b8af14e07aaa44542ed87d7616bfa8e0exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8af14e07aaa44542ed87d7616bfa8e0exe_JC.exe
Size

63KB
MD5

b8af14e07aaa44542ed87d7616bfa8e0
SHA1

e9ff44903b128f998ab8426fabace97528415d55
SHA256

e05a00a1a9450b6e8fd9b529e0d4596209cee86209d02899cbfe2c948d4f352e
SHA512

dc2ce0e864b5e5fee52a3030a2dc25ef4367bd2e00a26d8a40b72c2dab6d924205678bdfc63155505e5656dded2ff061e2095baed672e6b4366b3c221984404a
SSDEEP

1536:3IGuKVqiSStdnIaOQNumI0uuVXvIE+OG7iATga:3I/KP1DzHuWQE3+ira

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8af14e07aaa44542ed87d7616bfa8e0exe_JC.exe

Files

b8af14e07aaa44542ed87d7616bfa8e0exe_JC.exe
.exe windows:4 windows x86

60e3cdd024c816174d069be73e814f4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
SignalObjectAndWait
BackupRead
MapViewOfFileEx
GetVersionExA
SetCommTimeouts
FreeEnvironmentStringsA
_lcreat
CancelTimerQueueTimer
UnlockFile
GetDateFormatW
DuplicateConsoleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE