jquery | Triage

Sharing

Copy URL Twitter E-mail

General

Target

jquery
Size

12.1MB
MD5

0a3b89f70b8f75acd7ab7b2f826e0b88
SHA1

24e207f0d2444696badf3d448a4c91076c04ed24
SHA256

a1e156804c8f4bf287647bfd82fce7efce8eff3884390dcb7d558413876a5b94
SHA512

9125cca88c971e3b3c6a2c02794c06bed6e12b7d9fb840c7de18954e0aeeb0c454068d9d2bae25bb0a20665cba13bb1491e1558347a18b3908d78eaa441adebc
SSDEEP

196608:ortHsWBLd87HxuiegmTL9z9deb8RecxN+juLIasJat:ortHrBZ87RuVgmNzve4YcxgoUJat

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jquery

Files

jquery
.exe windows:6 windows x64 arch:x64

78e9d025aa343a3357e84ae608af7282

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
GetLastError
GetCurrentActCtx
FindFirstFileA
FindNextFileA
GetCurrentProcessId
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateNamedPipeA
ExitProcess
VirtualAlloc
CreateMutexA
OpenMutexA
ReleaseMutex
GetNamedPipeInfo
GetLocalTime

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ