325770f68f696d04b022d60c3c7b7480_exe32_JC[.]exe | Triage

Sharing

General

Target

325770f68f696d04b022d60c3c7b7480_exe32_JC.exe
Size

320KB
MD5

325770f68f696d04b022d60c3c7b7480
SHA1

1e500cbf00471cae021e077de65e25c91cd69d97
SHA256

a3282e317e3c41ea06c36bc4a8e435717610cc8e236c6da852e21614bd8dcfc5
SHA512

4a0d512eaae41a45b481496dadb2f3833a744c6a3d2925488a50026a977ee49cfb082a28499f44646a540c04e6a64c0501e0538e0404ee26c6072b3e416bad95
SSDEEP

6144:BN5AswtH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:5As62EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
325770f68f696d04b022d60c3c7b7480_exe32_JC.exe

Files

325770f68f696d04b022d60c3c7b7480_exe32_JC.exe
.exe windows:4 windows x86

1f5187adb7825bf7ed865df9fd1d00d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
SwitchToThread
LZDone
SetErrorMode
GetWriteWatch
CopyFileExA
GetLocalTime
VirtualFreeEx
SleepEx
SetCriticalSectionSpinCount
CreateMailslotA
GetShortPathNameW
RtlUnwind

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE