JournalTrace[.]exe | Triage

Sharing

General

Target

JournalTrace.exe
Size

101KB
MD5

a1d14e8525dd0fad03b50f41ccb0d8ae
SHA1

961d11bb8097c7911afd8aa9892e79e3d269b59f
SHA256

e29af169cd577ad075431004a05ed7902e4e4e35e58dd053b37badd5203cbe46
SHA512

6dcd1e043717cb2d9c7e21a4c85e05cf7768fffdc1c7db74e4ef94eda66bbeb6b3fee09fc7773df1971e9b597bbd3fe348ae990d1ef4e7ea97b9b369aa0e9e1f
SSDEEP

1536:FootnwN/VrROajKHpqcfqop0Y75p8jUlwAuKi//MriCX9dkT6vHqjew:FoodqQajKHpNquzpyAeMeavHwe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JournalTrace.exe

Files

JournalTrace.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ryanb\Documents\tudo\JournalTrace-master\JournalTrace\obj\Release\JournalTrace.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ