29535368053539522a938dd8ee92c190_exe32_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

29535368053539522a938dd8ee92c190_exe32_JC.exe
Size

436KB
MD5

29535368053539522a938dd8ee92c190
SHA1

b9382364c5e961e2b15c590edbf490f0d4f811fa
SHA256

670083b1a62e3d67ae3398cc39a85f5baaf2ddca33874772fe04879253647422
SHA512

0b0ebbc486d45c21bc66653ce3efc527b306d3925b5d1e1b9397601e3079c391f0ff04e8de464cd241ff0b2ebcd90a6ffe69e065d8b58eb75938780c4ad5f440
SSDEEP

6144:u4bjV+KTiY2jSnes4bBUBvMFkR3+LhZMW7z5laPL:5bYKTiYEW4bBMvU4uf7zuPL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29535368053539522a938dd8ee92c190_exe32_JC.exe

Files

29535368053539522a938dd8ee92c190_exe32_JC.exe
.exe windows:4 windows x86

bf022aba24d318b8aff3677618179d8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

ExitProcess
SetStdHandle
GetFileType
TerminateProcess
GetStartupInfoA
RaiseException
GetACP
HeapSize
HeapReAlloc
RtlUnwind
HeapAlloc
HeapFree
GetTimeZoneInformation
SetHandleCount
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetStdHandle
HeapDestroy
SizeofResource
GetCurrentDirectoryA
HeapCreate
CompareStringW
SetEnvironmentVariableA
GetSystemDirectoryA
CreateDirectoryA
InterlockedIncrement
InterlockedDecrement
FindResourceA
LoadResource
GlobalAlloc
GlobalLock
UnmapViewOfFile
CloseHandle
GlobalUnlock
GlobalFree
CreateFileA
GetFileSize
GetLastError
GetTempPathA
MoveFileA
lstrcpyA
lstrcatA
FindClose
Sleep
GetLogicalDriveStringsA
SearchPathA
GetDriveTypeA
FindFirstFileA
FindNextFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleFileNameA
GetFullPathNameA
LoadLibraryA
GetProcessVersion
GetOEMCP
GetCPInfo
TlsGetValue
GlobalFlags
SetErrorMode
GlobalReAlloc
LocalReAlloc
TlsSetValue
TlsAlloc
TlsFree
GlobalHandle
FileTimeToSystemTime
LocalAlloc
FileTimeToLocalFileTime
DeleteCriticalSection
GetProcAddress
GetProfileStringA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetFileAttributesA
GetFileTime
FreeLibrary
GetCurrentThread
MulDiv
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
lstrcmpiA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
lstrcpynA
SetLastError
LocalFree
MultiByteToWideChar
WideCharToMultiByte
CreateEventA
lstrlenA
GetPrivateProfileSectionA
CreateProcessA
WaitForSingleObject
lstrcmpA
WinExec
GetVersionExA
GetShortPathNameA
DeleteFileA
CopyFileA
SetFileAttributesA
GetCommandLineA
SetCurrentDirectoryA
GetWindowsDirectoryA
CompareStringA
VirtualFree
VirtualAlloc
GetComputerNameA

user32

GetDC
GetCursorPos
ValidateRect
GetMessageA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
InflateRect
InvalidateRect
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
SetCursor
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
MapDialogRect
ShowWindow
GetActiveWindow
GetAsyncKeyState
LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
GetFocus
ReleaseDC
GrayStringA
SetFocus
AdjustWindowRectEx
ScreenToClient
DrawTextA
CopyRect
IsWindowVisible
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
GetSystemMetrics
CharUpperA
FindWindowA
PeekMessageA
DispatchMessageA
TranslateMessage
PostQuitMessage
DestroyMenu
SetActiveWindow
IsWindow
SendMessageA
LoadMenuA
ModifyMenuA
GetSubMenu
EnableWindow
GetClientRect
GetParent
LoadStringA
wsprintfA
ExitWindowsEx
FindWindowExA
PostMessageA
GetDlgItem
GetMenu
IsWindowUnicode
CharNextA
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA

gdi32

SelectPalette
CreatePalette
DeleteObject
GetDeviceCaps
CreateDIBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetTextExtentPointA
RectVisible
TextOutA
PtVisible
Escape
PatBlt
ExtTextOutA
StretchDIBits
RealizePalette
CreateCompatibleDC
BitBlt
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyA
RegUnLoadKeyA
RegSetKeySecurity
RegSaveKeyA
RegRestoreKeyA
RegReplaceKeyA
RegQueryInfoKeyA
RegNotifyChangeKeyValue
RegLoadKeyA
StartServiceA
RegGetKeySecurity
RegFlushKey
RegEnumKeyExA
RegConnectRegistryA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyA
OpenSCManagerA
ControlService
CloseServiceHandle
OpenServiceA
RegCreateKeyA
DeleteService
RegCreateKeyExA
RegEnumValueA

comctl32

ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

Sections

.text
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf022aba24d318b8aff3677618179d8b

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Sections

.text Size: 176KB - Virtual size: 173KB

.rdata Size: 36KB - Virtual size: 34KB

.data Size: 24KB - Virtual size: 40KB

Shared Size: 4KB - Virtual size: 4B

.rsrc Size: 192KB - Virtual size: 191KB

.text
Size: 176KB - Virtual size: 173KB

.rdata
Size: 36KB - Virtual size: 34KB

.data
Size: 24KB - Virtual size: 40KB

Shared
Size: 4KB - Virtual size: 4B

.rsrc
Size: 192KB - Virtual size: 191KB