0a8bf46c4a49e11f36d438db5f5291b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a8bf46c4a49e11f36d438db5f5291b2
Size

344KB
MD5

0a8bf46c4a49e11f36d438db5f5291b2
SHA1

62e31784eb9cb86327760cddef9736b25d49dbd7
SHA256

05108cfa255c043222d1f160e4b74900379a3f66e8bbd7e8b98954d43becdc2b
SHA512

6681dc4a1278ac3f23adc16374113b9ea4dc01cf6477d92f9160e2d4b26bad4e781ca25395d0df93d3eee843638099662b52fdf76620a97fe2a1e0f3bf58b032
SSDEEP

6144:XcH0Eqlt6DCHEKFOafWj2/i2qhqFYLLTg4Nwn+Ck4UN1F15MmJV4vonpg3:Xs9C6Daiaw2qyGTJNwn+P4UN52m74vc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a8bf46c4a49e11f36d438db5f5291b2

Files

0a8bf46c4a49e11f36d438db5f5291b2
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

JLI_AcceptableRelease
JLI_ExactVersionId
JLI_FreeManifest
JLI_JarUnpackFile
JLI_MemAlloc
JLI_MemFree
JLI_ParseManifest
JLI_StringDup
JLI_ValidVersionString

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ