cjpeg[.]exe | Triage

General

Target

cjpeg.exe
Size

600KB
MD5

23cf06e4e73db928b550549e26c8d2e3
SHA1

583cd6c65c46bb74355e214c51a2c4eb2921829f
SHA256

8d7786a47212a807f71275aaa69d59dff0e38ec07816baccab974e40dce0574a
SHA512

cce0f131d2d66b70f0f3afb860b6fafa1ca5637f289973ebd215338144ea06eb29abab89d1dc51d4a27c60151e950af8d3e6787074ed858608f23f7c7f17a985
SSDEEP

6144:jkodxL0Zn8QUyWwsH4RRRR7JkaGb21IbM9lhYxKkjd/sjtV:IGWrWwsH4RRRFJkaGb2GMlMpsjtV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cjpeg.exe

Files

cjpeg.exe
.exe windows:4 windows x86 arch:x86

f3cbb89b96a046497dc50d84dec56093

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_setmode
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_filbuf
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
atof
atoi
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fread
free
fwrite
getenv
log
malloc
memcpy
memset
pow
signal
sprintf
sscanf
tolower
ungetc
vfprintf

Sections

.text
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 144B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3cbb89b96a046497dc50d84dec56093

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 304KB - Virtual size: 304KB

.data Size: 512B - Virtual size: 36B

.rdata Size: 158KB - Virtual size: 157KB

.eh_fram Size: 26KB - Virtual size: 26KB

.bss Size: - Virtual size: 144B

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.text
Size: 304KB - Virtual size: 304KB

.data
Size: 512B - Virtual size: 36B

.rdata
Size: 158KB - Virtual size: 157KB

.eh_fram
Size: 26KB - Virtual size: 26KB

.bss
Size: - Virtual size: 144B

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B