ce20aa6712a35727d616cfb3542f0210exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce20aa6712a35727d616cfb3542f0210exe_JC.exe
Size

66KB
MD5

ce20aa6712a35727d616cfb3542f0210
SHA1

b2a07b1692be8b847b5f21452c850dcab11abeba
SHA256

5ba86c75543b7a476d7cc5475913fe6b80b0ab2270a20062d90b47e11dea6aac
SHA512

fdb359547a6d0d295c02233f161c55a1c7a6263c23fb98a73ede532c092a35e6620bff482e60e2cc5513ecfa4b6cd16e6ec5a8d265e640563c3f595c6c0085f5
SSDEEP

1536:FxiLA+dHHRIRuvQoz3Zztgx70XS5kZRsYDgn1uB:FvEOhozJhC70XSqZmSgnQB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce20aa6712a35727d616cfb3542f0210exe_JC.exe

Files

ce20aa6712a35727d616cfb3542f0210exe_JC.exe
.exe windows:4 windows x86

06ba00e6c1cf9ec37fa7ef8d2fc4a663

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExW
LZSeek
SetCPGlobal
FormatMessageW
GetProcessVersion
WriteConsoleOutputW
IsBadHugeReadPtr
AddConsoleAliasW
RemoveLocalAlternateComputerNameW
GetComputerNameExA
ChangeTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE