net[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

net.dll
Size

101KB
MD5

742f6e182a664aabf64a41390da8ab8d
SHA1

0a0f43b9e29f589b69748a526828f86028f911c2
SHA256

93f1bff1d5bc1b0780a2fe20853910aaad3d3de55593b3767a4754c98c55c37d
SHA512

ecc8b44952b6616486cb8928c101c25e9aa8736682e8de8ed412139b6d740b88c20b16e4807fae977215a361deb44b0279bbc92e6c16edfedca988b010d2c563
SSDEEP

3072:yfoDjcaPrXArEkijY2CXRX8IhZvR2/AmEO:Uo0MZk12CXB8aQ4o

Score

1^/10

Malware Config

Signatures

Files

net.dll
.dll windows x64

f151c28088076dce477bc0972d059960

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:57:4a:41:07:aa:92:e5:9f:28:78:61:b0:2a:6e:c5
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

20/03/2020, 00:00

Not After

18/06/2023, 12:00

Subject

CN=Azul Systems\, Inc.,O=Azul Systems\, Inc.,L=Sunnyvale,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:32:7b:2a:79:f9:1a:b9:a2:5a:99:2a:06:06:7b:fa:47:a1:78:4a:59:5f:41:f6:9b:41:46:78:f3:36:da:41
Signer

Actual PE Digest

05:32:7b:2a:79:f9:1a:b9:a2:5a:99:2a:06:06:7b:fa:47:a1:78:4a:59:5f:41:f6:9b:41:46:78:f3:36:da:41

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Azul Systems\, Inc.,O=Azul Systems\, Inc.,L=Sunnyvale,ST=California,C=US

21/04/2022, 12:56
Valid: true

Chain 1

CN=Azul Systems\, Inc.,O=Azul Systems\, Inc.,L=Sunnyvale,ST=California,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

WSACleanup
WSAStartup
getprotobyname
recv
getnameinfo
freeaddrinfo
getaddrinfo
WSAEventSelect
WSACreateEvent
WSACloseEvent
gethostname
gethostbyname
gethostbyaddr
ntohl
WSASendDisconnect
htonl
getsockopt
bind
shutdown
send
listen
closesocket
accept
__WSAFDIsSet
WSAIoctl
WSAGetLastError
WSASetLastError
socket
setsockopt
sendto
select
recvfrom
ntohs
getsockname
ioctlsocket
connect
htons

jvm

jio_snprintf
JVM_InitializeSocketLibrary
JVM_CurrentTimeMillis

java

getErrorString
JNU_ThrowByNameWithMessageAndLastError
JNU_NewStringPlatform
JNU_ThrowOutOfMemoryError
JNU_ThrowByName
JNU_ThrowByNameWithLastError
JNU_ThrowNullPointerException
JNU_ReleaseStringPlatformChars
JNU_GetStringPlatformChars
JDK_LoadSystemLibrary

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

kernel32

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetLastError
RaiseException
SetUnhandledExceptionFilter
EnterCriticalSection
InitializeCriticalSection
GetOverlappedResult
MultiByteToWideChar
GetProcAddress
VerifyVersionInfoW
FormatMessageA
LocalFree
VerSetConditionMask
Sleep
SetHandleInformation
UnhandledExceptionFilter
GetCurrentProcess
LeaveCriticalSection
GetVersionExA
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
TerminateProcess

vcruntime140

__C_specific_handler
strchr
memset
memcpy
__std_type_info_destroy_list
strstr

api-ms-win-crt-string-l1-1-0

isspace
strcpy
strlen
strtok_s
strncmp
wcslen
strncpy_s
strncpy
strcmp
wcscpy
strcat

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vsnprintf_s

api-ms-win-crt-heap-l1-1-0

realloc
calloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_errno

Exports

Exports

JNI_OnLoad
Java_java_net_DatagramPacket_init
Java_java_net_DualStackPlainDatagramSocketImpl_dataAvailable
Java_java_net_DualStackPlainDatagramSocketImpl_initIDs
Java_java_net_DualStackPlainDatagramSocketImpl_socketBind
Java_java_net_DualStackPlainDatagramSocketImpl_socketClose
Java_java_net_DualStackPlainDatagramSocketImpl_socketConnect
Java_java_net_DualStackPlainDatagramSocketImpl_socketCreate
Java_java_net_DualStackPlainDatagramSocketImpl_socketDisconnect
Java_java_net_DualStackPlainDatagramSocketImpl_socketGetIntOption
Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalAddress
Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalPort
Java_java_net_DualStackPlainDatagramSocketImpl_socketReceiveOrPeekData
Java_java_net_DualStackPlainDatagramSocketImpl_socketSend
Java_java_net_DualStackPlainDatagramSocketImpl_socketSetIntOption
Java_java_net_DualStackPlainSocketImpl_accept0
Java_java_net_DualStackPlainSocketImpl_available0
Java_java_net_DualStackPlainSocketImpl_bind0
Java_java_net_DualStackPlainSocketImpl_close0
Java_java_net_DualStackPlainSocketImpl_configureBlocking
Java_java_net_DualStackPlainSocketImpl_connect0
Java_java_net_DualStackPlainSocketImpl_getIntOption
Java_java_net_DualStackPlainSocketImpl_initIDs
Java_java_net_DualStackPlainSocketImpl_listen0
Java_java_net_DualStackPlainSocketImpl_localAddress
Java_java_net_DualStackPlainSocketImpl_localPort0
Java_java_net_DualStackPlainSocketImpl_sendOOB
Java_java_net_DualStackPlainSocketImpl_setIntOption
Java_java_net_DualStackPlainSocketImpl_shutdown0
Java_java_net_DualStackPlainSocketImpl_socket0
Java_java_net_DualStackPlainSocketImpl_waitForConnect
Java_java_net_DualStackPlainSocketImpl_waitForNewConnection
Java_java_net_Inet4AddressImpl_getHostByAddr
Java_java_net_Inet4AddressImpl_getLocalHostName
Java_java_net_Inet4AddressImpl_isReachable0
Java_java_net_Inet4AddressImpl_lookupAllHostAddr
Java_java_net_Inet4Address_init
Java_java_net_Inet6AddressImpl_getHostByAddr
Java_java_net_Inet6AddressImpl_getLocalHostName
Java_java_net_Inet6AddressImpl_isReachable0
Java_java_net_Inet6AddressImpl_lookupAllHostAddr
Java_java_net_Inet6Address_init
Java_java_net_InetAddressImplFactory_isIPv6Supported
Java_java_net_InetAddress_init
Java_java_net_NetworkInterface_getAll
Java_java_net_NetworkInterface_getAll_XP
Java_java_net_NetworkInterface_getByIndex0
Java_java_net_NetworkInterface_getByIndex0_XP
Java_java_net_NetworkInterface_getByInetAddress0
Java_java_net_NetworkInterface_getByInetAddress0_XP
Java_java_net_NetworkInterface_getByName0
Java_java_net_NetworkInterface_getByName0_XP
Java_java_net_NetworkInterface_getMTU0
Java_java_net_NetworkInterface_getMTU0_XP
Java_java_net_NetworkInterface_getMacAddr0
Java_java_net_NetworkInterface_getMacAddr0_XP
Java_java_net_NetworkInterface_init
Java_java_net_NetworkInterface_isLoopback0
Java_java_net_NetworkInterface_isLoopback0_XP
Java_java_net_NetworkInterface_isP2P0
Java_java_net_NetworkInterface_isP2P0_XP
Java_java_net_NetworkInterface_isUp0
Java_java_net_NetworkInterface_isUp0_XP
Java_java_net_NetworkInterface_supportsMulticast0
Java_java_net_NetworkInterface_supportsMulticast0_XP
Java_java_net_SocketInputStream_init
Java_java_net_SocketInputStream_socketRead0
Java_java_net_SocketOutputStream_init
Java_java_net_SocketOutputStream_socketWrite0
Java_java_net_TwoStacksPlainDatagramSocketImpl_bind0
Java_java_net_TwoStacksPlainDatagramSocketImpl_connect0
Java_java_net_TwoStacksPlainDatagramSocketImpl_dataAvailable
Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketClose
Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketCreate
Java_java_net_TwoStacksPlainDatagramSocketImpl_disconnect0
Java_java_net_TwoStacksPlainDatagramSocketImpl_getTTL
Java_java_net_TwoStacksPlainDatagramSocketImpl_getTimeToLive
Java_java_net_TwoStacksPlainDatagramSocketImpl_init
Java_java_net_TwoStacksPlainDatagramSocketImpl_join
Java_java_net_TwoStacksPlainDatagramSocketImpl_leave
Java_java_net_TwoStacksPlainDatagramSocketImpl_peek
Java_java_net_TwoStacksPlainDatagramSocketImpl_peekData
Java_java_net_TwoStacksPlainDatagramSocketImpl_receive0
Java_java_net_TwoStacksPlainDatagramSocketImpl_send
Java_java_net_TwoStacksPlainDatagramSocketImpl_setTTL
Java_java_net_TwoStacksPlainDatagramSocketImpl_setTimeToLive
Java_java_net_TwoStacksPlainDatagramSocketImpl_socketGetOption
Java_java_net_TwoStacksPlainDatagramSocketImpl_socketLocalAddress
Java_java_net_TwoStacksPlainDatagramSocketImpl_socketNativeSetOption
Java_java_net_TwoStacksPlainSocketImpl_initProto
Java_java_net_TwoStacksPlainSocketImpl_socketAccept
Java_java_net_TwoStacksPlainSocketImpl_socketAvailable
Java_java_net_TwoStacksPlainSocketImpl_socketBind
Java_java_net_TwoStacksPlainSocketImpl_socketClose0
Java_java_net_TwoStacksPlainSocketImpl_socketConnect
Java_java_net_TwoStacksPlainSocketImpl_socketCreate
Java_java_net_TwoStacksPlainSocketImpl_socketGetOption
Java_java_net_TwoStacksPlainSocketImpl_socketListen
Java_java_net_TwoStacksPlainSocketImpl_socketNativeSetOption
Java_java_net_TwoStacksPlainSocketImpl_socketSendUrgentData
Java_java_net_TwoStacksPlainSocketImpl_socketShutdown
Java_sun_net_ExtendedOptionsImpl_flowSupported
Java_sun_net_ExtendedOptionsImpl_getFlowOption
Java_sun_net_ExtendedOptionsImpl_getTcpKeepAliveIntvl
Java_sun_net_ExtendedOptionsImpl_getTcpKeepAliveProbes
Java_sun_net_ExtendedOptionsImpl_getTcpKeepAliveTime
Java_sun_net_ExtendedOptionsImpl_init
Java_sun_net_ExtendedOptionsImpl_keepAliveOptionsSupported
Java_sun_net_ExtendedOptionsImpl_setFlowOption
Java_sun_net_ExtendedOptionsImpl_setTcpKeepAliveIntvl
Java_sun_net_ExtendedOptionsImpl_setTcpKeepAliveProbes
Java_sun_net_ExtendedOptionsImpl_setTcpKeepAliveTime
Java_sun_net_PortConfig_getLower0
Java_sun_net_PortConfig_getUpper0
Java_sun_net_dns_ResolverConfigurationImpl_init0
Java_sun_net_dns_ResolverConfigurationImpl_loadDNSconfig0
Java_sun_net_dns_ResolverConfigurationImpl_notifyAddrChange0
Java_sun_net_spi_DefaultProxySelector_getSystemProxy
Java_sun_net_spi_DefaultProxySelector_init
Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getCredentialsHandle
Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getNextToken
Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_initFirst
Java_sun_net_www_protocol_http_ntlm_NTLMAuthentication_isTrustedSite0
Java_sun_net_www_protocol_http_ntlm_NTLMAuthentication_isTrustedSiteAvailable
NET_Bind
NET_BindV6
NET_EnableFastTcpLoopback
NET_GetPortFromSockaddr
NET_GetSockOpt
NET_InetAddressToSockaddr
NET_MapSocketOption
NET_MapSocketOptionV6
NET_SetSockOpt
NET_SockaddrEqualsInetAddress
NET_SockaddrToInetAddress
NET_SocketClose
NET_ThrowNew
NET_Timeout
NET_Timeout2
NET_WinBind
initInetAddressIDs
ipv6_available

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f151c28088076dce477bc0972d059960

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0b:57:4a:41:07:aa:92:e5:9f:28:78:61:b0:2a:6e:c5Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:32:7b:2a:79:f9:1a:b9:a2:5a:99:2a:06:06:7b:fa:47:a1:78:4a:59:5f:41:f6:9b:41:46:78:f3:36:da:41Signer

Signature Validations

Verification

21/04/2022, 12:56 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

jvm

java

advapi32

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 512B - Virtual size: 184B

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0b:57:4a:41:07:aa:92:e5:9f:28:78:61:b0:2a:6e:c5
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:32:7b:2a:79:f9:1a:b9:a2:5a:99:2a:06:06:7b:fa:47:a1:78:4a:59:5f:41:f6:9b:41:46:78:f3:36:da:41
Signer

21/04/2022, 12:56
Valid: true

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 184B