c4177c309bbf6d54c7e896acc3caa230exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4177c309bbf6d54c7e896acc3caa230exe_JC.exe
Size

56KB
MD5

c4177c309bbf6d54c7e896acc3caa230
SHA1

84755def83cae9ba220d306ce9518fce4eb649cb
SHA256

4a02b15a23f5dba9dab643357adef6b280607dc66f1e9b1d04ef1c88e1eae3c5
SHA512

32e9484cf8fe8980f563c85d0c05fe703410d74682c621f964862800e90534c6892f41259fa9867b620ba42c5fb796242f5c0c3b2f03b68e62a27186d38738ae
SSDEEP

1536:m1fU1W3qfJ2OtIyzwD++O4/OF81pdIO+xYzZzoc:Ysw3dOGowDw8BVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4177c309bbf6d54c7e896acc3caa230exe_JC.exe

Files

c4177c309bbf6d54c7e896acc3caa230exe_JC.exe
.exe windows:4 windows x86

8c2c66e4c92845c81b97defb59efdcd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
GetProcessHandleCount
GetPrivateProfileSectionNamesW
VirtualUnlock
CloseProfileUserMapping
CancelDeviceWakeupRequest
RemoveLocalAlternateComputerNameA
FindNextFileW
WideCharToMultiByte

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE