188374d10f77cb5dbe1be25fee50da60_exe32_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

188374d10f77cb5dbe1be25fee50da60_exe32_JC.exe
Size

66KB
MD5

188374d10f77cb5dbe1be25fee50da60
SHA1

54cbd10e1aeee30b8c9c815211b5d79c0ba56e1f
SHA256

e46893b98235198c95cdc36946089c709c0f724f70598c27e4468658d0928197
SHA512

18c485321521ca8ec9d5ca64e202af40062a5cc33aacaa8c72fe8f4f5eab43e4724f4ae234812bf651deeb2685cbcf6f0fabd55b30bb0ef4f7613876f4e4ffa7
SSDEEP

1536:N+RJXoxmHSLLcvhsdN00ghX8WvahY6iTFGk:NsoBcvhsP0XhMVhA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
188374d10f77cb5dbe1be25fee50da60_exe32_JC.exe

Files

188374d10f77cb5dbe1be25fee50da60_exe32_JC.exe
.exe windows:4 windows x86

8a0ad1e1d53c57e5e35660882ee2ae68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessDefaultCpuSets
CompareFileTime
BasepCopyEncryption
WriteConsoleOutputCharacterW
SetConsoleCursorMode
CompareStringW
FindFirstFileTransactedW
AssignProcessToJobObject
QueryActCtxSettingsWWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE