Jx28O9tTOa5vND40[.]exe | Triage

Sharing

General

Target

Jx28O9tTOa5vND40.exe
Size

1.4MB
MD5

714716b8dd3ab20a00c5276b1b7901f9
SHA1

d7fc773a6aedb7ae5c97b88db72e8bfe68819e42
SHA256

23d4b4933b776f8c3da20951bd0f5e2c4a1a3be9af8686bc8f8571a94df96f32
SHA512

498bbc52ad5c875d53621e55086484dfffc65ea71300521a92ffac6e7228e8962f84dd7b687e09e5a804fccb01b94f7de9682ef68b0b0b30b14cd10d2fb5d6fa
SSDEEP

24576:PSXx8UUb9hwRqVE4ICWC/PzZZ20e/wlZfwCuFAKOazcBUvub+ndVtuo0lW:PSCj/OquNCW+9ZZe4DwCkAnUg+nde7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Jx28O9tTOa5vND40.exe

Files

Jx28O9tTOa5vND40.exe
.exe windows:6 windows x64 arch:x64

02ab29e4f8baf6c4b4c8a3c2ab7511f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA

advapi32

GetUserNameA

shell32

ShellAboutW

user32

GetMenu

Sections

.rsrc
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE