c85dd184a276067aad49ce7bec25bc50exe_JC[.]exe | Triage

Sharing

General

Target

c85dd184a276067aad49ce7bec25bc50exe_JC.exe
Size

66KB
MD5

c85dd184a276067aad49ce7bec25bc50
SHA1

c70464d73db53c78574a0ea558b59b96221dbef0
SHA256

c586203f16a68e1bcb0b27329745d585825567445617c7c6184599e51c88ff49
SHA512

3fe4ca486241f06bae6607c467ce67d88d46fad0d8b5af7408ea3eb2a6dbbe8a58b7ddb1f38b90138b837ef379b1c8d65fa9fbfda3ec010d2150853e4fe127f9
SSDEEP

1536:d2WeDym5SKlvB2EocTXUtQfcqmojQQyX0xWNyTekFjVeRX:gHy+aVVtQfcqmojQQyXnyVVeRX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c85dd184a276067aad49ce7bec25bc50exe_JC.exe

Files

c85dd184a276067aad49ce7bec25bc50exe_JC.exe
.exe windows:4 windows x86

e95ff01990b000a2475aec94484db0cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileW
GetDriveTypeA
PostQueuedCompletionStatus
WaitCommEvent
BackupSeek
SetUnhandledExceptionFilter
WriteConsoleOutputA
DosDateTimeToFileTime
IsDebuggerPresent
CreateRemoteThread
CheckRemoteDebuggerPresent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE