Justices[.]exe | Triage™

General

Target
Justices.exe
Size 231KB
Sample240122-x53lmsdbb2
SHA256 18b6d9af4a2895a4fe0d00a8345fac2e2b6186a3fafb34d6bb6af4f9e3a07477
MD5 5ef55d28fdd870ccd6ce86aef3925a1c
SHA1 9efb1869fb6d9e86567dc450ef6a2b3a2d704ad7
SHA512 7c3a0f37f701400d936e6bafc0f3fca6de60519857fe1d30e553cb1717ab93b97819c6a3ce5d80ff4ff9b368f95308120a8283235a703f7a963b04b5a35ff177
SSDEEP 3072:rj/6SL0Z//IEcoWCbtAnKikxmbZJ/ii/HkUD9QyKpFO6Quc+5e2lBI4:rT6SLQXIE9Nbt2im9J6okuGQumMC4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Justices.exe

File Explorer

Justices.exe

.exe 231KB

Justices.exe

IMPHASH 06115774cf36cf0ea7fdd99b0e95ce6a
SHA256 18b6d9af4a2895a4fe0d00a8345fac2e2b6186a3fafb34d6bb6af4f9e3a07477
MD5 5ef55d28fdd870ccd6ce86aef3925a1c
SHA1 9efb1869fb6d9e86567dc450ef6a2b3a2d704ad7
SHA512 7c3a0f37f701400d936e6bafc0f3fca6de60519857fe1d30e553cb1717ab93b97819c6a3ce5d80ff4ff9b368f95308120a8283235a703f7a963b04b5a35ff177
SSDEEP 3072:rj/6SL0Z//IEcoWCbtAnKikxmbZJ/ii/HkUD9QyKpFO6Quc+5e2lBI4:rT6SLQXIE9Nbt2im9J6okuGQumMC4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID FillConsoleOutputCharacterA FindResourceA GetConsoleAliasesLengthW SetComputerNameExA InterlockedDecrement SetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount VirtualFree GetConsoleAliasesLengthA LoadLibraryW ReadConsoleInputA FreeConsole GetStartupInfoW GetLastError SetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc MoveFileA QueryDosDeviceW FindNextChangeNotification GlobalFindAtomW FindFirstVolumeMountPointA PurgeComm GetCurrentProcessId DebugBreak ReadConsoleOutputCharacterW OpenFileMappingA DeleteFileA MultiByteToWideChar Sleep ExitProcess GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapAlloc HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind HeapSize GetConsoleOutputCP WriteConsoleW SetFilePointer CreateFileA RaiseException

user32

GetWindowTextLengthA GetKeyNameTextA

Sharing