5394436842861b7f514de6e913c8d7be_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5394436842861b7f514de6e913c8d7be_JC.exe
Size

343KB
MD5

5394436842861b7f514de6e913c8d7be
SHA1

587cfc0480f0b61e9ede7189626b1095fbad9c73
SHA256

44811addd19525f2f99005364d3cd1170797df85f54bc7413f74ae920d673abe
SHA512

7223e50e25009a5a9ce0e8873c1b81a524b85d530b03576afe5bbb8eb94ce915cbff779f6636ce5bfa73b7ddda812ed0bde235c9c2795483ab4b81f1ec177b55
SSDEEP

6144:SaVKyyzwbnUkoiqwcAR92o29tZTEr6UTdO5CksxCDy9pPbzBHU2ytlum:g7yUTihRQhE9ONs46pP3BHUbtJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5394436842861b7f514de6e913c8d7be_JC.exe

Files

5394436842861b7f514de6e913c8d7be_JC.exe
.exe windows:5 windows x86

04436556038016bdc579850c86f036aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersInfo

Sections

YHGSDW
Size: - Virtual size: 424KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YHGSDW
Size: 340KB - Virtual size: 344KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE