70cf555ac1e4cf531c8669e9b89202b0exe_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

70cf555ac1e4cf531c8669e9b89202b0exe_JC.exe
Size

478KB
MD5

70cf555ac1e4cf531c8669e9b89202b0
SHA1

d2f0f6526b537fe27df6d3f6b3ebf5e792df040a
SHA256

993752a2d7b922542ae74a8c472c4fd6f05ab6608163e58fe23efbed51225f36
SHA512

f22aeee438f61372d3eb79dd1a7e5141c7c6a13c7b41873adb433d01afb486efe98594791a0bbb8bb18052d113d411384086ea1c46683161a8c2208d7d0890d1
SSDEEP

12288:dvVl1ql8SD4mRlR2HH2fz45+uK+Gc6LTkXwssJKH:d5J6lsHH2M/6LTUwsIKH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70cf555ac1e4cf531c8669e9b89202b0exe_JC.exe

Files

70cf555ac1e4cf531c8669e9b89202b0exe_JC.exe
.exe windows:5 windows x86

d235e31eac92bbcb781a92e5e80ba24d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
HeapAlloc
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
RaiseException
IsProcessorFeaturePresent
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
Sleep
HeapSize
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
HeapReAlloc
RtlUnwind
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d235e31eac92bbcb781a92e5e80ba24d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 288KB - Virtual size: 288KB

.reloc Size: 6KB - Virtual size: 6KB

.rmnet Size: 54KB - Virtual size: 56KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 288KB - Virtual size: 288KB

.reloc
Size: 6KB - Virtual size: 6KB

.rmnet
Size: 54KB - Virtual size: 56KB