pjb[.]exe | Triage

General

Target

pjb.exe
Size

152KB
MD5

6e90f1aa598a6dc48e3f155fecd8ddc7
SHA1

7d27d1d1ec9a82d8b83bbbcfb77a4aff517b636c
SHA256

b775ecbe992f9ed7593aba4f479587ee27756d426b3a93401255f3dc5e27d7e3
SHA512

90828adfb4dbba15382b7fdb09a3cd2ff9182e4b57b0f9bee4c6ecc03356fa7f57210f2da09068565c4e7b340ccc15bd4618828aa4a58c2b17eb0ba1044bc579
SSDEEP

3072:MeoDNhur8klpOlxp/mxHZZ7/PjMIn7weCoG0oB4oZu:XzKiJ7Mu7weCjO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pjb.exe

Files

pjb.exe
.exe windows:4 windows x86

ab8398355ac83a013d6833d34a3262c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
Sleep
CreateEventA
CloseHandle
CreateFileA
OutputDebugStringA
DeviceIoControl
WriteFile
GetOverlappedResult
WaitForSingleObject
GetLastError
ReadFile
ResetEvent
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
GetTempPathA
GetFileAttributesA
FindClose
FindNextFileA
GetFileTime
GetFullPathNameA
FindFirstFileA
SetCurrentDirectoryA
FileTimeToSystemTime
CompareFileTime
FlushFileBuffers
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetTickCount
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetProcAddress
WideCharToMultiByte
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetFilePointer
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateDirectoryA

Exports

Exports

PJB_Close
PJB_CommitSoft
PJB_CommitTOC
PJB_Enumerate
PJB_GetDiskInfo
PJB_GetID
PJB_GetInfo
PJB_InitLib
PJB_Open
PJB_OpenSoft
PJB_Ping
PJB_ReadAllocBlockHead
PJB_ReadClick
PJB_ReadTOCClick
PJB_Reboot
PJB_SetDebugCallback
PJB_SetDebugMode
PJB_UninitLib
PJB_WriteClick
PJB_WriteSoft
PJB_WriteTOCClick

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ab8398355ac83a013d6833d34a3262c8

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 32KB - Virtual size: 38KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 32KB - Virtual size: 38KB