b9e2f15700749a88b5ec8aff3bf437d0exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9e2f15700749a88b5ec8aff3bf437d0exe_JC.exe
Size

56KB
MD5

b9e2f15700749a88b5ec8aff3bf437d0
SHA1

51d12e4814581b14339221ace46854d4ba0fab74
SHA256

3370b2270e6f602cf0b21a931eea524be4bcf4f946dcc7bebc21a91ee026bb57
SHA512

2bf4e712d82f92acf434eedf47b2f23fd1af88e94f9e15d4703216ac5a86f8eb258587041672da3e29e0a4d82daccc7d440099bd387f641d0b2d09fbb96286ef
SSDEEP

1536:1o6dZdEvBProSxF/ODuSJRyQ9bOneHFN2MZODB:1pZdYO2/OiSJDanEyB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9e2f15700749a88b5ec8aff3bf437d0exe_JC.exe

Files

b9e2f15700749a88b5ec8aff3bf437d0exe_JC.exe
.exe windows:4 windows x86

505786b2e7c9dbbf19a75177e9575338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByteEx
GetModuleFileNameW
SetClientTimeZoneInformation
GetSystemTimes
GetHandleContext
IsWow64Process
SetConsoleMenuClose
GetCurrentThreadId
PulseEvent
FoldStringA
GlobalUnfix

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE