c1450a0ceb88e83d3cd92fd77b71c600exe_JC[.]exe | Triage

Sharing

General

Target

c1450a0ceb88e83d3cd92fd77b71c600exe_JC.exe
Size

63KB
MD5

c1450a0ceb88e83d3cd92fd77b71c600
SHA1

ac331ab276dc472233a090825feb328a39c063b0
SHA256

7ef296f1294a4e9047e98943c9aeb8e383238ffbc2f28d7098a3f2a0d276aa72
SHA512

3cca8df5408b5de552a493153ce1ec055b28d6555665dfe9caf3af39939b0f6986edd5de33da0b3ddb0e45ffada1edfbc276c72ed42e963b73092acb04d3f068
SSDEEP

1536:pQX22xS84LqlRdNyqoTOKRiWoBjP6DVx/I/uQMGNK1HEmx:sM8wQRiTOXTjyDrgmQMG+HFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1450a0ceb88e83d3cd92fd77b71c600exe_JC.exe

Files

c1450a0ceb88e83d3cd92fd77b71c600exe_JC.exe
.exe windows:4 windows x86

e0e4e862256fffcd3887d7306d9b3db0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiber
IsProcessInJob
WaitForMultipleObjects
CancelWaitableTimer
CreateVirtualBuffer
GetProcessVersion
HeapValidate
PeekNamedPipe
OpenEventA
FindFirstVolumeMountPointW
SetCalendarInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE