b843408680c3b58af9063c72c63989cb_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b843408680c3b58af9063c72c63989cb_JC.exe
Size

1.0MB
MD5

b843408680c3b58af9063c72c63989cb
SHA1

3107fea80ee373e1b78e213b08159274095dc69e
SHA256

7eb6b9ec8b9b9db063c9eec06f57da0e899ed16df5f472b42119aa459ca9ebcd
SHA512

2e2004fdf05c9f66c9217f0495fc6dc9838efe14a1e377c2ff86934ee5232d1c2dc4b968cf2af1a09037b4a1e3dc6156655954da26647823176baa6da9fef7dd
SSDEEP

12288:M+xEcnI9UqvDjGYff3fxQ1d2A/2hcImNVXsHq:M+x3I9Hj33JQqAehTqQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b843408680c3b58af9063c72c63989cb_JC.exe

Files

b843408680c3b58af9063c72c63989cb_JC.exe
.exe windows:4 windows x86

4528f77b19993b636676e403f4252110

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5194
ord6407
ord1997
ord798
ord533
ord825

msvcrt

_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
__CxxFrameHandler
fopen
fclose
fscanf
remove
__setusermatherr
_itoa

kernel32

GetModuleHandleA
HeapFree
LoadLibraryA
FreeLibrary
GetCurrentThreadId
GetStartupInfoA
GetProcAddress

Exports

Exports

s_665754_134235_3563345_1231245_910384_0193848_login

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 945B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ