71a1ca6be781ff814d43cc93677371c0exe_JC[.]exe

General

Target

71a1ca6be781ff814d43cc93677371c0exe_JC.exe
Size

396KB
MD5

71a1ca6be781ff814d43cc93677371c0
SHA1

d94d0a0b36b05f355d3a85c5f85781f52d70a8ae
SHA256

c2b7a18aa7c783b39c28652ae3d5b4f46b374a3f6850342e2acf6f6fb2bb9cad
SHA512

dbb944dfc5975b4768e99e4e809a3de35d58ddc051494898ba5c3cec4174e70c4586512062a8e0a778b564459181342b7034af0e8c69eca02cc3d559454344d1
SSDEEP

6144:bPLcp7EbLQqdQT+goOpyvhP0+eqoDq7SyKqOl5mvcCYaWGo0b:bPQibLBWTyqyvV0JDq7Sylq5m0kvoU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71a1ca6be781ff814d43cc93677371c0exe_JC.exe

Files

71a1ca6be781ff814d43cc93677371c0exe_JC.exe
.exe windows:4 windows x86

50ec42bec726193d639682af9879b9fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetCurrentProcessId
GetProcAddress
LoadLibraryW
CreateFileW
GetLocalTime
GlobalAlloc
InitializeCriticalSection
DeleteCriticalSection
RaiseException
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
RtlUnwind
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetCPInfo
HeapAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
GetLastError
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleFileNameA
WriteFile
SetUnhandledExceptionFilter
HeapSize
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
FlushFileBuffers
SetFilePointer
CloseHandle
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
VirtualProtect
GetSystemInfo
LoadLibraryA
GetOEMCP
SetStdHandle
GetLocaleInfoW
ReadFile

ole32

CoGetCurrentProcess

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50ec42bec726193d639682af9879b9fa

Headers

File Characteristics

Imports

kernel32

ole32

Sections

.text Size: 104KB - Virtual size: 102KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 268KB - Virtual size: 315KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 104KB - Virtual size: 102KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 268KB - Virtual size: 315KB

.rsrc
Size: 4KB - Virtual size: 1KB