jdk-21.0.2+13_windows-x64_bin.exe.pdb
Static task
static1
General
-
Target
jdk-21_windows-x64_bin.exe
-
Size
47.2MB
-
MD5
0593d452a7a55ef84285b1e80140ef67
-
SHA1
bf2bf1125a040eebf6245183d59e50689417ed8e
-
SHA256
2c75e7b6bd476c33051ba60cab3f17e564c12b83205a9a98fa7519e38bf32464
-
SHA512
3beee9f19c4abd18ce7fc7a364712bb62f59f0458702c78c2689370ed57b221878dd8d5e69a390fa9d4ecd9bdb9ca07b0133d891e835d62854db283f150b836a
-
SSDEEP
786432:zv+zFBtCON62gLF/BGpQ33S4TveJbPSwlZkT25JYajAwRPF/tA96m9tobZiMhMrE:zmBBtCOc2gLF/UpQnfEym6IAqP9tAxYx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource jdk-21_windows-x64_bin.exe
Files
-
jdk-21_windows-x64_bin.exe.exe windows:5 windows x64 arch:x64
98b02fba2266899fcd949b38e1145b2f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
advapi32
EqualSid
RegCloseKey
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
CopySid
OpenProcessToken
ConvertStringSidToSidW
kernel32
HeapReAlloc
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapSize
CreateDirectoryW
GetModuleHandleExW
WaitForSingleObject
GetLastError
GetProcAddress
CreateProcessW
SetDllDirectoryW
GetExitCodeProcess
CloseHandle
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
FindFirstFileW
SetLastError
FindNextFileW
RemoveDirectoryW
InitializeCriticalSectionAndSpinCount
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
RaiseException
DecodePointer
MoveFileExW
DeleteCriticalSection
CopyFileW
GetTickCount
GetDriveTypeW
LoadLibraryW
FreeLibrary
GetCurrentProcess
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryW
GetNativeSystemInfo
GetCurrentThreadId
Sleep
FormatMessageW
GetLocalTime
LocalFree
GetCurrentProcessId
GetLocaleInfoW
QueryPerformanceCounter
RtlUnwind
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
EncodePointer
LCMapStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
OutputDebugStringW
GetCurrentDirectoryW
SetStdHandle
ReadConsoleW
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
RtlUnwindEx
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCommandLineA
GetCommandLineW
SetEndOfFile
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileType
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetStdHandle
WriteConsoleW
ExitProcess
HeapFree
HeapAlloc
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
Sections
.text Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 163.5MB - Virtual size: 163.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ