bde8ce5085d58e46abc99722da326580exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bde8ce5085d58e46abc99722da326580exe_JC.exe
Size

62KB
MD5

bde8ce5085d58e46abc99722da326580
SHA1

bd8ec1ab7b58f4862c67eaababceb6ecc3e1b58a
SHA256

2b71fede6b3830f588e6fdef4eed1b611e5820d9b1d9edb654da4e32e0da7d9e
SHA512

f9d084c8266e7d314642c64f716f236928cce7b568eb2aa1171254ed1e2dcde97ff41d88503ac212b095c8193f45fd14b05e04d7925009bc7106939747d1f80f
SSDEEP

1536:i1PI2KAS3y1PKz4U23+/UWYkKHjL2rEEqohWSv5I9i53iwqnV41hxttG3cRXyOHH:05Mf3gIgPrMh99s2l7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bde8ce5085d58e46abc99722da326580exe_JC.exe

Files

bde8ce5085d58e46abc99722da326580exe_JC.exe
.exe windows:4 windows x86

5bfe29366dc5d2bab12710ee890b76e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
OpenThread
IsDebuggerPresent
EnumUILanguagesA
GetModuleHandleExW
VerSetConditionMask
CreateWaitableTimerA
MapUserPhysicalPagesScatter
GetCPInfo
SetConsoleActiveScreenBuffer
CloseProfileUserMapping

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE