88d0e6d099e388a7628262cba7b97913

Sharing

Copy URL

Twitter E-mail

General

Target

88d0e6d099e388a7628262cba7b97913
Size

17KB
MD5

88d0e6d099e388a7628262cba7b97913
SHA1

029434affde0a9545b881f6449357735745fd9a0
SHA256

ea54262b9c496783839c5302c5a8fd3afb33c443073d53194cd4b95359d4de8a
SHA512

68460d0f8d423febb256100e5337ec70b6be4dea78ff6d0f59c29e43c507ac182620c9d722d04261ae3c6b7237b4b3893d36770e67a9aa48e48be0e0bf7c81d4
SSDEEP

192:kZ8tuX6DSP7u0IJknV+N9F5oWl5iVsRDFrDWpHlHoaN+17xbka9sgfxIZHFb:kZABDS5IJkKl5DRDdDG7YDbkDgf2hFb

Score

1^/10

Malware Config

Signatures

Files

88d0e6d099e388a7628262cba7b97913
.dll windows:6 windows x86 arch:x86

a09549d2b31f440055f299ea644755be

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:10:58:84:eb:95:9d:3b:c8:b9:94:f9:18:a7:b6:ee
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2020 00:00

Not After

11-01-2022 12:00

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US,1.2.840.113549.1.9.1=#0c14706b6961646d5f7573406f7261636c652e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-10-2019 00:00

Not After

17-10-2030 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a9:ee:ac:cd:83:99:0b:6f:a7:b0:d9:3f:86:32:81:e5:e7:ce:9c:0c:d3:9c:b5:b0:a9:03:50:a3:cf:0c:72:74
Signer

Actual PE Digest

a9:ee:ac:cd:83:99:0b:6f:a7:b0:d9:3f:86:32:81:e5:e7:ce:9c:0c:d3:9c:b5:b0:a9:03:50:a3:cf:0c:72:74

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\8-2-build-windows-i586-cygwin\jdk8u261\295\build\windows-i586\jdk\objs\libresource\resource.pdb

Imports

jvm

_JVM_GetManagementExt@4

java

_JNU_ThrowInternalError@8

kernel32

GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

_except_handler4_common
memset
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

Exports

Exports

_JNI_OnLoad@8
_Java_jdk_management_resource_internal_ResourceNatives_computeRetainedMemory0@16
_Java_jdk_management_resource_internal_ResourceNatives_createResourceContext0@12
_Java_jdk_management_resource_internal_ResourceNatives_destroyResourceContext0@16
_Java_jdk_management_resource_internal_ResourceNatives_featuresEnabled0@8
_Java_jdk_management_resource_internal_ResourceNatives_getContextsRetainedMemory0@20
_Java_jdk_management_resource_internal_ResourceNatives_getCurrentThreadAllocatedHeap0@8
_Java_jdk_management_resource_internal_ResourceNatives_getCurrentThreadCPUTime0@8
_Java_jdk_management_resource_internal_ResourceNatives_getThreadResourceContext0@16
_Java_jdk_management_resource_internal_ResourceNatives_getThreadStats0@20
_Java_jdk_management_resource_internal_ResourceNatives_sampleInterval0@8
_Java_jdk_management_resource_internal_ResourceNatives_setRetainedMemoryNotificationEnabled0@12
_Java_jdk_management_resource_internal_ResourceNatives_setThreadResourceContext0@20

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a09549d2b31f440055f299ea644755be

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

09:10:58:84:eb:95:9d:3b:c8:b9:94:f9:18:a7:b6:eeCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

a9:ee:ac:cd:83:99:0b:6f:a7:b0:d9:3f:86:32:81:e5:e7:ce:9c:0c:d3:9c:b5:b0:a9:03:50:a3:cf:0c:72:74Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

jvm

java

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 912B

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 512B - Virtual size: 332B

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

09:10:58:84:eb:95:9d:3b:c8:b9:94:f9:18:a7:b6:ee
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

a9:ee:ac:cd:83:99:0b:6f:a7:b0:d9:3f:86:32:81:e5:e7:ce:9c:0c:d3:9c:b5:b0:a9:03:50:a3:cf:0c:72:74
Signer

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 332B