a27ffac8197f9a383520c5ecc0314050exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a27ffac8197f9a383520c5ecc0314050exe_JC.exe
Size

63KB
MD5

a27ffac8197f9a383520c5ecc0314050
SHA1

acfc7683af40b0b58aec5ce9bf3b7abe90e9a72f
SHA256

c89403339dc6d333ebdb4bf89a8638303acbffa3ecc224a0a63cc1d77a7f9207
SHA512

86a5fcf11ba8b9af2a0019b5bcacbaf0958af9e5a8848b57978a231020ce4aeeb65d54f6aea61a32df57a213efe0a7154ec8689e3f4303646cca012abf4ab3ee
SSDEEP

1536:khniqNPywnsmcDa7mkl1WPesRvi53/7ZwSWFsXv:khniaPAAlH3/7BWFsf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a27ffac8197f9a383520c5ecc0314050exe_JC.exe

Files

a27ffac8197f9a383520c5ecc0314050exe_JC.exe
.exe windows:4 windows x86

78223d53ad9df267b1a31a9eb983c543

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DefineDosDeviceA
GetSystemDefaultLangID
GetSystemInfo
SetLocaleInfoA
WriteConsoleOutputA
SetLastError
ReadConsoleOutputCharacterA
GetThreadLocale
IsProcessorFeaturePresent
GetModuleFileNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE