11aeddcf9998821a3df05ead9a2866f0_exe32_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11aeddcf9998821a3df05ead9a2866f0_exe32_JC.exe
Size

66KB
MD5

11aeddcf9998821a3df05ead9a2866f0
SHA1

d71a07b562297826285ce72eb1cb1c114fe0119e
SHA256

c3b81f815ed3ef6090dda33e73eb898def80d59ec7d885eb7fcb1c57a8ed0de7
SHA512

010e22a4e23a532f6d17736e21fbc9a17b9ac4801403fbdeae4cb0ac4e888d0d27c33547c048ff88287ff19a01118c61743799545915251f3e8e3f5681bc6cc6
SSDEEP

1536:C0nW7jYbNHF846Wlztmd9pGKJ0TvIQPyAZ/eSePmKUrf6N:tW7E60l29IvxyAJTe+Ko6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11aeddcf9998821a3df05ead9a2866f0_exe32_JC.exe

Files

11aeddcf9998821a3df05ead9a2866f0_exe32_JC.exe
.exe windows:4 windows x86

9eb6801983e03eea1db4fd78521ec1eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileTransactedW
GetDefaultCommConfigW
QueryActCtxWWorker
PssWalkSnapshot
SetFileValidData
GetPackageFamilyName
GetLogicalDrives
BaseCheckAppcompatCache
DeleteFileTransactedW
AssignProcessToJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE