000653f2c58e1b514dd29b0b2712c139_JC[.]exe | Triage

Sharing

General

Target

000653f2c58e1b514dd29b0b2712c139_JC.exe
Size

62KB
MD5

000653f2c58e1b514dd29b0b2712c139
SHA1

598239ac7c6e6cabebaa9b43380152fcb5757cfe
SHA256

950fa8ada42d861c9386df9ca54c3f39c3257466372b20138a74a2837d7c56f0
SHA512

b1ebbcb976b1ee8794432ba118f37e4bcc8e897690626e14a7364a783788a725472bfd2275a67c9d32ead92d83af226f32c9858271bb8d046b799dff4a9ab63d
SSDEEP

1536:DHlk4FGE7rbUqOJpxUD9JWnKROKXsEpzS1Fz12MGzYoX:i/UrbUqSxW9eKJpY912M+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000653f2c58e1b514dd29b0b2712c139_JC.exe

Files

000653f2c58e1b514dd29b0b2712c139_JC.exe
.exe windows x86

7432978911bff656a36bbc7cfe6afcc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
TlsFree
GetDriveTypeA
GetNamedPipeHandleStateW
EnumDateFormatsW
WriteConsoleInputW
TlsAlloc
LZInit
EnumSystemLocalesA
IsSystemResumeAutomatic
SetConsoleInputExeNameW
Process32FirstW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE