j2k[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
j2k.exe
Size 4.6MB
Sample261107-3gf1mage52
SHA256 27aea5e27100f7230b598c1ff535fad355e9a58e71b8e2153dbb2693caaa2a96
MD5 b248b1273d4beecdaff65b115e3de696
SHA1 d8360cb877882bb452db9e7146004827dc6886f0
SHA512 78e135caee9fd3468dafff113740d45e2d268d908616df2488d0fe740f0f821ad1ada24dad52d422d09f079ac202c0d2235d3501e4398bac8ba32a39f4a6ff4b
SSDEEP 49152:D4fAdTepmicyQymmFk9D1loY2LX+Y01wSJmLlIr5/9C350mbau/hHX8URIExKjDT:DGAApKyfkZ1loYWOYvAw50meu/X7+
TLSH
T17326AD626345D43ED5671B359C2BE776A939BB222B238C57A3F40C4C8F31681B93D293
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
j2k.exe

File Explorer

j2k.exe

.exe 4.6MB

j2k.exe

IMPHASH 5c920253acf3c6bbb1c9aaea6e4248cd
SHA256 27aea5e27100f7230b598c1ff535fad355e9a58e71b8e2153dbb2693caaa2a96
MD5 b248b1273d4beecdaff65b115e3de696
SHA1 d8360cb877882bb452db9e7146004827dc6886f0
SHA512 78e135caee9fd3468dafff113740d45e2d268d908616df2488d0fe740f0f821ad1ada24dad52d422d09f079ac202c0d2235d3501e4398bac8ba32a39f4a6ff4b
SSDEEP 49152:D4fAdTepmicyQymmFk9D1loY2LX+Y01wSJmLlIr5/9C350mbau/hHX8URIExKjDT:DGAApKyfkZ1loYWOYvAw50meu/X7+
TLSH
T17326AD626345D43ED5671B359C2BE776A939BB222B238C57A3F40C4C8F31681B93D293
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

dinput8

DirectInput8Create

advapi32

RegCloseKey RegConnectRegistryW RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegFlushKey RegLoadKeyW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegReplaceKeyW RegRestoreKeyW RegSaveKeyW RegSetValueExW RegUnLoadKeyW

kernel32

CloseHandle CompareStringW CreateDirectoryW CreateEventW CreateFileA CreateFileMappingW CreateFileW CreateMutexA CreateMutexW CreateSemaphoreA CreateThread DeleteCriticalSection DeleteFileA DeleteFileW DuplicateHandle EnterCriticalSection EnumCalendarInfoW EnumResourceNamesW EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileW FindNextFileW FindResourceW FormatMessageW FreeEnvironmentStringsA FreeEnvironmentStringsW FreeLibrary FreeResource GetACP GetCPInfo GetCPInfoExW GetCommandLineW GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDiskFreeSpaceW GetDriveTypeW GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeThread GetFileAttributesA GetFileAttributesW GetFileSize GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoA GetLocaleInfoW GetLogicalDriveStringsW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStartupInfoW GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetSystemDefaultUILanguage GetSystemInfo GetSystemTimeAsFileTime GetThreadLocale GetThreadPriority GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultUILanguage GetVersion GetVersionExA GetVersionExW GetVolumeInformationW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFree GlobalLock GlobalSize GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale LCMapStringA LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFree LockResource MapViewOfFile MoveFileW MulDiv MultiByteToWideChar OpenMutexW OpenProcess QueryDosDeviceW QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseMutex ReleaseSemaphore ResetEvent ResumeThread RtlUnwind SetConsoleCtrlHandler SetCurrentDirectoryW SetEndOfFile SetErrorMode SetEvent SetFileAttributesW SetFilePointer SetHandleCount SetLastError SetThreadLocale SetThreadPriority SizeofResource Sleep SuspendThread SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnmapViewOfFile VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualQuery VirtualQueryEx WaitForMultipleObjectsEx WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteFile lstrcmpW lstrlenW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

winspool.drv

ClosePrinter DocumentPropertiesW EnumPrintersW ord203 OpenPrinterW

comctl32

FlatSB_GetScrollInfo FlatSB_GetScrollPos FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_SetScrollProp ImageList_Add ImageList_BeginDrag ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_DrawIndirect ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_LoadImageW ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write ord17 InitializeFlatSB _TrackMouseEvent

comdlg32

FindTextW GetOpenFileNameW

gdi32

AbortDoc AngleArc Arc ArcTo BitBlt Chord CombineRgn CopyEnhMetaFileW CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateDIBitmap CreateFontIndirectW CreateHalftonePalette CreateICW CreatePalette CreatePenIndirect CreateRectRgn CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject Ellipse EndDoc EndPage EnumFontFamiliesExW EnumFontsW ExcludeClipRect ExtCreatePen ExtCreateRegion ExtFloodFill ExtTextOutW FrameRgn GdiFlush GetBitmapBits GetBkMode GetBrushOrgEx GetClipBox GetCurrentObject GetCurrentPositionEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileDescriptionW GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetNearestPaletteIndex GetObjectW GetPaletteEntries GetPixel GetRgnBox GetStockObject GetStretchBltMode GetSystemPaletteEntries GetTextColor GetTextExtentPoint32W GetTextExtentPointW GetTextMetricsW GetViewportOrgEx GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt Pie PlayEnhMetaFile PolyBezier PolyBezierTo PolyPolyline Polygon Polyline RealizePalette RectVisible Rectangle ResizePalette RestoreDC RoundRect SaveDC SelectClipRgn SelectObject SelectPalette SetAbortProc SetBkColor SetBkMode SetBrushOrgEx SetDCPenColor SetDIBColorTable SetDIBits SetEnhMetaFileBits SetGraphicsMode SetMapMode SetPixel SetROP2 SetRectRgn SetStretchBltMode SetTextColor SetViewportExtEx SetViewportOrgEx SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx SetWorldTransform StartDocW StartPage StretchBlt StretchDIBits UnrealizeObject

shell32

SHAppBarMessage SHGetFolderPathW ShellExecuteW Shell_NotifyIconW

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginDeferWindowPos BeginPaint BringWindowToTop CallNextHookEx CallWindowProcW CharLowerBuffW CharLowerW CharNextW CharUpperBuffW CharUpperW CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CopyIcon CopyImage CountClipboardFormats CreateAcceleratorTableW CreateCaret CreateIcon CreateIconIndirect CreateMenu CreatePopupMenu CreateWindowExW DefFrameProcW DefMDIChildProcW DefWindowProcW DeferWindowPos DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextExW DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndDeferWindowPos EndMenu EndPaint EnumChildWindows EnumClipboardFormats EnumDisplayMonitors EnumThreadWindows EnumWindows FillRect FindWindowExW FindWindowW FrameRect GetActiveWindow GetCapture GetCaretPos GetClassInfoExW GetClassInfoW GetClassLongW GetClassNameW GetClientRect GetClipboardData GetComboBoxInfo GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgCtrlID GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextW GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardLayoutNameW GetKeyboardState GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoW GetMenuItemRect GetMenuState GetMenuStringW GetMessageExtraInfo GetMessagePos GetMessageTime GetMonitorInfoW GetParent GetPropW GetRawInputData GetRawInputDeviceInfoW GetRawInputDeviceList GetScrollBarInfo GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetUpdateRect GetWindow GetWindowDC GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextW GetWindowThreadProcessId HideCaret InflateRect InsertMenuItemW InsertMenuW InvalidateRect IsCharAlphaNumericW IsCharAlphaW IsChild IsClipboardFormatAvailable IsDialogMessageA IsDialogMessageW IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadCursorW LoadIconW LoadKeyboardLayoutW LoadStringW LockWindowUpdate MapVirtualKeyW MapWindowPoints MessageBeep MessageBoxW MonitorFromPoint MonitorFromRect MonitorFromWindow MoveWindow MsgWaitForMultipleObjects MsgWaitForMultipleObjectsEx OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageW PostQuitMessage PtInRect RedrawWindow RegisterClassW RegisterClipboardFormatW RegisterRawInputDevices RegisterWindowMessageW ReleaseCapture ReleaseDC RemoveMenu RemovePropW ScreenToClient ScrollWindow ScrollWindowEx SendInput SendMessageA SendMessageW SetActiveWindow SetCapture SetCaretPos SetClassLongW SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetKeyboardState SetMenu SetMenuItemInfoW SetParent SetPropW SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWinEventHook SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowCaret ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoW TrackMouseEvent TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWinEvent UnhookWindowsHookEx UnregisterClassW UpdateWindow ValidateRect WaitMessage WindowFromPoint keybd_event mouse_event wsprintfA

winmm

mciSendStringW timeGetTime timeKillEvent timeSetEvent

ole32

CoCreateInstance CoInitialize CoTaskMemAlloc CoTaskMemFree CoUninitialize IsEqualGUID OleInitialize OleUninitialize

oleaut32

GetErrorInfo SafeArrayAccessData SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayUnaccessData SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeType VariantClear VariantCopy VariantInit

wtsapi32

WTSRegisterSessionNotification WTSUnRegisterSessionNotification

@$xp$10TImageForm @$xp$11TTextDialog @$xp$13TAssignDialog @$xp$13TDeviceConfig @$xp$13TWizardDialog @$xp$14TAppLinkDialog @$xp$15TDeviceTemplate @$xp$15TGreetingDialog @$xp$16TInputNameDialog @$xp$16TVibrationDialog @$xp$17TAppCaptureDialog @$xp$17TLicenseKeyDialog @$xp$17TPreferenceDialog @$xp$18TAppLinkItemDialog @$xp$18TButtonAliasDialog @$xp$19TDeviceConfigDialog @$xp$21TDeviceTemplateDialog @$xp$9TAboutBox @$xp$9TMainForm @@Appcapturedlg@Finalize @@Appcapturedlg@Initialize @@Appinfo@Finalize @@Appinfo@Initialize @@Applinkdlg@Finalize @@Applinkdlg@Initialize @@Applinkitemdlg@Finalize @@Applinkitemdlg@Initialize @@Applinkmanager@Finalize @@Applinkmanager@Initialize @@Assigndlg@Finalize @@Assigndlg@Initialize @@Buttonaliasdlg@Finalize @@Buttonaliasdlg@Initialize @@Configfilemanager@Finalize @@Configfilemanager@Initialize @@Deviceconfig@Finalize @@Deviceconfig@Initialize @@Deviceconfigdlg@Finalize @@Deviceconfigdlg@Initialize @@Deviceconfigmanager@Finalize @@Deviceconfigmanager@Initialize @@Devicetemplate@Finalize @@Devicetemplate@Initialize @@Devicetemplatedlg@Finalize @@Devicetemplatedlg@Initialize @@Devicetemplatemanager@Finalize @@Devicetemplatemanager@Initialize @@Eventimpl@Finalize @@Eventimpl@Initialize @@Greetingdlg@Finalize @@Greetingdlg@Initialize @@Imagefrm@Finalize @@Imagefrm@Initialize @@Joybutton@Finalize @@Joybutton@Initialize @@Licensekeydlg@Finalize @@Licensekeydlg@Initialize @@Main@Finalize @@Main@Initialize @@Namedlg@Finalize @@Namedlg@Initialize @@Preferencedlg@Finalize @@Preferencedlg@Initialize @@Processing@Finalize @@Processing@Initialize @@Textdlg@Finalize @@Textdlg@Initialize @@Utils@Finalize @@Utils@Initialize @@Vibrationdlg@Finalize @@Vibrationdlg@Initialize @@Wzrddlg@Finalize @@Wzrddlg@Initialize _AboutBox _AppCaptureDialog _AppLinkDialog _AppLinkItemDialog _AssignDialog _ButtonAliasDialog _DeviceTemplateDialog _GreetingDialog _ImageForm _InputNameDialog _LicenseKeyDialog _MainForm _PreferenceDialog _TextDialog _VibrationDialog _WizardDialog ___CPPdebugHook ___setRaiseListFuncAddr __dbk_fcall_wrapper dbkFCallWrapperAddr

Name

.text

Size

3.8MB

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

149KB

Virtual Size

368KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didata

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

341KB

Virtual Size

341KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

313KB

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

j2k.exe

dinput8

advapi32

kernel32

version

winspool.drv

comctl32

comdlg32

gdi32

shell32

user32

winmm

ole32

oleaut32

wtsapi32

generic