Errors

Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-fil>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>

General

  • Target

    App_Installer.rar

  • Size

    54.2MB

  • MD5

    fe23de02f27f300a7ef4af2837f63012

  • SHA1

    0d6eb750212ffe2f0374ec828e542b7e9d8a9e54

  • SHA256

    06b489080a5addb9ed1163500a9950649cc0830a9e7dc88bfa5ac0ecaf34c912

  • SHA512

    97a4632abb6c8d40d4ce149d62a1e30781119e0c69913791aa3a448d66e937abc61294c0dbc8ba4e6bad4d54924d905d6daaefd9bcaec91ea591cd1ec42c6c48

  • SSDEEP

    1572864:kCIXlP/Y9QcvV0N8Wg7WjLJapYOIPRaGlm+bGydFqv2cgD:d21/4vWpg7n+O+tfb/zZ5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • App_Installer.rar
    .rar

    Password: 2323

  • FFWsRegister.dll
    .dll windows x64

    Password: 2323

    593c808e0be958a4bc2048c70d8bf576


    Headers

    Imports

    Exports

    Sections

  • README.txt
  • Setup app.exe
    .exe windows x86

    Password: 2323

    6011984d7c1f1b97a34d7517a498bff8


    Headers

    Imports

    Sections

  • jre/COPYRIGHT
  • jre/LICENSE
  • jre/README.txt
  • jre/THIRDPARTYLICENSEREADME-JAVAFX.txt
  • jre/THIRDPARTYLICENSEREADME.txt
  • jre/Welcome.html
    .html
  • jre/bin/JAWTAccessBridge-32.dll
    .dll windows x86

    Password: 2323

    cc600014039f50aac13b9344c5ec0bc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/JAWTAccessBridge.dll
    .dll windows x86

    Password: 2323

    cc600014039f50aac13b9344c5ec0bc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/JavaAccessBridge-32.dll
    .dll windows x86

    Password: 2323

    e29944e71ead1ccb0c0a4255cba87233


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/JavaAccessBridge.dll
    .dll windows x86

    Password: 2323

    e29944e71ead1ccb0c0a4255cba87233


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/WindowsAccessBridge-32.dll
    .dll windows x86

    Password: 2323

    84a5cfdeff1a7d1d864ed633a0c541f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/WindowsAccessBridge.dll
    .dll windows x86

    Password: 2323

    84a5cfdeff1a7d1d864ed633a0c541f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/awt.dll
    .dll windows x86

    5a7c52837d7c6ebf3ea64f339d91c528


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/bci.dll
    .dll windows x86

    d58616d0d1598a8c8edc018de5766553


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/client/Xusage.txt
  • jre/bin/client/jvm.dll
    .dll windows x86

    114ef3e1b45d13b5810e918781a776cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dcpr.dll
    .dll windows x86

    3f4c0ab4d244ccb8bda37cbf2367a663


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/decora_sse.dll
    .dll windows x86

    69baa4452861c3d7d819494b4cc2de7a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/deploy.dll
    .dll windows x86

    3b3b251693dc00e8bd16f9d22c4941b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dt_shmem.dll
    .dll windows x86

    973a341750a3e38e95b6dcd81a670784


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dt_socket.dll
    .dll windows x86

    8febe166840ba9db32f4be9252394847


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dtplugin/deployJava1.dll
    .dll regsvr32 windows x86

    45c657a8f2d508a899e09b8ad3cc89ed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dtplugin/npdeployJava1.dll
    .dll windows x86

    b8eac445ed3e36cf2487431b7fe6d58f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/eula.dll
    .dll windows x86

    15634df6fd2a5d773e54f2347cd32373


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/fontmanager.dll
    .dll windows x86

    51bbf91dd37250917fec58c25617a717


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/fxplugins.dll
    .dll windows x86

    392a99ffa08105fe7dcbe1f3fb9add4a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/glass.dll
    .dll windows x86

    3effe2590767d904f00dbf033dc5caa7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/glib-lite.dll
    .dll windows x86

    7701b6049ce8d395567987c9cef5bdba


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/gstreamer-lite.dll
    .dll windows x86

    ce39e1ee980a73afd95d87dd7a668e5c


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/hprof.dll
    .dll windows x86

    13358746ca96f6abfeef55d5169d1a86


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/instrument.dll
    .dll windows x86

    5358993e890ef250d6937e7311acbbb5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/j2pcsc.dll
    .dll windows x86

    63e189e6ac3fe0e3a90b6d97282a498a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/j2pkcs11.dll
    .dll windows x86

    13312f067fe890fc2438ee0b627107eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jaas_nt.dll
    .dll windows x86

    f413fd6a79b734fd423e8dd71326186a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jabswitch.exe
    .exe windows x86

    91f3d614f9b67c32a32d29abb665ae77


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/java-rmi.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/java.dll
    .dll windows x86

    9341cbcc9ecda7dd84a0cf238a03286f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/java.exe
    .exe windows x86

    14d122df97069aa81335cb1b91d39b72


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/java_crw_demo.dll
    .dll windows x86

    5069e51d16f355e9e76e8203cb1df2d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/javacpl.cpl
    .dll windows x86

    b0bcbba2fed0933b454d74181e10f32f


    Headers

    Imports

    Exports

    Sections

  • jre/bin/javacpl.exe
    .exe windows x86

    a1452e423a8330360c3d9d3d16dcd211


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/javafx_font.dll
    .dll windows x86

    f888ba36a8c7ddcbb24a897b019b6c0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/javafx_font_t2k.dll
    .dll windows x86

    0eadf6dbfc3e427d67bf5846e4ca43dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/javafx_iio.dll
    .dll windows x86

    007f491a085f1a15ba288d64227ab107


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/javaw.exe
    .exe windows x86

    e8430c833f339cd7cf45c7f2a8132cef


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/javaws.exe
    .exe windows x86

    eaba1b7bb154ef1f08d95893ddbfbdcf


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/jawt.dll
    .dll windows x86

    a367813d79ce542a17d48a6d5815ae0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jdwp.dll
    .dll windows x86

    ed947c6caf6fc328d4ab0f7c39763288


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jfr.dll
    .dll windows x86

    039a12fcdf9fcc99f7496b8420598d85


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jfxmedia.dll
    .dll windows x86

    39fdac3f69922d84960ebc9d5c70f342


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jfxwebkit.dll
    .dll windows x86

    aa462c7950b981f4921414fd67dfedac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jjs.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/jli.dll
    .dll windows x86

    f2838a1955c17134538baad41bdb96b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jp2iexp.dll
    .dll regsvr32 windows x86

    21e81709eae546f0d098782e37738b36


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jp2launcher.exe
    .exe windows x86

    12150168648dcbc011c74cb430d4ba2d


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/jp2native.dll
    .dll windows x86

    4f7799dbe13aacc09f476aa1240a0ae1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jp2ssv.dll
    .dll regsvr32 windows x86

    c69efcf2a43d997ad116de111c043685


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jpeg.dll
    .dll windows x86

    6529993b931923fcd297299750abcaa4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jsdt.dll
    .dll windows x86

    0e19e82325b9c1c37d5100c97645a590


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jsound.dll
    .dll windows x86

    3237f9f8cd3294fcb7a2350f484bd69e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jsoundds.dll
    .dll windows x86

    75de50e9251a9d51c81e1b6ccce81c7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/kcms.dll
    .dll windows x86

    85a4bfc561ad6ee0a2ad2529c650afa7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/keytool.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/kinit.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/klist.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/ktab.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/lcms.dll
    .dll windows x86

    8150806bf4008bf1ff4c83f59fd9396c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/management.dll
    .dll windows x86

    326201bc611c537ab1fdf91534a84b26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/mlib_image.dll
    .dll windows x86

    6e21d83f5e6ff110ff2f01a63cf53a03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/msvcp120.dll
    .dll windows x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/msvcr120.dll
    .dll windows x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/net.dll
    .dll windows x86

    c392861b8a1b8d407562d0ac0721f557


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/nio.dll
    .dll windows x86

    eb564a18854f63e47ba16b3957600ce5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/npt.dll
    .dll windows x86

    768c7bf95574dcef3bd251323c77b773


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/orbd.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/pack200.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/plugin2/msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/plugin2/npjp2.dll
    .dll windows x86

    0f43a83b2702760f998ea822fd04aa87


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/policytool.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/prism_common.dll
    .dll windows x86

    19ccae220210cc288da0cbeead856463


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/prism_d3d.dll
    .dll windows x86

    e205b6478ca91febc8d0ea53d76b47c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/prism_sw.dll
    .dll windows x86

    68eb7d3c5d60f93a1a3d1dfe90145e50


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/resource.dll
    .dll windows x86

    de7f0fa8d8017f45a0eff391c4d13b01


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/rmid.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/rmiregistry.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/servertool.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/splashscreen.dll
    .dll windows x86

    2835ee6e425d9237417721f288b33a84


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/ssv.dll
    .dll regsvr32 windows x86

    95ebc67f761937c3d80042f4b7999275


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/ssvagent.exe
    .exe windows x86

    f74e6ee9a6be3c8f40a07e3023294235


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/sunec.dll
    .dll windows x86

    77099358e94a2792873be5852d0933b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/sunmscapi.dll
    .dll windows x86

    c660867b9193cb19852946d8fedf1845


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/t2k.dll
    .dll windows x86

    578c70223a0d8cd0361bb1078cb16ccc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/tnameserv.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/unpack.dll
    .dll windows x86

    e00a0a11515768ae3f0e5532e0a925ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/unpack200.exe
    .exe windows x86

    172861d7f771518bba27ebb10e326cd9


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/verify.dll
    .dll windows x86

    f87e07ba6b89d78317d11457ed451a34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/w2k_lsa_auth.dll
    .dll windows x86

    9a1ea58331d3fc0061fb1c1a3bda0e4b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/wsdetect.dll
    .dll regsvr32 windows x86

    21f12549e90d4acd8f04049880babe56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/zip.dll
    .dll windows x86

    b7e454085b88352af3e74f42c8b7af6e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/lib/accessibility.properties
  • jre/lib/calendars.properties
  • jre/lib/charsets.jar
    .jar
  • jre/lib/classlist
  • jre/lib/cmm/CIEXYZ.pf
  • jre/lib/cmm/GRAY.pf
  • jre/lib/cmm/LINEAR_RGB.pf
  • jre/lib/cmm/PYCC.pf
  • jre/lib/cmm/sRGB.pf
  • jre/lib/content-types.properties
  • jre/lib/currency.data
  • jre/lib/deploy.jar
    .jar
  • jre/lib/deploy/ffjcext.zip
    .zip .js
  • jre/lib/deploy/messages.properties
    .jnlp
  • jre/lib/deploy/messages_de.properties
    .jnlp
  • jre/lib/deploy/messages_es.properties
  • jre/lib/deploy/messages_fr.properties
    .jnlp
  • jre/lib/deploy/messages_it.properties
  • jre/lib/deploy/messages_ja.properties
    .jnlp
  • jre/lib/deploy/messages_ko.properties
    .jnlp
  • jre/lib/deploy/messages_pt_BR.properties
    .jnlp
  • jre/lib/deploy/messages_sv.properties
    .jnlp
  • jre/lib/deploy/messages_zh_CN.properties
    .jnlp
  • jre/lib/deploy/messages_zh_HK.properties
    .jnlp
  • jre/lib/deploy/messages_zh_TW.properties
    .jnlp
  • jre/lib/deploy/splash.gif
    .gif
  • jre/lib/deploy/[email protected]
    .gif
  • jre/lib/deploy/splash_11-lic.gif
    .gif
  • jre/lib/deploy/[email protected]
    .gif
  • jre/lib/ext/access-bridge-32.jar
    .jar
  • jre/lib/ext/access-bridge.jar
    .jar
  • jre/lib/ext/cldrdata.jar
    .jar
  • jre/lib/ext/dnsns.jar
    .jar
  • jre/lib/ext/jaccess.jar
    .jar
  • jre/lib/ext/jfxrt.jar
    .jar
  • jre/lib/ext/localedata.jar
    .jar
  • jre/lib/ext/meta-index
  • jre/lib/ext/nashorn.jar
    .jar
  • jre/lib/ext/sunec.jar
    .jar
  • jre/lib/ext/sunjce_provider.jar
    .jar
  • jre/lib/ext/sunmscapi.jar
    .jar
  • jre/lib/ext/sunpkcs11.jar
    .jar
  • jre/lib/ext/zipfs.jar
    .jar
  • jre/lib/flavormap.properties
  • jre/lib/fontconfig.bfc
  • jre/lib/fontconfig.properties.src
  • jre/lib/fonts/LucidaBrightDemiBold.ttf
  • jre/lib/fonts/LucidaBrightDemiItalic.ttf
  • jre/lib/fonts/LucidaBrightItalic.ttf
  • jre/lib/fonts/LucidaBrightRegular.ttf
  • jre/lib/fonts/LucidaSansDemiBold.ttf
  • jre/lib/fonts/LucidaSansRegular.ttf
  • jre/lib/fonts/LucidaTypewriterBold.ttf
  • jre/lib/fonts/LucidaTypewriterRegular.ttf
  • jre/lib/hijrah-config-umalqura.properties
  • jre/lib/i386/jvm.cfg
  • jre/lib/images/cursors/cursors.properties
  • jre/lib/images/cursors/invalid32x32.gif
    .gif
  • jre/lib/images/cursors/win32_CopyDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_CopyNoDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_LinkDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_LinkNoDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_MoveDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_MoveNoDrop32x32.gif
    .gif
  • jre/lib/javafx.properties
  • jre/lib/javaws.jar
    .jar
  • jre/lib/jce.jar
    .jar
  • jre/lib/jfr.jar
    .jar
  • jre/lib/jfr/default.jfc
    .xml
  • jre/lib/jfr/profile.jfc
    .xml
  • jre/lib/jfxswt.jar
    .jar
  • jre/lib/jsse.jar
    .jar
  • jre/lib/jvm.hprof.txt
  • jre/lib/logging.properties
  • jre/lib/management-agent.jar
    .jar
  • jre/lib/management/jmxremote.access
  • jre/lib/management/jmxremote.password.template
  • jre/lib/management/management.properties
  • jre/lib/management/snmp.acl.template
  • jre/lib/meta-index
  • jre/lib/net.properties
  • jre/lib/plugin.jar
    .jar
  • jre/lib/psfont.properties.ja
  • jre/lib/psfontj2d.properties
  • jre/lib/resources.jar
    .jar
  • jre/lib/rt.jar
    .jar
  • jre/lib/security/US_export_policy.jar
    .jar
  • jre/lib/security/blacklist
  • jre/lib/security/blacklisted.certs
  • jre/lib/security/cacerts
  • jre/lib/security/java.policy
  • jre/lib/security/java.security
  • jre/lib/security/javaws.policy
  • jre/lib/security/local_policy.jar
    .jar
  • jre/lib/sound.properties
  • jre/lib/tzdb.dat
  • jre/lib/tzmappings
  • jre/release