Celestial[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Celestial.dll
Size

62.3MB
MD5

a941bfdb4d595ce9963d33db021a7cbc
SHA1

db990fb99c690e5b74fb8f61a4ac4e7365766dd6
SHA256

1f1b98f8e125340b5b639e3b0254eaca6380c60e686a785176034d228714317a
SHA512

2ad750b83850a8a637439a408cc3a155c84ce333c4f1283c6e14d22e0c699b93acde599b1ea709de5ceb713bf0e559a68975792464aa22e1f8001fe0ac0d65db
SSDEEP

1572864:08P8gnYCblYQ6fFrq/osYOq2OrkWqAcCGuUY5PCQ:3EgnYCb6FrqAszKrqA+zY5PCQ

Score

1^/10

Malware Config

Signatures

Files

Celestial.dll
.dll windows:6 windows x64

97c161104dc549d9705e1fc0b240af47

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

20:b4:13:e1:29:15:a1:44:f8:0a:a6:e5
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/01/2023, 13:03

Not After

27/01/2024, 13:03

Subject

CN=IP Kayukin Gleb Anatolievich,O=IP Kayukin Gleb Anatolievich,L=Izhevsk,ST=Udmurt Republic,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:45

Not After

08/05/2033, 07:45

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ca:18:eb:cd:67:c6:7a:92:e8:f6:7d:c3:0f:04:93:c9:f7:9d:d7:66:b1:6f:8d:66:a5:c3:bf:2e:c1:1b:47:56
Signer

Actual PE Digest

ca:18:eb:cd:67:c6:7a:92:e8:f6:7d:c3:0f:04:93:c9:f7:9d:d7:66:b1:6f:8d:66:a5:c3:bf:2e:c1:1b:47:56

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

msvcrt

___lc_codepage_func

Exports

Exports

JNI_OnLoad
Java_switch_AX_ntfLoader
Java_switch_Ay_ntfLoader
Java_switch_NC_ntfLoader
Java_switch_Ys_ntfLoader
Java_switch_aAA_ntfLoader
Java_switch_aAB_ntfLoader
Java_switch_aAD_ntfLoader
Java_switch_aAE_ntfLoader
Java_switch_aAF_ntfLoader
Java_switch_aAG_ntfLoader
Java_switch_aAH_ntfLoader
Java_switch_aAI_000241_ntfLoader
Java_switch_aAI_ntfLoader
Java_switch_aAJ_ntfLoader
Java_switch_aAN_ntfLoader
Java_switch_aAO_ntfLoader
Java_switch_aAP_ntfLoader
Java_switch_aAQ_ntfLoader
Java_switch_aAR_ntfLoader
Java_switch_aAU_ntfLoader
Java_switch_aAV_ntfLoader
Java_switch_aAW_ntfLoader
Java_switch_aAX_ntfLoader
Java_switch_aAY_ntfLoader
Java_switch_aAZ_ntfLoader
Java_switch_aAa_00024class_000241_ntfLoader
Java_switch_aAa_ntfLoader
Java_switch_aAb_ntfLoader
Java_switch_aAc_ntfLoader
Java_switch_aAd_ntfLoader
Java_switch_aAe_000241_ntfLoader
Java_switch_aAe_00024class_ntfLoader
Java_switch_aAe_ntfLoader
Java_switch_aAf_ntfLoader
Java_switch_aAg_ntfLoader
Java_switch_aAh_ntfLoader
Java_switch_aAj_00024class_ntfLoader
Java_switch_aAj_00024volatile_ntfLoader
Java_switch_aAj_ntfLoader
Java_switch_aAk_00024class_ntfLoader
Java_switch_aAk_00024float_ntfLoader
Java_switch_aAk_00024transient_ntfLoader
Java_switch_aAk_00024volatile_ntfLoader
Java_switch_aAk_ntfLoader
Java_switch_aAl_ntfLoader
Java_switch_aAm_00024class_ntfLoader
Java_switch_aAm_00024float_ntfLoader
Java_switch_aAm_00024transient_ntfLoader
Java_switch_aAm_00024volatile_ntfLoader
Java_switch_aAm_ntfLoader
Java_switch_aAn_ntfLoader
Java_switch_aAo_ntfLoader
Java_switch_aAp_00024class_ntfLoader
Java_switch_aAp_00024float_ntfLoader
Java_switch_aAp_00024transient_ntfLoader
Java_switch_aAp_00024volatile_ntfLoader
Java_switch_aAp_ntfLoader
Java_switch_aAq_ntfLoader
Java_switch_aAr_ntfLoader
Java_switch_aAs_ntfLoader
Java_switch_aAw_ntfLoader
Java_switch_aAx_00024class_ntfLoader
Java_switch_aAx_ntfLoader
Java_switch_aAy_000241_ntfLoader
Java_switch_aAy_ntfLoader
Java_switch_aAz_ntfLoader
Java_switch_aBA_ntfLoader
Java_switch_aBB_ntfLoader
Java_switch_aBC_ntfLoader
Java_switch_aBD_ntfLoader
Java_switch_aBE_ntfLoader
Java_switch_aBF_00024class_ntfLoader
Java_switch_aBF_ntfLoader
Java_switch_aBG_ntfLoader
Java_switch_aBH_ntfLoader
Java_switch_aBI_ntfLoader
Java_switch_aBJ_ntfLoader
Java_switch_aBK_ntfLoader
Java_switch_aBL_ntfLoader
Java_switch_aBM_ntfLoader
Java_switch_aBN_ntfLoader
Java_switch_aBO_ntfLoader
Java_switch_aBP_ntfLoader
Java_switch_aBQ_ntfLoader
Java_switch_aBR_ntfLoader
Java_switch_aBS_ntfLoader
Java_switch_aBT_ntfLoader
Java_switch_aBU_ntfLoader
Java_switch_aBV_ntfLoader
Java_switch_aBW_ntfLoader
Java_switch_aBX_ntfLoader
Java_switch_aBY_00024class_ntfLoader
Java_switch_aBY_ntfLoader
Java_switch_aBZ_ntfLoader
Java_switch_aBa_ntfLoader
Java_switch_aBb_ntfLoader
Java_switch_aBc_ntfLoader
Java_switch_aBd_00024class_ntfLoader
Java_switch_aBd_ntfLoader
Java_switch_aBe_ntfLoader
Java_switch_aBf_ntfLoader
Java_switch_aBi_ntfLoader
Java_switch_aBk_ntfLoader
Java_switch_aBl_ntfLoader
Java_switch_aBm_ntfLoader
Java_switch_aBn_ntfLoader
Java_switch_aBo_ntfLoader
Java_switch_aBp_00024class_00024class_ntfLoader
Java_switch_aBp_00024class_00024volatile_ntfLoader
Java_switch_aBp_00024class_ntfLoader
Java_switch_aBp_00024volatile_ntfLoader
Java_switch_aBp_ntfLoader
Java_switch_aBq_ntfLoader
Java_switch_aBr_ntfLoader
Java_switch_aBs_ntfLoader
Java_switch_aBu_ntfLoader
Java_switch_aBv_ntfLoader
Java_switch_aBw_ntfLoader
Java_switch_aBx_00024class_ntfLoader
Java_switch_aBx_ntfLoader
Java_switch_aBy_ntfLoader
Java_switch_aCA_00024class_ntfLoader
Java_switch_aCA_ntfLoader
Java_switch_aCB_ntfLoader
Java_switch_aCC_ntfLoader
Java_switch_aCD_ntfLoader
Java_switch_aCE_ntfLoader
Java_switch_aCF_ntfLoader
Java_switch_aCG_ntfLoader
Java_switch_aCH_ntfLoader
Java_switch_aCI_00024class_ntfLoader
Java_switch_aCI_ntfLoader
Java_switch_aCJ_ntfLoader
Java_switch_aCK_ntfLoader
Java_switch_aCL_ntfLoader
Java_switch_aCM_ntfLoader
Java_switch_aCN_ntfLoader
Java_switch_aCO_ntfLoader
Java_switch_aCP_ntfLoader
Java_switch_aCQ_ntfLoader
Java_switch_aCR_ntfLoader
Java_switch_aCS_ntfLoader
Java_switch_aCT_ntfLoader
Java_switch_aCU_ntfLoader
Java_switch_aCV_ntfLoader
Java_switch_aCW_ntfLoader
Java_switch_aCX_ntfLoader
Java_switch_aCY_ntfLoader
Java_switch_aCZ_ntfLoader
Java_switch_aCa_ntfLoader
Java_switch_aCb_ntfLoader
Java_switch_aCc_ntfLoader
Java_switch_aCd_ntfLoader
Java_switch_aCe_ntfLoader
Java_switch_aCf_ntfLoader
Java_switch_aCg_ntfLoader
Java_switch_aCh_ntfLoader
Java_switch_aCi_ntfLoader
Java_switch_aCj_ntfLoader
Java_switch_aCk_ntfLoader
Java_switch_aCl_ntfLoader
Java_switch_aCm_ntfLoader
Java_switch_aCn_ntfLoader
Java_switch_aCo_ntfLoader
Java_switch_aCp_ntfLoader
Java_switch_aCq_ntfLoader
Java_switch_aCr_ntfLoader
Java_switch_aCs_ntfLoader
Java_switch_aCt_ntfLoader
Java_switch_aCu_ntfLoader
Java_switch_aCv_ntfLoader
Java_switch_aCw_ntfLoader
Java_switch_aCx_ntfLoader
Java_switch_aCy_ntfLoader
Java_switch_aCz_ntfLoader
Java_switch_aDA_ntfLoader
Java_switch_aDB_ntfLoader
Java_switch_aDC_ntfLoader
Java_switch_aDD_ntfLoader
Java_switch_aDE_00024class_ntfLoader
Java_switch_aDE_ntfLoader
Java_switch_aDF_ntfLoader
Java_switch_aDG_ntfLoader
Java_switch_aDK_ntfLoader
Java_switch_aDL_ntfLoader
Java_switch_aDM_ntfLoader
Java_switch_aDN_ntfLoader
Java_switch_aDO_ntfLoader
Java_switch_aDP_ntfLoader
Java_switch_aDQ_ntfLoader
Java_switch_aDR_ntfLoader
Java_switch_aDS_ntfLoader
Java_switch_aDT_ntfLoader
Java_switch_aDU_ntfLoader
Java_switch_aDV_ntfLoader
Java_switch_aDW_ntfLoader
Java_switch_aDX_ntfLoader
Java_switch_aDY_ntfLoader
Java_switch_aDZ_ntfLoader
Java_switch_aDa_ntfLoader
Java_switch_aDb_ntfLoader
Java_switch_aDc_ntfLoader
Java_switch_aDd_ntfLoader
Java_switch_aDe_ntfLoader
Java_switch_aDf_ntfLoader
Java_switch_aDg_00024class_ntfLoader
Java_switch_aDg_ntfLoader
Java_switch_aDh_ntfLoader
Java_switch_aDi_ntfLoader
Java_switch_aDm_ntfLoader
Java_switch_aDn_ntfLoader
Java_switch_aDo_00024class_ntfLoader
Java_switch_aDo_ntfLoader
Java_switch_aDp_ntfLoader
Java_switch_aDq_ntfLoader
Java_switch_aDr_ntfLoader
Java_switch_aDs_ntfLoader
Java_switch_aDt_ntfLoader
Java_switch_aDu_00024class_ntfLoader
Java_switch_aDu_ntfLoader
Java_switch_aDv_ntfLoader
Java_switch_aDw_ntfLoader
Java_switch_aDx_ntfLoader
Java_switch_aDy_00024class_ntfLoader
Java_switch_aDy_ntfLoader
Java_switch_aDz_ntfLoader
Java_switch_aEA_ntfLoader
Java_switch_aEB_ntfLoader
Java_switch_aEC_ntfLoader
Java_switch_aED_ntfLoader
Java_switch_aEE_ntfLoader
Java_switch_aEF_ntfLoader
Java_switch_aEG_ntfLoader
Java_switch_aEH_ntfLoader
Java_switch_aEI_ntfLoader
Java_switch_aEJ_000241_ntfLoader
Java_switch_aEJ_ntfLoader
Java_switch_aEL_00024class_ntfLoader
Java_switch_aEL_ntfLoader
Java_switch_aEM_ntfLoader
Java_switch_aEN_ntfLoader
Java_switch_aEO_ntfLoader
Java_switch_aEP_ntfLoader
Java_switch_aEQ_000241_ntfLoader
Java_switch_aEQ_ntfLoader
Java_switch_aER_000241_ntfLoader
Java_switch_aER_ntfLoader
Java_switch_aES_ntfLoader
Java_switch_aET_00024class_ntfLoader
Java_switch_aET_ntfLoader
Java_switch_aEU_ntfLoader
Java_switch_aEV_ntfLoader
Java_switch_aEX_ntfLoader
Java_switch_aEY_000241_ntfLoader
Java_switch_aEY_00024class_ntfLoader
Java_switch_aEY_ntfLoader
Java_switch_aEZ_00024class_ntfLoader
Java_switch_aEZ_ntfLoader
Java_switch_aEa_ntfLoader
Java_switch_aEb_ntfLoader
Java_switch_aEc_ntfLoader
Java_switch_aEd_ntfLoader
Java_switch_aEe_ntfLoader
Java_switch_aEf_ntfLoader
Java_switch_aEg_ntfLoader
Java_switch_aEh_ntfLoader
Java_switch_aEi_ntfLoader
Java_switch_aEj_ntfLoader
Java_switch_aEk_00024class_ntfLoader
Java_switch_aEk_ntfLoader
Java_switch_aEl_ntfLoader
Java_switch_aEm_00024volatile_000241_ntfLoader
Java_switch_aEm_00024volatile_000242_ntfLoader
Java_switch_aEm_00024volatile_ntfLoader
Java_switch_aEm_ntfLoader
Java_switch_aEn_ntfLoader
Java_switch_aEo_ntfLoader
Java_switch_aEp_ntfLoader
Java_switch_aEq_ntfLoader
Java_switch_aEr_ntfLoader
Java_switch_aEs_ntfLoader
Java_switch_aEt_00024class_ntfLoader
Java_switch_aEt_00024volatile_ntfLoader
Java_switch_aEt_ntfLoader
Java_switch_aEu_ntfLoader
Java_switch_aEv_ntfLoader
Java_switch_aEw_ntfLoader
Java_switch_aEx_ntfLoader
Java_switch_aEy_ntfLoader
Java_switch_aEz_ntfLoader
Java_switch_aFA_000241_ntfLoader
Java_switch_aFA_ntfLoader
Java_switch_aFB_ntfLoader
Java_switch_aFF_ntfLoader
Java_switch_aFG_ntfLoader
Java_switch_aFH_ntfLoader
Java_switch_aFI_ntfLoader
Java_switch_aFJ_ntfLoader
Java_switch_aFK_ntfLoader
Java_switch_aFL_000241_ntfLoader
Java_switch_aFL_00024class_ntfLoader
Java_switch_aFL_ntfLoader
Java_switch_aFM_ntfLoader
Java_switch_aFN_ntfLoader
Java_switch_aFP_ntfLoader
Java_switch_aFQ_ntfLoader
Java_switch_aFR_00024class_ntfLoader
Java_switch_aFR_ntfLoader
Java_switch_aFS_ntfLoader
Java_switch_aFU_ntfLoader
Java_switch_aFV_ntfLoader
Java_switch_aFW_ntfLoader
Java_switch_aFX_ntfLoader
Java_switch_aFY_ntfLoader
Java_switch_aFZ_00024class_ntfLoader
Java_switch_aFZ_ntfLoader
Java_switch_aFa_ntfLoader
Java_switch_aFb_00024class_ntfLoader
Java_switch_aFb_ntfLoader
Java_switch_aFc_ntfLoader
Java_switch_aFd_ntfLoader
Java_switch_aFe_00024class_ntfLoader
Java_switch_aFe_ntfLoader
Java_switch_aFf_00024class_ntfLoader
Java_switch_aFf_ntfLoader
Java_switch_aFg_ntfLoader
Java_switch_aFh_ntfLoader
Java_switch_aFi_ntfLoader
Java_switch_aFj_00024class_ntfLoader
Java_switch_aFj_ntfLoader
Java_switch_aFk_000241_ntfLoader
Java_switch_aFk_ntfLoader
Java_switch_aFl_ntfLoader
Java_switch_aFm_00024class_ntfLoader
Java_switch_aFm_ntfLoader
Java_switch_aFn_ntfLoader
Java_switch_aFo_ntfLoader
Java_switch_aFp_ntfLoader
Java_switch_aFq_ntfLoader
Java_switch_aFr_ntfLoader
Java_switch_aFs_ntfLoader
Java_switch_aFt_ntfLoader
Java_switch_aFu_ntfLoader
Java_switch_aFv_ntfLoader
Java_switch_aFx_ntfLoader
Java_switch_aFy_ntfLoader
Java_switch_aFz_000241_ntfLoader
Java_switch_aFz_00024class_ntfLoader
Java_switch_aFz_00024volatile_ntfLoader
Java_switch_aFz_ntfLoader
Java_switch_aGA_ntfLoader
Java_switch_aGB_ntfLoader
Java_switch_aGC_ntfLoader
Java_switch_aGD_ntfLoader
Java_switch_aGE_ntfLoader
Java_switch_aGF_ntfLoader
Java_switch_aGG_ntfLoader
Java_switch_aGH_ntfLoader
Java_switch_aGI_ntfLoader
Java_switch_aGJ_ntfLoader
Java_switch_aGK_ntfLoader
Java_switch_aGL_ntfLoader
Java_switch_aGN_ntfLoader
Java_switch_aGO_ntfLoader
Java_switch_aGP_ntfLoader
Java_switch_aGQ_ntfLoader
Java_switch_aGR_ntfLoader
Java_switch_aGS_ntfLoader
Java_switch_aGT_ntfLoader
Java_switch_aGU_ntfLoader
Java_switch_aGV_00024class_ntfLoader
Java_switch_aGV_ntfLoader
Java_switch_aGW_00024class_ntfLoader
Java_switch_aGW_ntfLoader
Java_switch_aGX_00024class_ntfLoader
Java_switch_aGX_ntfLoader
Java_switch_aGY_ntfLoader
Java_switch_aGZ_00024class_ntfLoader
Java_switch_aGZ_ntfLoader
Java_switch_aGb_00024class_ntfLoader
Java_switch_aGb_ntfLoader
Java_switch_aGc_ntfLoader
Java_switch_aGd_ntfLoader
Java_switch_aGe_000241_ntfLoader
Java_switch_aGe_00024class_ntfLoader
Java_switch_aGe_00024volatile_ntfLoader
Java_switch_aGe_ntfLoader
Java_switch_aGf_ntfLoader
Java_switch_aGg_00024class_ntfLoader
Java_switch_aGg_00024volatile_ntfLoader
Java_switch_aGg_ntfLoader
Java_switch_aGi_ntfLoader
Java_switch_aGj_ntfLoader
Java_switch_aGk_ntfLoader
Java_switch_aGl_ntfLoader
Java_switch_aGm_ntfLoader
Java_switch_aGn_ntfLoader
Java_switch_aGo_ntfLoader
Java_switch_aGr_ntfLoader
Java_switch_aGs_ntfLoader
Java_switch_aGt_ntfLoader
Java_switch_aGu_ntfLoader
Java_switch_aGv_ntfLoader
Java_switch_aGw_ntfLoader
Java_switch_aGx_ntfLoader
Java_switch_aGy_ntfLoader
Java_switch_aGz_ntfLoader
Java_switch_aHA_ntfLoader
Java_switch_aHB_ntfLoader
Java_switch_aHC_ntfLoader
Java_switch_aHD_ntfLoader
Java_switch_aHE_ntfLoader
Java_switch_aHG_ntfLoader
Java_switch_aHa_ntfLoader
Java_switch_aHb_ntfLoader
Java_switch_aHc_ntfLoader
Java_switch_aHd_00024class_ntfLoader
Java_switch_aHd_ntfLoader
Java_switch_aHe_ntfLoader
Java_switch_aHf_ntfLoader
Java_switch_aHg_ntfLoader
Java_switch_aHh_ntfLoader
Java_switch_aHi_00024class_ntfLoader
Java_switch_aHi_ntfLoader
Java_switch_aHj_00024class_ntfLoader
Java_switch_aHj_ntfLoader
Java_switch_aHk_ntfLoader
Java_switch_aHl_ntfLoader
Java_switch_aHm_ntfLoader
Java_switch_aHn_ntfLoader
Java_switch_aHo_ntfLoader
Java_switch_aHp_000241_ntfLoader
Java_switch_aHp_ntfLoader
Java_switch_aHq_ntfLoader
Java_switch_aHr_ntfLoader
Java_switch_aHs_ntfLoader
Java_switch_aHt_ntfLoader
Java_switch_aHu_ntfLoader
Java_switch_aHv_ntfLoader
Java_switch_aHw_ntfLoader
Java_switch_aHx_ntfLoader
Java_switch_aHy_ntfLoader
Java_switch_aHz_000241_ntfLoader
Java_switch_aHz_00024class_ntfLoader
Java_switch_aHz_ntfLoader
Java_switch_azA_00024class_000241_ntfLoader
Java_switch_azA_00024class_000242_ntfLoader
Java_switch_azA_00024class_000243_ntfLoader
Java_switch_azA_00024class_000244_ntfLoader
Java_switch_azA_00024class_000245_ntfLoader
Java_switch_azA_00024class_000246_ntfLoader
Java_switch_azA_00024class_000247_ntfLoader
Java_switch_azA_00024class_ntfLoader
Java_switch_azA_ntfLoader
Java_switch_azB_ntfLoader
Java_switch_azC_ntfLoader
Java_switch_azD_ntfLoader
Java_switch_azE_ntfLoader
Java_switch_azF_ntfLoader
Java_switch_azH_ntfLoader
Java_switch_azJ_ntfLoader
Java_switch_azL_ntfLoader
Java_switch_azM_ntfLoader
Java_switch_azN_ntfLoader
Java_switch_azO_ntfLoader
Java_switch_azP_ntfLoader
Java_switch_azQ_000241_ntfLoader
Java_switch_azQ_ntfLoader
Java_switch_azS_ntfLoader
Java_switch_azT_ntfLoader
Java_switch_azV_00024class_ntfLoader
Java_switch_azV_00024float_ntfLoader
Java_switch_azV_00024volatile_ntfLoader
Java_switch_azV_ntfLoader
Java_switch_azW_00024class_ntfLoader
Java_switch_azW_00024volatile_ntfLoader
Java_switch_azW_ntfLoader
Java_switch_azX_00024class_ntfLoader
Java_switch_azX_ntfLoader
Java_switch_azZ_ntfLoader
Java_switch_azq_ntfLoader
Java_switch_azr_00024class_ntfLoader
Java_switch_azr_ntfLoader
Java_switch_azs_ntfLoader
Java_switch_azt_ntfLoader
Java_switch_azu_00024class_ntfLoader
Java_switch_azu_ntfLoader
Java_switch_azv_00024class_ntfLoader
Java_switch_azv_ntfLoader
Java_switch_azw_ntfLoader
Java_switch_azx_ntfLoader
Java_switch_azz_000241_ntfLoader
Java_switch_azz_ntfLoader
Java_switch_lh_ntfLoader
Java_switch_qs_000241_ntfLoader
Java_switch_qs_00024class_ntfLoader
Java_switch_qs_ntfLoader
Java_switch_vm_000241_ntfLoader
Java_switch_vm_00024class_ntfLoader

Sections

.text
Size: - Virtual size: 8.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.L[_
Size: - Virtual size: 59.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.yXn
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IVC
Size: 62.3MB - Virtual size: 62.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97c161104dc549d9705e1fc0b240af47

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

20:b4:13:e1:29:15:a1:44:f8:0a:a6:e5Certificate

Extended Key Usages

Key Usages

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6aCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

ca:18:eb:cd:67:c6:7a:92:e8:f6:7d:c3:0f:04:93:c9:f7:9d:d7:66:b1:6f:8d:66:a5:c3:bf:2e:c1:1b:47:56Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: - Virtual size: 8.5MB

.rdata Size: - Virtual size: 382KB

.buildid Size: - Virtual size: 68B

.data Size: - Virtual size: 119KB

.pdata Size: - Virtual size: 39KB

.tls Size: - Virtual size: 16B

.L[_ Size: - Virtual size: 59.1MB

.yXn Size: 2KB - Virtual size: 2KB

.IVC Size: 62.3MB - Virtual size: 62.3MB

.reloc Size: 512B - Virtual size: 252B

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

20:b4:13:e1:29:15:a1:44:f8:0a:a6:e5
Certificate

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

ca:18:eb:cd:67:c6:7a:92:e8:f6:7d:c3:0f:04:93:c9:f7:9d:d7:66:b1:6f:8d:66:a5:c3:bf:2e:c1:1b:47:56
Signer

.text
Size: - Virtual size: 8.5MB

.rdata
Size: - Virtual size: 382KB

.buildid
Size: - Virtual size: 68B

.data
Size: - Virtual size: 119KB

.pdata
Size: - Virtual size: 39KB

.tls
Size: - Virtual size: 16B

.L[_
Size: - Virtual size: 59.1MB

.yXn
Size: 2KB - Virtual size: 2KB

.IVC
Size: 62.3MB - Virtual size: 62.3MB

.reloc
Size: 512B - Virtual size: 252B