c77f53a954d93a725b65503c83ff5a10exe_JC[.]exe | Triage

Sharing

General

Target

c77f53a954d93a725b65503c83ff5a10exe_JC.exe
Size

66KB
MD5

c77f53a954d93a725b65503c83ff5a10
SHA1

eecbf41dae67001c61c1cf581edc2b8007cc127f
SHA256

709d415b079000e8989c806637eca08f9da629d19e338cc7450f7e9cab0d210d
SHA512

2a2dfd8a1f917d06ff06a3aa9500f3c2840d5df6efed283ea4c9e8bef7da4fefe6d71c4d48def798b8d4fe17ca23d008b4110efbc79d927337c5017821e2fc09
SSDEEP

1536:pMfO2ogBeIJsdCcclBy/DwNp5viUDfgKJz5fqsSuTr0:pMfDovI7TlByENKwf/df7fr0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c77f53a954d93a725b65503c83ff5a10exe_JC.exe

Files

c77f53a954d93a725b65503c83ff5a10exe_JC.exe
.exe windows:4 windows x86

cd8f7b5fa9dac4998a703957d7823508

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionStringW
GetVersion
FindNextVolumeMountPointA
HeapUnlock
GetExitCodeProcess
InitializeSListHead
RemoveLocalAlternateComputerNameW
GetWriteWatch
GetVolumePathNameA
GetNumberFormatA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE