JJSploit[.]exe | Triage

Sharing

General

Target

JJSploit.exe
Size

1.3MB
MD5

539f32fe2ea3ccb0bf31f40b7e540de2
SHA1

1defec119336c8ffcfaa5f70cae9444ca1059303
SHA256

e076442548274f2acb8bc1b04393bcf9ada414baa22cc824cc7029244ca4bafa
SHA512

1969ed9526c85aaf19b610828d086f4bc0415477a4a0d0f11358ce1e3ce132e70bfc426789d60467cf3e2c80166c665799136c633f2f5e12c67b8a4bf2d9a3c4
SSDEEP

12288:WpIaZJt579mTcOgtO0dpQwLY43+VOJUI4xty1hWrkWzNOnfHH/QDK4XRugZS8RCs:WpIaZDEp0SzQJoD/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JJSploit.exe

Files

JJSploit.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ