JtNnJ[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

JtNnJ.exe
Size

677KB
MD5

210b2a8a646e06ebf20d69a09d41939d
SHA1

4688665bd2d8187826b54a1b713b1fbcd0cdaf6f
SHA256

20e13c613e5ed40f7a5c3b4a150a59dc7bed37ee7081d306a26682573f0f4f0c
SHA512

4eb1e06a7ceba5192ea8c9e175673ed30d07d4eb98d90992d5bd06cea06d259c4d4f049111a781e903cceeee85cdcb51fed410f6dccf9713adc974d16b9e04a1
SSDEEP

12288:eKinOCp0iv8Lh8Aqyxt8G40XoMA2ipvEUh8eKjr5KQfmmXB1Y0ZkuyDi3yXk/aNS:sp0iv8WrGjoMAbwlCmrY0Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JtNnJ.exe

Files

JtNnJ.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

ikrMk
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ