073a60fd7379caba90a5782e31949470_exe32_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

073a60fd7379caba90a5782e31949470_exe32_JC.exe
Size

36KB
MD5

073a60fd7379caba90a5782e31949470
SHA1

e16629c43f33567d92bf688765a693bdfc2ff783
SHA256

f40db4167da28acbb37efc44e368384a0b9b2ef7c6e6005501bfd0d3b6555149
SHA512

4caf2deaa4800c5af87720d7a6cb4840301d2ff49a39eb53f1e96e8b3a1570155e7fccbdf2393d61a6a686a5753cda502e61d15791f9e593d69011ef3aa9f151
SSDEEP

768:1DG9EbjdoVIPbWHMRYMMDHjvEXj+ipe3HJ+ClzpfhyUGHLrVj:1j9o0bWwYMMHYj+ipe3J+ClJhPGHx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
073a60fd7379caba90a5782e31949470_exe32_JC.exe

Files

073a60fd7379caba90a5782e31949470_exe32_JC.exe
.exe windows:4 windows x86

d32dbacd95b4352b04222a840748ca46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetFileAttributesW
GetModuleFileNameW
CloseHandle
Module32First
CreateToolhelp32Snapshot
OutputDebugStringA
SizeofResource
LoadResource
FindResourceA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ