gjdj[.]exe | Triage

Sharing

General

Target

gjdj.exe
Size

502KB
MD5

fc32f42ee0146b5ac0d96e2f877e77bc
SHA1

a8f277c396daf10c4fb3b7072ea3a535aa114921
SHA256

50af042a96a7cd69b4d895c91f767c571aa6bd03c1dcaf21b517fbb75217ec47
SHA512

34c119c988b2c2067071fd35aee57483b0360a787783718406b733af69b45868b9aa8e8d05d47101e57c90a6e4ae8bf0960321ec1ace8ebd0ad3508e639d8b42
SSDEEP

12288:93A73SMiQqArFGV/zIv6jAocA0IYxjUFW7FUUcVExeW8Yf0Ah3RIArF1uNnxI2Oj:9F/74cWR7JFhd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gjdj.exe

Files

gjdj.exe
.exe windows x86

27fd43b4a41f4844532b688ebb70af0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EncodeSystemPointer
DecodeSystemPointer
HeapCreate
GetProcessHeap
SetEvent
CreateMutexW
CreateEventW
FlushInstructionCache
GetSystemInfo
FlushViewOfFile
CreateMemoryResourceNotification
CreateTimerQueue
GetModuleHandleA
ConvertFiberToThread
CreateFiber
DeleteAtom
ClearCommError
GetCommModemStatus
AddAtomW

Sections

.text
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ