JJSploit.exe Trojan Agent Analysis
| Online Virus Checker | v.1.0.182.174 |
| DB Version: | 2024-07-14 21:00:22 |
Trojan.Win32.Agent.sa
Trojan Agent is malicious software that masquerades as legitimate files or programs to carry out various harmful actions on infected computers, such as data theft or remote control by cybercriminals.
| File | JJSploit.exe |
| Checked | 2024-07-14 18:46:41 |
| MD5 | 9025b1a81a264417aa8aa18a56075f88 |
| SHA1 | d3b0c130acd815e9f7430d7f0857b05430420279 |
| SHA256 | 2a19e43202cef88fdabb63be7811cb4214ed455aeac227ea6a86b19d60a9d14d |
| SHA512 | 63ea2d941ba66a30fbd57aee2758129414563e556479ff8e0911c4db0c8d2827ef58750b665e1b630009a730f542f790f771c89c9e5148747b98a4741c334d7c |
| Imphash | f212b9b898203f30e4f25111809dedeb |
| File Size | 10329088 bytes |
Trojan.Win32.Agent.sa Removal
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Agent.sa without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| FileDescription | JJSploit |
| FileVersion | 7.3.0 |
| ProductVersion | 7.3.0 |
| ProductName | JJSploit |
| Translation | 0x0000 0x04b0 |
Portable Executable Info
 |
96ad1c965561d8172f7c7392e862dfb2 1e8bb244ddd597b1ad839c26154fbef4 70e892f4ac886070 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00966585 |
| Compilation: | 2023-09-12 23:53:30 |
| Checksum: | 0x00000000 (Actual: 0x009dc7c0) |
| OS Version: | 6.0 |
| PDB Path: | C:\Users\burne\Desktop\JJSploit\src-tauri\target\i686-pc-windows-msvc\release\deps\wearedevs_net.pdb |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 5 |
| Imports: | KERNEL32, comctl32, user32, ole32, ws2_32, gdi32, dwmapi, secur32, crypt32, advapi32, shell32, uxtheme, oleaut32, ntdll, bcrypt, pdh, powrprof, iphlpapi, netapi32, PSAPI, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-string-l1-1-0, api-ms-win-crt-convert-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-locale-l1-1-0, |
| Exports: | 0 |
| Resources: | 4 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00588fe8 | 0x00589000 | c8b90ef109bdf55c3ac37823625be624 | 6.41 |
| .rdata | 0x0058a000 | 0x004176ea | 0x00417800 | 35bf127658b38c1f29bdd11f3a1f0f3a | 7.19 |
| .data | 0x009a2000 | 0x000025e4 | 0x00001c00 | 638028edee4b212b365e567f80a72961 | 3.28 |
| .rsrc | 0x009a5000 | 0x00005b68 | 0x00005c00 | 4d70429682081b93e18964b179615923 | 7.90 |
| .reloc | 0x009ab000 | 0x0003161c | 0x00031800 | 2a092588d312300f8a845c487e80740c | 6.57 |
