c9056a55f03989e6053b1c8b14c02a40exe_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

c9056a55f03989e6053b1c8b14c02a40exe_JC.exe
Size

530KB
MD5

c9056a55f03989e6053b1c8b14c02a40
SHA1

501de46190dc0b1aace1efa669ba2f062a79eef3
SHA256

c4f505ee556e086c0307b0ba5f5171fc58b7635e97a4662df6d33459843b812d
SHA512

3a17b86cc5c53c75ce7585dcb788a37a7bc4fd7d2ba39c2e788052c79dfb8670cfa6a88a1de34bb0f6980d5b4dcc7b238b4f9f1fa087441ead4d73545339025f
SSDEEP

12288:9lQ0CZFjvcZMQk9a5Bfi5cmT8ClCdotFeYbsBwy6qCQf7dE:/Q0CLKk82b8CCKEYwg8T2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9056a55f03989e6053b1c8b14c02a40exe_JC.exe

Files

c9056a55f03989e6053b1c8b14c02a40exe_JC.exe
.exe windows:4 windows x86

0a36370ef97fe3136cffc7abe4fade7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
IsBadWritePtr
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
RtlUnwind
GetStartupInfoW
GetDiskFreeSpaceW
GetTempFileNameW
LocalLock
LocalUnlock
GetFileTime
GetFileAttributesW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetErrorMode
GetShortPathNameW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetStringTypeExW
DeleteFileW
MoveFileW
GetCurrentDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
RaiseException
InterlockedIncrement
GlobalFlags
lstrcmpiW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalGetAtomNameW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
lstrcmpA
lstrcmpiA
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
WideCharToMultiByte
CopyFileW
lstrcpyW
GlobalSize
GlobalAlloc
FormatMessageW
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
lstrcpynW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleA
LoadLibraryA
lstrlenW
lstrcatW
lstrcmpW
GetModuleHandleW
GetVersionExA
GetExitCodeThread
InterlockedDecrement
lstrlenA
MultiByteToWideChar
GetVersion
WinExec
CreateThread
WaitForSingleObject
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleFileNameW
CreateEventW
GetLastError
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
FindResourceW
LoadResource
LockResource
QueryPerformanceCounter
SizeofResource

user32

IsRectEmpty
MapVirtualKeyW
GetKeyNameTextW
CharUpperW
DestroyIcon
DeleteMenu
GetDialogBaseUnits
GetSysColorBrush
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
wsprintfW
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
ReleaseCapture
LoadAcceleratorsW
InvalidateRect
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
ShowOwnedPopups
SetCursor
PostQuitMessage
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
FillRect
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
ScrollWindowEx
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
UnionRect
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
LoadCursorW
EnableWindow
UnregisterClassA
PostMessageW
SetTimer
KillTimer
GetDlgItem
SetWindowPos
UpdateWindow
SendMessageW
LoadIconW
FindWindowW
TabbedTextOutW
GetWindow
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
MessageBoxW
SetRect
WindowFromPoint
SetParent
GetSystemMenu
SetCapture
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetClientRect
GetMenu
LockWindowUpdate
GetDCEx
GetTabbedTextExtentW
MessageBeep
SetDlgItemTextW
IsClipboardFormatAvailable
PtInRect
CopyRect
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowLongW
GetWindowLongW
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
SetWindowPlacement
UnregisterClassW
RegisterClassW
GetClassInfoW
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
GetParent

gdi32

CreateFontIndirectW
GetTextExtentPoint32W
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetTextMetricsW
CreateCompatibleBitmap
GetCharWidthW
CreateFontW
GetBkColor
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateDCW
CopyMetaFileW
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
GetDeviceCaps
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
SetViewportExtEx
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
StretchDIBits
GetDCOrgEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
ScaleViewportExtEx

comdlg32

PrintDlgW
CommDlgExtendedError
FindTextW
ReplaceTextW
GetOpenFileNameW
GetSaveFileNameW
PageSetupDlgW
GetFileTitleW

winspool.drv

GetJobW
OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCreateKeyW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
FreeSid
LookupAccountSidA
AllocateAndInitializeSid
RegSetValueW
RegOpenKeyW
RegDeleteKeyW
GetFileSecurityW
SetFileSecurityW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW

shell32

DragFinish
DragQueryFileW
ExtractIconW
SHGetFileInfoW
SHGetSpecialFolderPathW

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
ImageList_Merge

shlwapi

PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

ole32

CoInitializeSecurity
CreateBindCtx
CoInitializeEx
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CoTaskMemAlloc
ReleaseStgMedium
OleDuplicateData
StringFromCLSID
CoTreatAsClass
CoDisconnectObject
StringFromGUID2
CLSIDFromString
StgCreateDocfile

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocString
SysAllocStringLen
VariantChangeType
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
SysReAllocStringLen
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
GetErrorInfo
SetErrorInfo
CreateErrorInfo

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0a36370ef97fe3136cffc7abe4fade7c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wtsapi32

Sections

.text Size: 300KB - Virtual size: 299KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 108KB - Virtual size: 108KB

.text
Size: 300KB - Virtual size: 299KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 108KB - Virtual size: 108KB