jv[.]exe | Triage

Sharing

General

Target

jv.exe
Size

3.1MB
MD5

3e4c6f9eadf2425f18030e59a60b1394
SHA1

938ce5feb114c40a357209b8d82160525bb3d63a
SHA256

fc7fa29f8b9dbcf9e880b6f22382dfff7ea0af6c22d379fe5dfc329a96d3e165
SHA512

f799b0bbd2770697cd817684f3ad923ba63cf8d11ea4e4ec0bd04c1ae1ce9fc54bbe576f2dcddfa4ba78e8cf510f45c7d1bc75fb75b4d5dbb2e4a4249d13e4d5
SSDEEP

49152:Vn8W9h4QY4uz5kb4t+OXwRAVseniGQjqZr8Qp:l8W9CQY3E4ILAxQjwrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jv.exe

Files

jv.exe
.exe windows:5 windows x86 arch:x86

299facae7e3811e3ba17036d8f5262d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

Imports

oleaut32

VariantInit

ole32

CreateStreamOnHGlobal

shell32

SHFileOperationW

advapi32

AdjustTokenPrivileges

comdlg32

GetOpenFileNameW

gdi32

DeleteObject

user32

LoadBitmapW

kernel32

RtlUnwind

shlwapi

SHAutoComplete

comctl32

InitCommonControlsEx

Sections

.text
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 652KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ