0dab56c7a262f7ac722bcc715b671ef0_exe32_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dab56c7a262f7ac722bcc715b671ef0_exe32_JC.exe
Size

66KB
MD5

0dab56c7a262f7ac722bcc715b671ef0
SHA1

be7a2077cb05b4fe5e7751268645254802cf2473
SHA256

e6d86824fd6f8dc5cc9387ed604a81d23dc9f2b4ec9d1058305c2b141cc5651e
SHA512

217a18ad3c3d267e78c2b2fe476e9bca13702bfb19d6b018340fe3ad00213f82a6621d014f958dfa9af5c9a10457ddb642944abd520ddee3cfd05d8e4bfe9b86
SSDEEP

1536:CdAZWq1fTlgyTDMswztIXeRdngtuJloPuW3NSNnQxGprxgsCVPet8dq:CKZ1vMsItRRF6ugmW3ENQxGK8p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dab56c7a262f7ac722bcc715b671ef0_exe32_JC.exe

Files

0dab56c7a262f7ac722bcc715b671ef0_exe32_JC.exe
.exe windows:4 windows x86

b8b97e93453d8bf3714110d17eaa2174

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeLabelW
SetThreadPreferredUILanguages
BuildCommDCBAndTimeoutsA
IsValidLocaleName
GetWriteWatch
InitializeConditionVariable
MoveFileExA
ReadConsoleInputExA
GetThreadErrorMode
InitializeSynchronizationBarrier

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE