fd5882a614504a132bb2969ce1f67474e6ca74b0505d10af6cb41247b90f89d1_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

fd5882a614504a132bb2969ce1f67474e6ca74b0505d10af6cb41247b90f89d1_JC.exe
Size

313KB
MD5

82375b9d56ae05e88e451ed8662634b8
SHA1

ef8f8b920a161097d1007ae4501ba555012c3b18
SHA256

fd5882a614504a132bb2969ce1f67474e6ca74b0505d10af6cb41247b90f89d1
SHA512

c1016745cb1160a87163b8969b5ea81980c600e3ca3eaa7a4f331f31b82703278a3b1a1d21694dea8494340fd83e0d4a90e3ce703950217967a124d2a0ec6536
SSDEEP

3072:H0k/TMYQ0qIN65cVcOXqQK5ULK2AjPj05eyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES:JM/c3qQP2FPjCp/1fvoxEvTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd5882a614504a132bb2969ce1f67474e6ca74b0505d10af6cb41247b90f89d1_JC.exe

Files

fd5882a614504a132bb2969ce1f67474e6ca74b0505d10af6cb41247b90f89d1_JC.exe
.exe windows:6 windows x64

a7a19cad0c2c193feb43fc00c1b6b502

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
EventWrite
EventRegister
EventUnregister
RegCreateKeyExW
RegSetValueExW

kernel32

GetLastError
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
LocalFree
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateMutexW
GetTickCount64
VerifyVersionInfoW
VerSetConditionMask
MulDiv
CloseHandle
GetCurrentProcessId

gdi32

Polyline
SetBkColor
CreateSolidBrush
CreatePen
DeleteObject
GetDeviceCaps
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
SelectObject
GdiAlphaBlend
BitBlt
DeleteDC
GetStockObject
GdiSetBatchLimit
SetTextColor
GetTextMetricsW
PatBlt
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
SetBkMode

user32

IsDlgButtonChecked
CheckRadioButton
EnumDisplaySettingsW
EnumDisplayDevicesW
ChangeDisplaySettingsExW
GetSysColor
CopyImage
LoadBitmapW
DestroyWindow
CreateWindowExW
DrawTextW
CheckDlgButton
MapWindowPoints
FillRect
RedrawWindow
IsCharAlphaNumericW
MessageBoxW
SystemParametersInfoW
SetFocus
SetWindowLongW
GetParent
PostMessageW
EnableWindow
ShowWindow
DialogBoxParamW
KillTimer
SetTimer
EndDialog
SetForegroundWindow
FindWindowW
RegisterClassExW
LoadCursorW
DefWindowProcW
SetWindowTextW
SendMessageW
EndPaint
GetSysColorBrush
FrameRect
BeginPaint
DrawFocusRect
GetWindowLongW
GetFocus
InvalidateRect
SetWindowLongPtrW
SetDlgItemTextW
GetDlgItem
GetClientRect
MapDialogRect
SendDlgItemMessageW
SendMessageTimeoutW
SetWindowPos
PtInRect
GetWindowRect
GetSystemMetrics
GetProcessDefaultLayout
ReleaseDC
LoadStringW
GetDC
GetWindowLongPtrW
TrackMouseEvent

msvcrt

_wtoi
__set_app_type
_fmode
memcpy
__setusermatherr
_amsg_exit
_initterm
memset
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_commode
_acmdln
exit
_cexit
memcmp
_vsnwprintf
_purecall
free
realloc
wcschr
??0exception@@QEAA@AEBQEBDH@Z
?what@exception@@UEBAPEBDXZ
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_callnewh
malloc
_CxxThrowException
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ

ntdll

WinSqmAddToStream
WinSqmIncrementDWORD

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW

uxtheme

CloseThemeData
GetThemeSysFont
GetThemeSysColor
GetThemeColor
GetThemeFont
OpenThemeData
IsThemeActive
DrawThemeParentBackground

oleacc

CreateStdAccessibleObject
LresultFromObject

ole32

CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
StringFromGUID2
CoGetObject
CoCreateInstance

oleaut32

SafeArrayGetLBound
SysAllocString
SysFreeString
SafeArrayGetUBound
SafeArrayGetElement
VariantInit
VariantClear

comctl32

PropertySheetW
ord381
InitCommonControlsEx

dwrite

DWriteCreateFactory

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 235KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7a19cad0c2c193feb43fc00c1b6b502

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

setupapi

uxtheme

oleacc

ole32

oleaut32

comctl32

dwrite

Sections

.text Size: 73KB - Virtual size: 72KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 235KB - Virtual size: 236KB

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 73KB - Virtual size: 72KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 235KB - Virtual size: 236KB

.reloc
Size: 1024B - Virtual size: 1024B