132e92aabe8751781cac9140db1a32c0_exe32_JC[.]exe | Triage

Sharing

General

Target

132e92aabe8751781cac9140db1a32c0_exe32_JC.exe
Size

146KB
MD5

132e92aabe8751781cac9140db1a32c0
SHA1

897fc6e1005f9a1752e3c456c9cae69200d582f1
SHA256

ef09f3904026d93ba090e5ac034ce3c1ea62e876e94759f0e03ba7c090c54aae
SHA512

4bd6b9b2510396c09866aea779e27bde0bcf9c5f5c67cad024199e93d4204f0ce4fb81e7782844732a2f3a8ee1386c601eb40b7321648f2585cbeb230421e016
SSDEEP

3072:yA4GU4QVmTbVPE7YaXYCfNicisMANRzikt3Ufw21cuFQaArhGOU1nmi5Gup:yF4pVPaoqPoFQaAUn+up

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
132e92aabe8751781cac9140db1a32c0_exe32_JC.exe

Files

132e92aabe8751781cac9140db1a32c0_exe32_JC.exe
.exe windows:1 windows x86

4d82a1a8ac7dae247b7e65f9bf1173b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetLastError
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleA
FormatMessageA
LocalFree
GetTickCount
LocalAlloc
InterlockedCompareExchange

user32

GetCursorPos
CharToOemBuffA

crtdll

__GetMainArgs
exit
raise
signal

mswsock

s_perror

ws2_32

WSASocketW
WSAEventSelect

advapi32

RegOpenKeyExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 427B - Virtual size: 427B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE