23547b98770f0629e7b80b9600d96e90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23547b98770f0629e7b80b9600d96e90_JC.exe
Size

5KB
MD5

23547b98770f0629e7b80b9600d96e90
SHA1

88b499c926d8dfedbe905326a88b4e7ba8af219d
SHA256

f456c77eb75c209968bd03f3bc39395d742526928772d38afe36e968b79d6bf9
SHA512

288dd991cc8ffb6d022f96618478877b8e1eab2043279107cf3a4e5aac3aaa43a5cd97a213180b5eb1c0f65cbfa9a340b7410e9e1ebb7cec280e7e6b2396d9ba
SSDEEP

96:JvtHdXgTvetmwQdwrOD7TrFgzBtLorAPPp:bdXKetmIrOD2tLorAPPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23547b98770f0629e7b80b9600d96e90_JC.exe

Files

23547b98770f0629e7b80b9600d96e90_JC.exe
.exe windows:4 windows x64

43461af35deb9be2cc634e7a33bcd56b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOctetsFree
SnmpUtilOidCpy
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilMemFree
SnmpUtilVarBindFree
SnmpUtilOidToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ