a338fbbb176aa3ab59998666e78e8700exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a338fbbb176aa3ab59998666e78e8700exe_JC.exe
Size

66KB
MD5

a338fbbb176aa3ab59998666e78e8700
SHA1

f7a95271ce51ae5a3c32a2b45dd4342b31255052
SHA256

415c71f8c56a63e1a151ee9dfe45451a53046bd2da34a4151d1db793ccd1d824
SHA512

73cdbe3db7939eebff5466b89949b7dd05d804d25ea219592fc03cabfb0cb39f9ab86c9e33631d59a3791ec6987060d4c8069eeb2e8f92946f3fe0a79bc0abb3
SSDEEP

1536:UTl+a9xaeWUPFKyKt4ojuALyJI/5fhmAtdspxcCRK8ia:UT1DRtKpmmRBZvspiCRK8T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a338fbbb176aa3ab59998666e78e8700exe_JC.exe

Files

a338fbbb176aa3ab59998666e78e8700exe_JC.exe
.exe windows:4 windows x86

d2b42fb9e2e1450bd32a480d60b6a2af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SignalObjectAndWait
WaitCommEvent
HeapSummary
FreeLibrary
LoadResource
GlobalHandle
VirtualFree
SetPriorityClass
GetPrivateProfileStringA
TlsSetValue
GetACP
HeapReAlloc
AreFileApisANSI

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE