71c5b2d4594481d16af9736c9e503a80_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

71c5b2d4594481d16af9736c9e503a80_JC.exe
Size

340KB
MD5

71c5b2d4594481d16af9736c9e503a80
SHA1

f06d49b2b987f805163e1a3f7ace3fda7ecbee9a
SHA256

8be1fd6ece826a030dce138d60ba07306067a67233dbe9045cee4dc7e60dbe94
SHA512

01cdfa4679aed7ce7a4be7252c541bca43bbaf1a462761760b291ad38c9258a5290ae5b34f418d1398b9df9ede51492a0ac58797402acc8ad70ad10ba7660b72
SSDEEP

6144:7u6nq2HHRbMTX2h8zkGlY7Ayu5htmXR9DqV2LggakRl:7L/HHRKX2h8zJe7AyuDm/DqVWaM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c5b2d4594481d16af9736c9e503a80_JC.exe

Files

71c5b2d4594481d16af9736c9e503a80_JC.exe
.exe windows:4 windows x86

cd9da6b727735039024e59a805f4051a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
LocalFileTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
GetFileAttributesW
GetCurrentDirectoryW
SetFileTime
WriteFile
EnterCriticalSection
LeaveCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetLastError
SetLastError
GetVersion
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
lstrlenW
lstrcpyW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
GetProcAddress
LoadLibraryW
lstrcatW
GetWindowsDirectoryW
SetCurrentDirectoryW
WaitForSingleObject
SetEvent
CreateEventW
lstrlenA
LocalFree
LocalAlloc
FormatMessageW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
FormatMessageA
DeleteFileW
Process32NextW
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
RemoveDirectoryW
FindClose
FindNextFileW
ReadFile
CopyFileW
GetFullPathNameW
FindFirstFileExW
CreateMutexW
CreateProcessW
GetCommandLineA
GetCommandLineW
CreateFileMappingW
Sleep
GetTickCount
ExitProcess
HeapReAlloc
GetModuleHandleA
SetEndOfFile
GetLocaleInfoW
GetOEMCP
CreateFileA
SetStdHandle
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualProtect
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
HeapSize
GetModuleFileNameA
CloseHandle
CreateFileW
SetFilePointer
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetCPInfo
LCMapStringW
LCMapStringA
GetVersionExA
GetStartupInfoW
VirtualAlloc
FindFirstFileW
InterlockedExchange
GetSystemInfo
VirtualQuery
RtlUnwind

user32

SetWindowLongW
wsprintfW
UnregisterClassW
IsWindow
CreateWindowExW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CreateDialogParamW
ShowWindow
GetWindowRect
GetSystemMetrics
LoadImageW
GetDlgItem
SetForegroundWindow
MoveWindow
KillTimer
DialogBoxParamW
GetWindowLongW
GetWindow
SystemParametersInfoW
GetClientRect
MapWindowPoints
SetWindowPos
GetParent
EndDialog
GetActiveWindow
SetWindowTextW
SetTimer
SendMessageW
PostQuitMessage
IsDialogMessageW
RegisterClassW
DefWindowProcW
PostMessageW
CharNextW

advapi32

RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW

shell32

ShellExecuteExW

ole32

CLSIDFromProgID
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleRun
CoCreateInstance

oleaut32

SysAllocStringByteLen
SysStringByteLen
VariantCopy
VariantInit
VariantClear
VarUI4FromStr
SysFreeString
GetErrorInfo
SysAllocString

shlwapi

PathFindFileNameW

comctl32

InitCommonControlsEx

winmm

timeSetEvent
timeKillEvent

rpcrt4

UuidCreate

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd9da6b727735039024e59a805f4051a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

winmm

rpcrt4

iphlpapi

Sections

.text Size: 184KB - Virtual size: 180KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 96KB - Virtual size: 96KB

.text
Size: 184KB - Virtual size: 180KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 96KB - Virtual size: 96KB