8d8af6f6b1a3ca3065da9ab343182425_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d8af6f6b1a3ca3065da9ab343182425_JC.exe
Size

512KB
MD5

8d8af6f6b1a3ca3065da9ab343182425
SHA1

168cf9da092ca76ad1fa92d0889edf8fc1744090
SHA256

3f9efcf2921d082e4a8e1b3d85377a190e8bf28f4ae070007bbaabfd1fdf7974
SHA512

7e5b78ffdebaa9a2267c5f376fe4d13d30daa74da571d2b759e4c11b2bac4c8277415168aa6d0dc4b2ace303802ca25648d4211ad75f48a205cabb7c2d679023
SSDEEP

12288:DJDOjYopOZqaGnxz8j/mB5kC+OVdZS8mMLIHk:VDOk5ZqaGnxE/mB5k0Hs8UHk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d8af6f6b1a3ca3065da9ab343182425_JC.exe

Files

8d8af6f6b1a3ca3065da9ab343182425_JC.exe
.exe windows:4 windows x86

97439336c43c51bd3ded2eabbf2e6bb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
RaiseException

user32

GetMessageTime

Sections

.text
Size: 505KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 235B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE