f475540f82a94f9534bb746d4e2ffec0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f475540f82a94f9534bb746d4e2ffec0_JC.exe
Size

343KB
MD5

f475540f82a94f9534bb746d4e2ffec0
SHA1

e72db1fbcf5cd056ca35d3c1b5d1c7ee3198f1d1
SHA256

7382b87cdb0ef5c0b4fb06e79df5f0cd5ad953de3c5c68b586efa09443f2e9bb
SHA512

d44512ae9c3c45d44441be3658f63b5b411c52a4d335e30e8919c50b5106fd3c16665076c29d1653b18441d2f5fcc32c64df510f2423583c2f18843b7701ecd7
SSDEEP

6144:SaVKyyzwbnUkoiqwcAR92o29tZTEr6UTdO5CksxCDy9pPbzBHU2ytluJ:g7yUTihRQhE9ONs46pP3BHUbtu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f475540f82a94f9534bb746d4e2ffec0_JC.exe

Files

f475540f82a94f9534bb746d4e2ffec0_JC.exe
.exe windows x86

04436556038016bdc579850c86f036aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersInfo

Sections

YHGSDW
Size: - Virtual size: 424KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YHGSDW
Size: 340KB - Virtual size: 344KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE