JournalTrace[.]exe | Triage

Sharing

General

Target

JournalTrace.exe
Size

106KB
MD5

779386ff00b119b91f1ef5e36168edae
SHA1

006588d6a5c531d0e9ff497cbf3bab32744e15d0
SHA256

46873781a5c80ea676f0ed8024b31423f22918d9f4723aba49b22c8e597ec0e6
SHA512

7c1686cf33e8989064c8be404b0eca65609b30e7fbe8d7cc0b90fcefecd44ae024efdf3a65f4e08376c166b118a46eda550f563423261badfed91f7e5db96a13
SSDEEP

3072:RxnIDN+SRULe9DjbkNaze0ccGADupxYXGrAOOLChcRUzAXA8U9uv93n:eBu6Om1+G1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JournalTrace.exe

Files

JournalTrace.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Computador\Downloads\JournalTrace\JournalTrace\obj\Debug\JournalTrace.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ