crack jordanX[.]exe | Triage

Sharing

General

Target

crack jordanX.exe
Size

5.9MB
MD5

f6019eccee4932eff045d4f00c9ac13a
SHA1

71f5601a7191b72d68189493896075189fe1efbe
SHA256

51350034de2aa39cc25c628a5d94736585624e0abe2d4896a521f0f137e8bce3
SHA512

a524a3e1457064427dfc3af243a6be8f8a7d98cc77531b4aafcaff2626dd6c565d1d42a9f8de445bb9ed4c8e60dff45cfd22e878740ba2b6b775636acc6cb7ae
SSDEEP

98304:E3r3P5N5KAGIZ3bFO3f5XtvPoRJRGoXgX9tttcGighIL7JxKDiRIU53zvqWlrL7v:E78O83f5Xt3oRJRGpUGigeKiIU5bxd5t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

crack jordanX.exe

Files

crack jordanX.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ