ae61cebd3200bfba7fc721f97225f5184e007e9e1546aacd59009a9278b702d1_JC[.]exe

General

Target

ae61cebd3200bfba7fc721f97225f5184e007e9e1546aacd59009a9278b702d1_JC.exe
Size

176KB
MD5

55320d5590f68b86e71b030ce87b5d07
SHA1

18485989807197057afdcb1e5b8e6c0e74f78aad
SHA256

ae61cebd3200bfba7fc721f97225f5184e007e9e1546aacd59009a9278b702d1
SHA512

59ea4933740e17ee81d964ac0070515b6ab53891b73689693f38ba98cc6f11ea5ef0a8a145b6f52cd08d73d179d90910d74b0244bf7df78e84a514a6566d0254
SSDEEP

3072:CFgiMd04bHHr/GFDtarONKp9wOqqw61fXbEvgkYEM2PUARU2gpPF:0E3bHL/r3w5616YEh8ARU2MF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae61cebd3200bfba7fc721f97225f5184e007e9e1546aacd59009a9278b702d1_JC.exe

Files

ae61cebd3200bfba7fc721f97225f5184e007e9e1546aacd59009a9278b702d1_JC.exe
.exe windows x86

8ea5cdbcb00ec0db5419d8a29ba2f4ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
HeapAlloc
HeapFree
GetProcessHeap
SetLastError
GetNativeSystemInfo
LoadLibraryA
IsBadReadPtr
GetCurrentProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
GetCurrentThreadId
CloseHandle
CreateFileA
DecodePointer
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
RtlUnwind
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapReAlloc
GetStringTypeW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
LCMapStringW
SetStdHandle
GetFileType
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ea5cdbcb00ec0db5419d8a29ba2f4ca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 96KB - Virtual size: 96KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 96KB - Virtual size: 96KB

.reloc
Size: 4KB - Virtual size: 4KB