GEJSER v2[.]2[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
GEJSER v2.2.exe
Size 14.5MB
Sample260626-3jzwhsf14p
SHA256 3fa0f127cd8a283a3fad5e9382a73664f9f30a88d887c335585a9762c8832709
MD5 38740a6de0efde6365f3c91dc8dea5c6
SHA1 3bcc24fe7a0698ca1c5d04cd0fa7b71818761818
SHA512 232109ecd92e790db75a56b90f34c96a127d7d3836e4ceb0ad2061fdaa1f7082c657e456a076ec9722f0458412c8803a9d0e1493f1254a872209a44d552a129d
SSDEEP 196608:W8FLFlwtRl30P2bMy+u2YYxiOl1dJmfbS8mnWypyf7mGkk9SSrJEItk0d61IdA:W8lef3C24XZiSdJxWycf7mGhD6Itps
TLSH
T19DE623CA7BDD8294C4965B0039C753EA31C877DD80BD8E2A3ACB1D137A61D2E8C1A577
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GEJSER v2.2.exe

File Explorer

GEJSER v2.2.exe

.exe 14.5MB

GEJSER v2.2.exe

IMPHASH 5cdf42169d8c98d373c38cf84083114a
SHA256 3fa0f127cd8a283a3fad5e9382a73664f9f30a88d887c335585a9762c8832709
MD5 38740a6de0efde6365f3c91dc8dea5c6
SHA1 3bcc24fe7a0698ca1c5d04cd0fa7b71818761818
SHA512 232109ecd92e790db75a56b90f34c96a127d7d3836e4ceb0ad2061fdaa1f7082c657e456a076ec9722f0458412c8803a9d0e1493f1254a872209a44d552a129d
SSDEEP 196608:W8FLFlwtRl30P2bMy+u2YYxiOl1dJmfbS8mnWypyf7mGkk9SSrJEItk0d61IdA:W8lef3C24XZiSdJxWycf7mGhD6Itps
TLSH
T19DE623CA7BDD8294C4965B0039C753EA31C877DD80BD8E2A3ACB1D137A61D2E8C1A577
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13770262

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

327KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

459KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vdata

Size

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.junk1

Size

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vtext

Size

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.sec1

Size

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.junk0

Size

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CA*

Size

Virtual Size

7.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Q=i

Size

512B

Virtual Size

408B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.g7U

Size

14.5MB

Virtual Size

14.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

469B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

GEJSER v2.2.exe

d3d9

gdi32

kernel32

user32

advapi32

shell32

msvcp140

imm32

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic