b76ed664f086670309a530b278_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd6870b76ed664f086670309a530b278_JC.exe
Size

337KB
MD5

bd6870b76ed664f086670309a530b278
SHA1

d421175b5e03bdd983d28d1f48fe18a7a3299034
SHA256

530de0e0f16b5adc1ceb13c51b25439f209092d506398acefccb18cb8062a78c
SHA512

f50a36cd6575526b93df2e0c6884f12c2c08b1d1709896f5de0121ac86ab521eb878dee49e05bc3fd68c5b02a095d4566267b5bfa7a5edd04885dfeb16afef12
SSDEEP

3072:DzZ+g+U3kHa4soW5v+RGIGx6IBazz1BBz/yMrPZmxbeTpSVp0U4355S6:DX+psoWJ+IvLI7BzDPZmxMcVp0Xp5p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd6870b76ed664f086670309a530b278_JC.exe

Files

bd6870b76ed664f086670309a530b278_JC.exe
.exe windows x86

3b3ca5844bdb8b6b333c1e673e18f1c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

IOKGDTTY
Size: - Virtual size: 484KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IOKGDTTY
Size: 326KB - Virtual size: 328KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE