41a3551c5d8a03062de70e886ed54dc0_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

41a3551c5d8a03062de70e886ed54dc0_JC.exe
Size

40KB
MD5

41a3551c5d8a03062de70e886ed54dc0
SHA1

f59498254a23f0427ca413d5f916c3350244cbcc
SHA256

c65f40061122c805a747f3941504e2f7c76ee114cef5802b40c7b72af1eb653b
SHA512

df27aa1de969b71ca8ab38de672e3b1e99246275c6fa22f759f078d22ab4cf427a6ea12a2667ddc75593d033dc55e8922b368122c5d978f397c11d9e3c989f59
SSDEEP

384:4Gh6H7rUn7hv65quzw3j2RPfHt56k8pVNjMAp2rGntf8pmhlswpwKymWGmGovy8j:4F4nU5qyE2RPvCLPxsKJHhiXyiRv

Score

1^/10

Malware Config

Signatures

Files

41a3551c5d8a03062de70e886ed54dc0_JC.exe
.dll windows:6 windows x64

bbe846b7969603a37bcf0302477b7b9f

Code Sign

c1:07:d6:a0:03:3a:43:f8:69:f3:66:20:9f:d9:36:b7
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

04/05/2022, 00:00

Not After

04/05/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Folsom,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:70:03:99:62:1a:21:3d:f6:84:97:6d:79:42:66:d8:d4:65:82:8a:f5:fb:34:2b:94:f1:66:a3:1a:2e:74:65
Signer

Actual PE Digest

43:70:03:99:62:1a:21:3d:f6:84:97:6d:79:42:66:d8:d4:65:82:8a:f5:fb:34:2b:94:f1:66:a3:1a:2e:74:65

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemTimeAdjustment
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memset

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
_aligned_recalloc
_aligned_realloc
_aligned_free

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initterm
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initialize_narrow_environment

Exports

Exports

KMP_ALIGNED_MALLOC
KMP_CALLOC
KMP_CREATE_AFFINITY_MASK
KMP_DESTROY_AFFINITY_MASK
KMP_FREE
KMP_GET_AFFINITY
KMP_GET_AFFINITY_MASK_PROC
KMP_GET_AFFINITY_MAX_PROC
KMP_GET_BLOCKTIME
KMP_GET_CANCELLATION_STATUS
KMP_GET_LIBRARY
KMP_GET_NUM_KNOWN_THREADS
KMP_GET_STACKSIZE
KMP_GET_STACKSIZE_S
KMP_MALLOC
KMP_REALLOC
KMP_SET_AFFINITY
KMP_SET_AFFINITY_MASK_PROC
KMP_SET_BLOCKTIME
KMP_SET_DEFAULTS
KMP_SET_DISP_NUM_BUFFERS
KMP_SET_LIBRARY
KMP_SET_LIBRARY_SERIAL
KMP_SET_LIBRARY_THROUGHPUT
KMP_SET_LIBRARY_TURNAROUND
KMP_SET_STACKSIZE
KMP_SET_STACKSIZE_S
KMP_SET_WARNINGS_OFF
KMP_SET_WARNINGS_ON
KMP_UNSET_AFFINITY_MASK_PROC
OMP_CAPTURE_AFFINITY
OMP_CONTROL_TOOL
OMP_DESTROY_ALLOCATOR
OMP_DESTROY_LOCK
OMP_DESTROY_NEST_LOCK
OMP_DISPLAY_AFFINITY
OMP_DISPLAY_ENV
OMP_FULFILL_EVENT
OMP_GET_ACTIVE_LEVEL
OMP_GET_AFFINITY_FORMAT
OMP_GET_ANCESTOR_THREAD_NUM
OMP_GET_CANCELLATION
OMP_GET_DEFAULT_ALLOCATOR
OMP_GET_DEFAULT_DEVICE
OMP_GET_DEVICE_NUM
OMP_GET_DYNAMIC
OMP_GET_INITIAL_DEVICE
OMP_GET_LEVEL
OMP_GET_MAX_ACTIVE_LEVELS
OMP_GET_MAX_TASK_PRIORITY
OMP_GET_MAX_TEAMS
OMP_GET_MAX_THREADS
OMP_GET_NESTED
OMP_GET_NUM_DEVICES
OMP_GET_NUM_PLACES
OMP_GET_NUM_PROCS
OMP_GET_NUM_TEAMS
OMP_GET_NUM_THREADS
OMP_GET_PARTITION_NUM_PLACES
OMP_GET_PARTITION_PLACE_NUMS
OMP_GET_PLACE_NUM
OMP_GET_PLACE_NUM_PROCS
OMP_GET_PLACE_PROC_IDS
OMP_GET_PROC_BIND
OMP_GET_SCHEDULE
OMP_GET_SUPPORTED_ACTIVE_LEVELS
OMP_GET_TEAMS_THREAD_LIMIT
OMP_GET_TEAM_NUM
OMP_GET_TEAM_SIZE
OMP_GET_THREAD_LIMIT
OMP_GET_THREAD_NUM
OMP_GET_WTICK
OMP_GET_WTIME
OMP_INIT_ALLOCATOR
OMP_INIT_LOCK
OMP_INIT_LOCK_WITH_HINT
OMP_INIT_NEST_LOCK
OMP_INIT_NEST_LOCK_WITH_HINT
OMP_IN_EXPLICIT_TASK
OMP_IN_FINAL
OMP_IN_PARALLEL
OMP_IS_INITIAL_DEVICE
OMP_PAUSE_RESOURCE
OMP_PAUSE_RESOURCE_ALL
OMP_SET_AFFINITY_FORMAT
OMP_SET_DEFAULT_ALLOCATOR
OMP_SET_DEFAULT_DEVICE
OMP_SET_DYNAMIC
OMP_SET_LOCK
OMP_SET_MAX_ACTIVE_LEVELS
OMP_SET_NESTED
OMP_SET_NEST_LOCK
OMP_SET_NUM_TEAMS
OMP_SET_NUM_THREADS
OMP_SET_SCHEDULE
OMP_SET_TEAMS_THREAD_LIMIT
OMP_TARGET_ALLOC
OMP_TARGET_ASSOCIATE_PTR
OMP_TARGET_DISASSOCIATE_PTR
OMP_TARGET_FREE
OMP_TARGET_IS_PRESENT
OMP_TARGET_MEMCPY
OMP_TARGET_MEMCPY_ASYNC
OMP_TARGET_MEMCPY_RECT
OMP_TARGET_MEMCPY_RECT_ASYNC
OMP_TEST_LOCK
OMP_TEST_NEST_LOCK
OMP_UNSET_LOCK
OMP_UNSET_NEST_LOCK
kmp_aligned_malloc
kmp_calloc
kmp_create_affinity_mask
kmp_destroy_affinity_mask
kmp_free
kmp_get_affinity
kmp_get_affinity_mask_proc
kmp_get_affinity_max_proc
kmp_get_blocktime
kmp_get_cancellation_status
kmp_get_library
kmp_get_num_known_threads
kmp_get_stacksize
kmp_get_stacksize_s
kmp_malloc
kmp_realloc
kmp_set_affinity
kmp_set_affinity_mask_proc
kmp_set_blocktime
kmp_set_defaults
kmp_set_disp_num_buffers
kmp_set_library
kmp_set_library_serial
kmp_set_library_throughput
kmp_set_library_turnaround
kmp_set_stacksize
kmp_set_stacksize_s
kmp_set_warnings_off
kmp_set_warnings_on
kmp_unset_affinity_mask_proc
kmpc_aligned_malloc
kmpc_calloc
kmpc_free
kmpc_get_affinity_mask_proc
kmpc_malloc
kmpc_realloc
kmpc_set_affinity_mask_proc
kmpc_set_blocktime
kmpc_set_defaults
kmpc_set_disp_num_buffers
kmpc_set_library
kmpc_set_stacksize
kmpc_set_stacksize_s
kmpc_unset_affinity_mask_proc
omp_aligned_alloc
omp_aligned_calloc
omp_alloc
omp_calloc
omp_capture_affinity
omp_cgroup_mem_alloc
omp_const_mem_alloc
omp_const_mem_space
omp_control_tool
omp_default_mem_alloc
omp_default_mem_space
omp_destroy_allocator
omp_destroy_lock
omp_destroy_nest_lock
omp_display_affinity
omp_display_env
omp_free
omp_fulfill_event
omp_get_active_level
omp_get_affinity_format
omp_get_ancestor_thread_num
omp_get_cancellation
omp_get_default_allocator
omp_get_default_device
omp_get_device_num
omp_get_dynamic
omp_get_initial_device
omp_get_level
omp_get_max_active_levels
omp_get_max_task_priority
omp_get_max_teams
omp_get_max_threads
omp_get_nested
omp_get_num_devices
omp_get_num_places
omp_get_num_procs
omp_get_num_teams
omp_get_num_threads
omp_get_partition_num_places
omp_get_partition_place_nums
omp_get_place_num
omp_get_place_num_procs
omp_get_place_proc_ids
omp_get_proc_bind
omp_get_schedule
omp_get_supported_active_levels
omp_get_team_num
omp_get_team_size
omp_get_teams_thread_limit
omp_get_thread_limit
omp_get_thread_num
omp_get_wtick
omp_get_wtime
omp_high_bw_mem_alloc
omp_high_bw_mem_space
omp_in_explicit_task
omp_in_final
omp_in_parallel
omp_init_allocator
omp_init_lock
omp_init_lock_with_hint
omp_init_nest_lock
omp_init_nest_lock_with_hint
omp_is_initial_device
omp_large_cap_mem_alloc
omp_large_cap_mem_space
omp_low_lat_mem_alloc
omp_low_lat_mem_space
omp_null_allocator
omp_pause_resource
omp_pause_resource_all
omp_pteam_mem_alloc
omp_realloc
omp_set_affinity_format
omp_set_default_allocator
omp_set_default_device
omp_set_dynamic
omp_set_lock
omp_set_max_active_levels
omp_set_nest_lock
omp_set_nested
omp_set_num_teams
omp_set_num_threads
omp_set_schedule
omp_set_teams_thread_limit
omp_target_alloc
omp_target_associate_ptr
omp_target_device_mem_alloc
omp_target_device_mem_space
omp_target_disassociate_ptr
omp_target_free
omp_target_host_mem_alloc
omp_target_host_mem_space
omp_target_is_present
omp_target_memcpy
omp_target_memcpy_async
omp_target_memcpy_rect
omp_target_memcpy_rect_async
omp_target_shared_mem_alloc
omp_target_shared_mem_space
omp_test_lock
omp_test_nest_lock
omp_thread_mem_alloc
omp_unset_lock
omp_unset_nest_lock
ompc_capture_affinity
ompc_display_affinity
ompc_get_affinity_format
ompc_get_ancestor_thread_num
ompc_get_team_size
ompc_set_affinity_format
ompc_set_dynamic
ompc_set_max_active_levels
ompc_set_nested
ompc_set_num_threads
ompc_set_schedule

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbe846b7969603a37bcf0302477b7b9f

Code Sign

c1:07:d6:a0:03:3a:43:f8:69:f3:66:20:9f:d9:36:b7Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

43:70:03:99:62:1a:21:3d:f6:84:97:6d:79:42:66:d8:d4:65:82:8a:f5:fb:34:2b:94:f1:66:a3:1a:2e:74:65Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 256B

.pdata Size: 1024B - Virtual size: 804B

.gfids Size: 512B - Virtual size: 16B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 20B

c1:07:d6:a0:03:3a:43:f8:69:f3:66:20:9f:d9:36:b7
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

43:70:03:99:62:1a:21:3d:f6:84:97:6d:79:42:66:d8:d4:65:82:8a:f5:fb:34:2b:94:f1:66:a3:1a:2e:74:65
Signer

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 256B

.pdata
Size: 1024B - Virtual size: 804B

.gfids
Size: 512B - Virtual size: 16B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 20B