c13af74a5735becab411d95e2c430457_JC[.]exe | Triage

Sharing

General

Target

c13af74a5735becab411d95e2c430457_JC.exe
Size

21KB
MD5

c13af74a5735becab411d95e2c430457
SHA1

5ef4c37c396dba02a72e95b0ec843738dfcf9917
SHA256

f4b698f93759d88bb983dff852ab69508c2f56889ea5b39cc4652ff27dc7abc7
SHA512

a430d984487e57032daf1b9f45c6121135070d1ccec29ec3638eda5044e003d8d8ebce928331804310c7aacf9f19e538fe25953182187aec7a6486c32c18c303
SSDEEP

384:BICHqPF/EkeY3ez3O98bLDVnFov9RZ3P7CFxlZ8Jenkhv8OajUc+6CWfJTiUuanI:lqPJteY3ez3O98bLDVnFov9RZ3P7CFxG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c13af74a5735becab411d95e2c430457_JC.exe

Files

c13af74a5735becab411d95e2c430457_JC.exe
.exe windows:4 windows x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE