TJRework[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TJRework.exe
Size

414KB
MD5

7b349a20d841c1c49b46d9a067ca52b9
SHA1

2f08ce0dd04b32dc06201025dfcc1bb14b81513e
SHA256

b8ed45fe760bb66d3c6b79e34e1b1ac4e6dc05c652b6c9be1695a5009bfa6afb
SHA512

6b2686dbf58ef0151b2f6c56fde81b3c24c831b79cef9997943442d321fd2dd3cda1361133e0303dde62fc749ff040c492e004bdd5d8adf0080d7a41d6861ead
SSDEEP

6144:mA2hYbS290wycON+8UOG3uO6hwOz3fKLLmFynyKL0dNPBdaWNQwwosYeuXCtKkqr:zDS2cCqmwhoXN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TJRework.exe

Files

TJRework.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ