bf37e41ac03df529a8ec94d6abb07810exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf37e41ac03df529a8ec94d6abb07810exe_JC.exe
Size

56KB
MD5

bf37e41ac03df529a8ec94d6abb07810
SHA1

2efd0a804189298b2fdad8869bf56b148df8f9c2
SHA256

33bebe82123dc6bcffc1e621dfa86b98f8ef86e411cbee431824bb14886832d8
SHA512

22447a4d718eca09bbf34aa0f910780c426c337b2d1dbb460bd3707d421bfb5acad891a4ce5f4390e80fa8eabad85a6a6559120f751d2efcaffb27b792ee6f1c
SSDEEP

768:n9M/5mIGMwElW1Qbo3c7YkV5HfacvGZ0uVYNBQcBsWvvp7X4kwoSIlWJZ8Zxgp2w:9M0yy9Z00QdBsWvvp7QVp2cgWfH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf37e41ac03df529a8ec94d6abb07810exe_JC.exe

Files

bf37e41ac03df529a8ec94d6abb07810exe_JC.exe
.exe windows:4 windows x86

3de0c7cb264a2120c146c93288e9cfeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
lstrcpyn
CreateJobObjectW
CmdBatNotification
GetEnvironmentStrings
LZStart
LockFile
lstrcpyW
BackupWrite
GetFullPathNameW
FileTimeToDosDateTime
HeapWalk
RegisterWaitForSingleObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE