james_miniCloud[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

james_miniCloud.exe
Size

3.6MB
MD5

d6d7b6eec05629a25a7a8ccef4f49c68
SHA1

7d08b9a1a95c9e8eef32a1ad9fe8c3b9b365b24f
SHA256

224dcca29a49075125bbea6a2a067365838474c9859a09bc44dc6a8e07cb0a4a
SHA512

4bbda6007166bde160b2bc78891b82cefb537d9231d5d2e3db40460d174353de6ab972c32d9382ce0f231b5bad1624fc9208ecbc0bad6aac7d820fa85d2c1e30
SSDEEP

49152:sjXlLUREJXsvLJRUHUudzDRbiHivJAmd3YKWA9vxhzHyXXuSwiPSCmDS+5uSlD:s7jSq0udzDcLg9t9vxwG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
james_miniCloud.exe

Files

james_miniCloud.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

james_miniCloud.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ