3fa37a836996d2e4bc2371638886af7a1f42bd43ff4188beb5dbaddfa801973e

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Apr-09 08:47:38
Detected languages English - United States
CompanyName Columbus Pro
FileDescription jpp
FileVersion 2.5.0.0
InternalName jpp
LegalCopyright Columbus Pro
OriginalFilename jpp.exe
ProductName jpp
ProductVersion 2.5.0

Plugin Output

Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Suspicious The PE is possibly packed. Unusual section name found: .fptable
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
 Possibly launches other programs:
  • CreateProcessW
 Can create temporary files:
  • GetTempPathW
  • CreateFileW
 Functions related to the privilege level:
  • OpenProcessToken
 Enumerates local disk drives:
  • GetDriveTypeW
Suspicious The file contains overlay data. 23156585 bytes of data starting at offset 0x57600.
The overlay data has an entropy of 7.99765 and is possibly compressed or encrypted.
Overlay data amounts for 98.478% of the executable.
Malicious VirusTotal score: 4/68 (Scanned on 2026-06-28 07:07:31) APEX: Malicious
Bkav: W32.Malware.438BEE9B
CrowdStrike: win/malicious_confidence_70% (D)
Cylance: Unsafe

Hashes

MD5 d25583159f8891471539ca54dbb91da1
SHA1 c0f67340d739527e4c7d84f3476c1ca0702fde49
SHA256 3fa37a836996d2e4bc2371638886af7a1f42bd43ff4188beb5dbaddfa801973e
SHA3 d3223c591c00eb2aacad8c53eff7070914f594343c7c83a2a4d047ac924d7489
SSDeep 393216:o/TSGTWN26WUBnwkAFlg1YFxVHFFv1+TtIiFzY9Z8D8CclHlnYJGwo1sAA1Jd5G:w7426WUBn481YFrHFFv1QtIea8DZcFl
Imports Hash dcaf48c1f10b0efa0a4472200f3850ed

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-Apr-09 08:47:38
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x2be00
SizeOfInitializedData 0x2b400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000000DA30 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x60000
SizeOfHeaders 0x400
Checksum 0x166f5d3
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x1e8480
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 79078dae5994611672a1080749101869
SHA1 be9c7a11814f7e654435b7b2a858df7738f0241a
SHA256 1180a0bbf2679ba2720454c832cc6b01ea5bbeaee37609b47ddc1bf806e7d9da
SHA3 7de9be818a2c3f66ad004fa3e393e42ef976f3b4b7b6931e4953031ae23eb158
VirtualSize 0x2bd80
VirtualAddress 0x1000
SizeOfRawData 0x2be00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.47403

.rdata

MD5 bcb2f86c5c6c0f003cadcfe1d5c4d928
SHA1 6bc443610ae75219c82135ec6636146fbd2d125b
SHA256 5df720a51c8574995c077950d3ba3b2958b92ea09ee47b51b07d3d246adf0c8c
SHA3 d2cf8426351285a3a531ef5c3b7ec9ba0aec31107a2cf42fdccc9a8bc1d3c7e3
VirtualSize 0x13968
VirtualAddress 0x2d000
SizeOfRawData 0x13a00
PointerToRawData 0x2c200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.74441

.data

MD5 e0a74fb607d827b7f2943febfe00c7d1
SHA1 d20b33e2d420135a15643e84ab2baac0d80c55a5
SHA256 8148ddc2a533e179fc88c07354adf34ed86333daaebd0891e86993c082233de5
SHA3 55830dfaa0f7dcbdcc4b4a494eebc43dc5a9965a4efe4398e65026dbef32d5ec
VirtualSize 0x50b0
VirtualAddress 0x41000
SizeOfRawData 0xe00
PointerToRawData 0x3fc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.81901

.pdata

MD5 8de57d92d89fc5d4db9828c2663f55ee
SHA1 90f19cf10cbb12507a9ed4b275065147758888d6
SHA256 76d215d188c2739fa2991be73942f6552065d66409fd48a98c8ed6c84bbd12fd
SHA3 59af4ab2b1e601cc6818a4181762a6a0739d311ba69acaa2510fed60bfee1d0a
VirtualSize 0x23dc
VirtualAddress 0x47000
SizeOfRawData 0x2400
PointerToRawData 0x40a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.47251

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
VirtualSize 0x100
VirtualAddress 0x4a000
SizeOfRawData 0x200
PointerToRawData 0x42e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 6d699a20efff3c276470b0a10e1378c0
SHA1 d1a3e73709070ba1f2e941efe6f12300efe6e3ce
SHA256 bd682ce189b2114868e8a75d5c3afc88586eab11ac191ea4cecfa3ff0ac901b3
SHA3 b45633d2896ab4bc484b90bc100286802859486b3f77bf7bf2284c9582bbaf18
VirtualSize 0x13d0c
VirtualAddress 0x4b000
SizeOfRawData 0x13e00
PointerToRawData 0x43000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.97945

.reloc

MD5 66c54168d4d2ad0a461ee561d8a0c79d
SHA1 74d880349b51dce02fd33f4b07c9bc72fe3f7a60
SHA256 977618f629e78ac49a41fc8407054bc51db7413ba82183c901835b7731d2a79e
SHA3 c244ee7f42dd35f36c4a8182b272540e318fdd40c7b00a5f5676f735577a6c22
VirtualSize 0x774
VirtualAddress 0x5f000
SizeOfRawData 0x800
PointerToRawData 0x56e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.26264

Imports

USER32.dll CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
COMCTL32.dll #380
KERNEL32.dll GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
LCMapStringW
CompareStringW
VirtualProtect
InitializeCriticalSectionEx
GetOEMCP
GetCPInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
MulDiv
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
GetEnvironmentStringsW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
FlsFree
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
CreateSymbolicLinkW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
ADVAPI32.dll OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
GDI32.dll SelectObject
DeleteObject
CreateFontIndirectW

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x274
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.57549
Detected Filetype PNG graphic file
MD5 c6017211dba51a0d3c41addf2f7e82cb
SHA1 17a59285f5b4b528a086fc2231900e45b83f24d1
SHA256 7b06d6c19058f349f57b002791d42f3504eefbfc0b09bb80ab09bc2d304e178f
SHA3 f7b918ce078c5d28e69e85fec3a8285ae845c121cfb8d70be8e8978a1983e824

2

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x3fd
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.76689
Detected Filetype PNG graphic file
MD5 833c1e9e42b11446abda8e91b85490f3
SHA1 03168973b00384b9e31fca15623e688eaa38e131
SHA256 1e717c38860bf575fbf967211c3a8877582365c25bc2602f49e25210dd933456
SHA3 765323910fba09cedde47be22444beba606b90afb154dda4503beb2d5b55b445

3

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x60d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.86264
Detected Filetype PNG graphic file
MD5 a716d70b0e356a4f2cc7ef23bf673aff
SHA1 7497df2358e91c13ce6e8bb53b5b8c378266843f
SHA256 87cf8a7de45f2aa1a10554c0ebb6808b45c965fff6b52b0ffd0496bb3e3bd55a
SHA3 7d1874cdd16dada9033ae375379c18d3811e5fe4dce69c11a35f7d4097bb1634

4

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xb0a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.92999
Detected Filetype PNG graphic file
MD5 cd759f425bd664d685d1def02da5f761
SHA1 59a92c2e0d723934d92c3eac8a6852e22915b474
SHA256 cad15b9e6399bb7ddccbd2e14cdd059fd17b4a351698ad64ecc29d2925431680
SHA3 babcf2c3fc5fadd30222fb7bc30cc8b599a793eaa305e75cb76c642f7027fbec

5

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x10fc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.95166
Detected Filetype PNG graphic file
MD5 87c3abee53564ddfba3add277a639a62
SHA1 260973b8433131276bfe78e3beba3488b3fc0df9
SHA256 d20c2ded486b485996b27f66985ae62f7836ebaa6d8f8abf15e5eea518c381e9
SHA3 d08d5999acea127b7319bc0a8a63ff3f23567efca167779ee55fb87fe9dc3c81

6

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x3703
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97927
Detected Filetype PNG graphic file
MD5 8c2bb20b06e8d211f9eb69141b1743be
SHA1 8b2e5b869cc101c49c08c29dd0a4d64ecd9a5498
SHA256 dff7d67670f06e79a91ab90c9437e368746cb40abca7949c52a1f21cdee0f473
SHA3 75636b889f2fe1fba166d447005c16def1bcdc8828d382acd4f7b25a4be83db5

7

Type RT_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xd341
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99321
Detected Filetype PNG graphic file
MD5 678fd8eec94b80cd5458ac367236086b
SHA1 875320a9305c5e0055ffc6d3a0a86438250fe492
SHA256 921a5638d07094931fb389bab4fa639d03733b20420458bf5af92e529a5e3dda
SHA3 5c81f8f8f9a15acce8619dd4f616b1116abe29ca243bad9daccadb174df72b38

1 (#2)

Type RT_GROUP_ICON
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.63122
Detected Filetype Icon file
MD5 fd4524d814644e92f84b4919bd26d495
SHA1 d1c0fa5006a99b250a364e7660f929868351cc42
SHA256 b9ea5c11134b646c2eeb4aa1078926e384d32b8ba8626debf6da64b49d91339f
SHA3 18da6d4c4c9199e3f1f959be268e1e7ed0bf58323c60e7ff6175496afa45408b

1 (#3)

Type RT_VERSION
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x270
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.30514
MD5 6589483813c4c02a3a6145a618e0f3bd
SHA1 4ed342114a9b698d1a9883cc2456ab0ef2479b54
SHA256 612eba79e01da7a17cbfc0a49fd2d62b9dc17ca643cfadf606855578c71a11d1
SHA3 09eddb4d4a057e77fe1d9e45875a45ef0853383fd843212f21af59040d0773cc

1 (#4)

Type RT_MANIFEST
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x50d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.25791
MD5 84da8dee6b319ea0b10b6de5489c6aae
SHA1 5f8991f3e065fd95614859a293f88b9c70e4bb23
SHA256 abf8f2022f12f350789d961aceaf9ccfd53e7ec58d8c9934cfce77779b4eac11
SHA3 08f0562915b54bedce5a84e9d32cb2efcc538268785103b1852338e20a3b4606

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2.5.0.0
ProductVersion 2.5.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Columbus Pro
FileDescription jpp
FileVersion (#2) 2.5.0.0
InternalName jpp
LegalCopyright Columbus Pro
OriginalFilename jpp.exe
ProductName jpp
ProductVersion (#2) 2.5.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Apr-09 08:47:38
Version 0.0
SizeofData 816
AddressOfRawData 0x3cff8
PointerToRawData 0x3c1f8

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140041040
GuardCFCheckFunctionPointer 5368894648
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

XOR Key 0x461d01ab
Unmarked objects 0
C++ objects (33140) 183
C objects (33140) 12
ASM objects (33140) 10
253 (35207) 3
ASM objects (35207) 9
C objects (35207) 17
C++ objects (35207) 40
Imports (33140) 11
Total imports 159
C objects (35215) 27
Linker (35215) 1

Errors

Leave a comment

No comments yet.