10f1f58dca4a9e0fb6002dc87ee8e697_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10f1f58dca4a9e0fb6002dc87ee8e697_JC.exe
Size

328KB
MD5

10f1f58dca4a9e0fb6002dc87ee8e697
SHA1

cdedaffeebd2f91950baaaad0c9d3ba0794a6575
SHA256

32b59ad6a7330bb29527c2dd1c40130a419c6e4734e29d44af8fa085a86f747f
SHA512

6110fd6511fe8305f8ccc852c99c4f38faae7b21d34daa183323008d8693f2b4dfd44c48e4fd7e5d1af8a45e7988a0b15aebf54373d0c194e0dbe6868b5171fb
SSDEEP

6144:Wbp4JXa3vgPHQvEhZmvCrycKgBtyhXn/R3fo8CX/Ju:2p4ivgPH5fmvgMX/JAc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10f1f58dca4a9e0fb6002dc87ee8e697_JC.exe

Files

10f1f58dca4a9e0fb6002dc87ee8e697_JC.exe
.exe windows:5 windows x86

aac73941c87ad61412ca8ad4d2283df3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DestroyMenu

advapi32

RegQueryValueExW

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: 296KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE