3a1e1709940fe5630c669256e8beb017_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3a1e1709940fe5630c669256e8beb017_JC.exe
Size

213KB
MD5

3a1e1709940fe5630c669256e8beb017
SHA1

a7561a9e11be5e024db5fba170e69c22a9754ea7
SHA256

50216ec4cdff309927ebc2f48d4ba497e199ab5a3710d7918c26f9912bd32576
SHA512

3df37406ff0f52527532db102b83fba741b437fd627d6372b2a1744404ebdc531b3d108143f6be5e799bcef3013c7b38a2259c7850c534c2cfbea501a5165320
SSDEEP

6144:gN+TNmQ1J+tl7OwGWvv6I4RLgup5306QL1:yedQ64vqg606G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a1e1709940fe5630c669256e8beb017_JC.exe

Files

3a1e1709940fe5630c669256e8beb017_JC.exe
.exe windows:4 windows x86

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreA
GetDiskFreeSpaceA
GetProcAddress
GetNamedPipeInfo
InitializeCriticalSection
MulDiv
DosDateTimeToFileTime
GetTempFileNameA
OpenMutexW
CreateEventA
GetLongPathNameW
OpenFile
GetACP
EnumDateFormatsA
GetCurrentProcessId
CreateMailslotW
GetSystemDirectoryA
CopyFileA
ExpandEnvironmentStringsA
GetStartupInfoA
GetLocaleInfoA
GetStartupInfoW
GlobalGetAtomNameW
GetUserDefaultLangID
GetPriorityClass
SetCalendarInfoW
FlushFileBuffers
GetEnvironmentVariableW
LocalAlloc
EnumTimeFormatsA
CompareStringA
GetSystemDirectoryW
ExpandEnvironmentStringsW
GetNumberFormatW
Beep
FindResourceA
GetCommandLineA
GetLocaleInfoW
GetCalendarInfoW
FileTimeToDosDateTime
LocalFree
WaitForMultipleObjects
GetModuleHandleA
SetComputerNameW
IsBadStringPtrW
ConnectNamedPipe
GetThreadPriority
GlobalFindAtomA
CreateFileA
GetSystemDefaultLCID
FreeResource
FindResourceW
ReadFile
GlobalDeleteAtom
GlobalGetAtomNameA
GetComputerNameA
GetCPInfo

user32

SendDlgItemMessageA
IsDlgButtonChecked
TrackPopupMenu
SendMessageW
ActivateKeyboardLayout
PostMessageW
SetWindowPos
LoadImageA
CreateAcceleratorTableW
GetMessageW
SendDlgItemMessageW
EnableMenuItem
GetKeyboardType
wsprintfA
LoadIconW
ReleaseDC
WinHelpA
LoadIconA
EmptyClipboard

gdi32

CreateDCA
GetCharWidth32W
SaveDC
ExtTextOutW
GetCharWidthFloatW
SetDCBrushColor
ColorMatchToTarget
LineTo
SetArcDirection
CreateSolidBrush
GetTextExtentExPointW
SetRectRgn
CreateFontIndirectExW

advapi32

RegEnumValueA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueA

comctl32

ImageList_SetFlags
CreateToolbarEx

ws2_32

WSAEnumProtocolsW
recvfrom
bind
getservbyname
ioctlsocket
gethostbyname
closesocket
WSAGetLastError
setsockopt

winmm

joyGetNumDevs
mciSendCommandA

winspool.drv

GetPrinterDataExA
WaitForPrinterChange
AddPrinterDriverW
OpenPrinterA
DeletePrinterDriverW
AddJobA
AddPortExA
GetPrinterDriverDirectoryW
AddPrintProcessorA

inetcomm

MimeOleObjectFromMoniker
HrDoAttachmentVerb
CreateRASTransport
MimeOleGetFileInfoW
MimeOleParseRfc822AddressW
MimeOleGetCodePageCharset
MimeOleSMimeCapAddCert
EssReceiptRequestEncodeEx
MimeOleCreateByteStream
MimeOleGenerateMID
MimeOleSetBodyPropA
MimeOleGetPropW
MimeOleFindCharset
CreatePOP3Transport
EssReceiptEncodeEx
MimeOleGetInternat
HrGetLastOpenFileDirectory
GetDllMajorVersion
MimeOleGetFileInfo

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.N
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aAUTTF
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZWQggJ
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.T
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ggLoS
Size: 1024B - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nfiGB
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LlPz
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tyy
Size: 512B - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

ws2_32

winmm

winspool.drv

inetcomm

Sections

.text Size: 11KB - Virtual size: 11KB

.N Size: 2KB - Virtual size: 45KB

.M Size: 1KB - Virtual size: 24KB

.aAUTTF Size: 512B - Virtual size: 7KB

.p Size: 4KB - Virtual size: 37KB

.ZWQggJ Size: 512B - Virtual size: 1KB

.T Size: 1024B - Virtual size: 24KB

.ggLoS Size: 1024B - Virtual size: 26KB

.data Size: 15KB - Virtual size: 15KB

.nfiGB Size: 2KB - Virtual size: 20KB

.LlPz Size: 2KB - Virtual size: 5KB

.tyy Size: 512B - Virtual size: 173KB

.rsrc Size: 169KB - Virtual size: 168KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.N
Size: 2KB - Virtual size: 45KB

.M
Size: 1KB - Virtual size: 24KB

.aAUTTF
Size: 512B - Virtual size: 7KB

.p
Size: 4KB - Virtual size: 37KB

.ZWQggJ
Size: 512B - Virtual size: 1KB

.T
Size: 1024B - Virtual size: 24KB

.ggLoS
Size: 1024B - Virtual size: 26KB

.data
Size: 15KB - Virtual size: 15KB

.nfiGB
Size: 2KB - Virtual size: 20KB

.LlPz
Size: 2KB - Virtual size: 5KB

.tyy
Size: 512B - Virtual size: 173KB

.rsrc
Size: 169KB - Virtual size: 168KB

.reloc
Size: 1KB - Virtual size: 1KB