a2831f3c89aeb2f2eca53ebf6c3fa450exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2831f3c89aeb2f2eca53ebf6c3fa450exe_JC.exe
Size

66KB
MD5

a2831f3c89aeb2f2eca53ebf6c3fa450
SHA1

1ec636e0c7d895d6831cb05e062f27bc88cbbaa7
SHA256

bb60709a1735882868bdbe4d4c078652270c868c1b814935c1d21b3b2cda6371
SHA512

65830272f146045172e616875985937159be0ff17add10e22203558ca3d4bea27279f6d88801bde298b298edb5ab34d2c338c0eafa9d4f11f15d16bac796ffec
SSDEEP

1536:J6hIdjnKwnXazIqHgkP96CgH+CIL9LJPyeCit0tqVz9:JTdjKeeXHP9BgALxN6i+gVh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2831f3c89aeb2f2eca53ebf6c3fa450exe_JC.exe

Files

a2831f3c89aeb2f2eca53ebf6c3fa450exe_JC.exe
.exe windows:4 windows x86

670c6ba9e61b1ad6a777df1c89912d8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleVDM
GlobalGetAtomNameA
GetFileAttributesExW
ContinueDebugEvent
GetCurrentConsoleFont
EnumSystemCodePagesW
CompareStringW
PrivCopyFileExW
lstrcmpiW
RegisterConsoleOS2
GetCommModemStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE