27b19ea45c5517a2f5681560fe744a70_exe32_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27b19ea45c5517a2f5681560fe744a70_exe32_JC.exe
Size

66KB
MD5

27b19ea45c5517a2f5681560fe744a70
SHA1

9ef24a424bc2a593be94e1f2fef530152ffe312e
SHA256

1cf90a241604ad1101e4ecbe1a92346bf7f6eb21ac436c8757690f30fc1fb2c5
SHA512

da210a31f1fc97e7f51d65999cc847afd4986411703b247ea6f514c030893016bb0c091943c2bccd61ecbcdd54546c62f312e44d4357123c3ea7b358ad730fac
SSDEEP

1536:zxBJdirU2EhuMuEIuUQ7XPG1ZIIdeU55t69v6:z5/2EhuM+V6XPcrXt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27b19ea45c5517a2f5681560fe744a70_exe32_JC.exe

Files

27b19ea45c5517a2f5681560fe744a70_exe32_JC.exe
.exe windows:4 windows x86

88a1b356c1075eddfe7821e0b085e7cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NlsUpdateSystemLocale
NlsEventDataDescCreate
CloseThreadpool
GetConsoleOriginalTitleW
TransmitCommChar
VirtualAlloc
GetTempPathA
SetCommMask
FindNLSStringEx
ReadConsoleOutputCharacterA
SetThreadExecutionState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE