jt[.]exe | Triage

General

Target

jt.exe
Size

57KB
MD5

d2628b3bb4d04722b3224c42b4aa5c35
SHA1

7ecf4b9653f4b306a657fc39f567dc738b3a686b
SHA256

732b46b578c219831da0b26b866ad7da19c37ce6cbeeeb49e43a7366baccdfb6
SHA512

4e6b8f06fa3a472537178c97e12bddb42b9c99c4d0650c089e85d73f8f2ebe420e238992257e1a2e2b0907ebc013850dbdfcf35b437ff529f49eb219ee1392ef
SSDEEP

1536:pHV5el3oWA+l5K47lOZKQjgrW/dC7weVqI:pHV5etoW/l5KIkZZjgrCdC7dq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jt.exe

Files

jt.exe
.exe windows x86

1a2320d39eb91af3f0d22ba6c4750021

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
__p__commode
__set_app_type
__p__fmode
__dllonexit
_adjust_fdiv
__getmainargs
mbstowcs
_onexit
__setusermatherr
wcscmp
strncpy
_initterm
_XcptFilter
__p___initenv
exit
wcstoul
_exit
wcscat
iswctype
wcscspn
_wcsnicmp
fopen
_vsnprintf
strncat
fprintf
printf
sprintf
fclose
_controlfp
vprintf
towupper
wcslen
isspace
wcsncpy
wcscpy
isdigit

kernel32

GetLastError
CreateFileMappingW
CreateFileW
SystemTimeToFileTime
FileTimeToSystemTime
GetCommandLineW
GetSystemInfo
GetFullPathNameW
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
FindResourceW
LoadResource
InitializeCriticalSection
lstrlenA
FreeResource
LockResource
GetTickCount
GetVersionExW
GetLocalTime
GetProcAddress
FreeLibrary
LoadLibraryW
MapViewOfFile
GetFileInformationByHandle
lstrcmpiW
ExpandEnvironmentStringsW
UnmapViewOfFile
CloseHandle

user32

wsprintfA

gdi32

GetDeviceCaps
DeleteDC
CreateDCW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1a2320d39eb91af3f0d22ba6c4750021

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

ole32

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 1024B - Virtual size: 3KB

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 1024B - Virtual size: 3KB

.rsrc
Size: 22KB - Virtual size: 22KB