c979a120e4d974a7a40cdce5029312c3_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c979a120e4d974a7a40cdce5029312c3_JC.exe
Size

467KB
MD5

c979a120e4d974a7a40cdce5029312c3
SHA1

15e615d12e23d48a43227e618696459f1c050fd7
SHA256

1fbc6e5d6b6c7b60e7f44d4b08c4189b8dc2cf008f9500fc7d1eb2e06c84b4b4
SHA512

7ac2ccb138ae15ae44f91f250ff58cd230b438537bf994b91c4e8d6b048a95dc85d0d20bdab9528c20bc7e1402f5ac33271c740dfaa23fa64faa963b0a036b03
SSDEEP

12288:Iz1Ux4kN8Ca8OnPf8dlvu+gglD2szaaBX:Iwd6PYXggdzasX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c979a120e4d974a7a40cdce5029312c3_JC.exe

Files

c979a120e4d974a7a40cdce5029312c3_JC.exe
.exe windows:4 windows x86

7f770b5ed3d17eb29590935a3d88124b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetPSClsid

oleaut32

VarDecAdd

kernel32

GetProcessHeap
GetCurrentThreadId
GetCommandLineW

Sections

.text
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 351B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE