49cf8fd7f4d06449006aa450c1feef30_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49cf8fd7f4d06449006aa450c1feef30_JC.exe
Size

446KB
MD5

49cf8fd7f4d06449006aa450c1feef30
SHA1

5aa485bdd77252e192283272836d51dc7b1e4fef
SHA256

3213490b9c84f40c5e36c698d9565aeeb7345a0d69c435ee22b6861a11f86aca
SHA512

530f461cd3ed4e8e5ede69bae9cc4fadfffd76473099078ccadba46ec4fb2e012459d3346276ee0c7d3354abbfa7e34597e9d9906fb7fc731d094794388d78e2
SSDEEP

12288:W33Xn66ga6ENOy+CDyepaccTCSjfkkItQU8eoPc:8Hn6/8NOy+CDQcciQpeoPc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49cf8fd7f4d06449006aa450c1feef30_JC.exe

Files

49cf8fd7f4d06449006aa450c1feef30_JC.exe
.exe windows x86

aac73941c87ad61412ca8ad4d2283df3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DestroyMenu

advapi32

RegQueryValueExW

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: 433KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE