d57024f9a658ef8c7eda660afc36cc37_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d57024f9a658ef8c7eda660afc36cc37_JC.exe
Size

83KB
MD5

d57024f9a658ef8c7eda660afc36cc37
SHA1

43e696098c096f580d6f59ab5cd916670cf56f34
SHA256

548bf175a70e6339ffa06913ad3d75edbc20f5c3744a22df1ade69e677e08e85
SHA512

cbc463810bd58341c4557f72f6c5fa3efb2cdb52a90a927dab6119343957ee6c62cfdfe2aeb9df351831a3157d05386ff4c7697863f64ae2338e44e95550f472
SSDEEP

1536:m0YA3uv2mKEPy3YIBBMXf4Ey1VwLRuEe4AYVEt4AQTGNopjDoSzI9hrdNNM:BMemK4y3YIoXfgSHHFVEtxuyDTK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d57024f9a658ef8c7eda660afc36cc37_JC.exe

Files

d57024f9a658ef8c7eda660afc36cc37_JC.exe
.exe windows:4 windows x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ