ad157ec67a6215aa35e5872210e57860exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad157ec67a6215aa35e5872210e57860exe_JC.exe
Size

63KB
MD5

ad157ec67a6215aa35e5872210e57860
SHA1

384d61747c498694eb86587040beb0597a55a17d
SHA256

e86a3802f122237986971921ce84c193ffcec36438d850707ae906c90d326d4a
SHA512

0880fa8892e2b3d3820233ee77e60644236f7c11d72511579f2342bbeaa2424dec833524e67ee5662d15e12ae5d10f2136c665960c342b59bda499f2f52abe6f
SSDEEP

1536:3ONuiVzY2LTC53rLejyrYbnTrY1H8g9sln/wdWkT8ZS++F:3kuv2LK3PejFfYR8oqIdWkT8ZSNF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad157ec67a6215aa35e5872210e57860exe_JC.exe

Files

ad157ec67a6215aa35e5872210e57860exe_JC.exe
.exe windows:4 windows x86

8ff8d379edf7cab10ffc2010e1185990

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpi
ValidateLCType
SetHandleContext
SetUserGeoID
NlsConvertIntegerToString
LZStart
GetSystemRegistryQuota
FlushFileBuffers
GetTimeFormatW
FreeConsole
InterlockedPushEntrySList
InterlockedExchange

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE