c6d62b99cc0fa58dc5d4ad8fc2f048c0exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6d62b99cc0fa58dc5d4ad8fc2f048c0exe_JC.exe
Size

63KB
MD5

c6d62b99cc0fa58dc5d4ad8fc2f048c0
SHA1

fcd5015988b7d940ac35f16f96be0e29b80db7f7
SHA256

3681fc8ac39f58a69d34bd3bfc1b19c5125cbb88c961aafe3e22cfeb915a5c39
SHA512

18f7196d1e9adf84d5d4439cce9e22e7ee5880537e1c51dec63df79e05d84f179db2f0561046419511f73d78f00d99213f0878a8b40328fcc79bf7e565a337a3
SSDEEP

1536:SrGBfmohFGM8LxCr9EUmyLk1G0CzSH9bDPQGKgCvE9jGx0L:iafdhFWxCru9yL50CzSH9tpXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6d62b99cc0fa58dc5d4ad8fc2f048c0exe_JC.exe

Files

c6d62b99cc0fa58dc5d4ad8fc2f048c0exe_JC.exe
.exe windows:4 windows x86

b36ea9a4fa8e29037db689ba7dfe164b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesW
DuplicateConsoleHandle
GetTapeStatus
FindResourceExA
MoveFileW
ChangeTimerQueueTimer
GlobalMemoryStatusEx
BaseInitAppcompatCache
GetThreadSelectorEntry
GetSystemDefaultUILanguage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE