11ea996286303bc147677932979eadf0_exe32_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11ea996286303bc147677932979eadf0_exe32_JC.exe
Size

66KB
MD5

11ea996286303bc147677932979eadf0
SHA1

d69f34c0e993cc8443fa92c41cd32812c4e5b42a
SHA256

e3cffe0cbdd6d6af4c4d8d4a619f88cdc3d3d2a0fbdefee61db3215a33e7cc9a
SHA512

073e6b7ea459afe6728e58ae248b0e37a484f3595cb92512ec72e374ca1882fbad44614e283d872a96b8cc1a65aef44848632f478779d3af141632feed658459
SSDEEP

1536:Jf9WopowN+uplGvA+HPMLc3P7NWPl3Cz9nJ:Jf9Wop/PplGvFMqCRc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11ea996286303bc147677932979eadf0_exe32_JC.exe

Files

11ea996286303bc147677932979eadf0_exe32_JC.exe
.exe windows:4 windows x86

9b8e373c231d4cbdd4e5527d5de79249

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

K32EnumProcessModules
CreateThreadpoolWait
_hread
SetCommTimeouts
GetPriorityClass
DosDateTimeToFileTime
Wow64DisableWow64FsRedirection
GetCalendarDaysInMonth
DosPathToSessionPathA
lstrcmpiA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE