bf12b25c3468ab37d2f6a07f40ce8e09c000906473b38e70500470e0583ac8b6

Sharing

Copy URL Twitter E-mail

General

Target

bf12b25c3468ab37d2f6a07f40ce8e09c000906473b38e70500470e0583ac8b6
Size

118KB
MD5

1e9dff308ee40f11d3f0a3a6a205c45c
SHA1

dd558894b658fd10b91e68e7043c30aaf5c64fb8
SHA256

bf12b25c3468ab37d2f6a07f40ce8e09c000906473b38e70500470e0583ac8b6
SHA512

8bb75d623ed0441861f2165d48dfb35d74809025c87e1961b7ede8c466f404079f3cbd0668cff0b79f0ed3c0f3f67607c8c900593fe3bc819f37da3d3b0313c3
SSDEEP

1536:qv+nYYUavdR9kZYBYngIPy6/vbC/xZWh4G9qfYyNGvDDkbCzZrJB4MCf7b/xW:kYUmdR9kZYBZUV/2eAfYyNG3lzZrJkfM

Score

1^/10

Malware Config

Signatures

Files

bf12b25c3468ab37d2f6a07f40ce8e09c000906473b38e70500470e0583ac8b6
.dll windows:6 windows x64 arch:x64

2b9c6101bc738990deaabcc779ba4b74

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:0e:2f:8f:9e:1b:8b:e5:18:d5:fe:2b:69:cf:cc:b1
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

09/03/2023, 00:00

Not After

11/03/2025, 23:59

Subject

CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d9:22:de:d4:87:47:c8:28:30:27:03:7b:13:7c:75:97:d2:9f:a2:d4:36:38:99:ab:83:3a:af:90:22:95:13:e2
Signer

Actual PE Digest

d9:22:de:d4:87:47:c8:28:30:27:03:7b:13:7c:75:97:d2:9f:a2:d4:36:38:99:ab:83:3a:af:90:22:95:13:e2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

java.dll.pdb

Imports

jvm

JVM_ActiveProcessorCount
JVM_MaxMemory
JVM_FreeMemory
JVM_TotalMemory
JVM_GC
JVM_AreNestMates
JVM_GetCallerClass
JVM_ReferenceClear
JVM_ReferenceRefersTo
JVM_WaitForReferencePendingList
JVM_HasReferencePendingList
JVM_GetAndClearReferencePendingList
JVM_GetThreadInterruptEvent
JVM_IsPreviewEnabled
JVM_PhantomReferenceRefersTo
JVM_GetExtendedNPEMessage
JVM_IsSupportedJNIVersion
JVM_FindLibraryEntry
JVM_UnloadLibrary
JVM_LoadLibrary
JVM_NewInstanceFromConstructor
JVM_InvokeMethod
JVM_AddReadsModule
JVM_AddModuleExportsToAll
JVM_AddModuleExportsToAllUnnamed
JVM_AddModuleExports
JVM_DefineModule
JVM_LookupLambdaProxyClassFromArchive
JVM_RegisterLambdaProxyClassForArchiving
JVM_IsForeignLinkerSupported
JVM_IsFinalizationEnabled
JVM_ReportFinalizationComplete
JVM_GetFieldTypeAnnotations
JVM_GetMethodParameters
JVM_GetMethodTypeAnnotations
JVM_IsContinuationsSupported
JVM_RegisterContinuationMethods
JVM_ConstantPoolGetTagAt
JVM_ConstantPoolGetUTF8At
JVM_ConstantPoolGetStringAt
JVM_ConstantPoolGetDoubleAt
JVM_ConstantPoolGetFloatAt
JVM_ConstantPoolGetLongAt
JVM_ConstantPoolGetIntAt
JVM_ConstantPoolGetNameAndTypeRefInfoAt
JVM_ConstantPoolGetNameAndTypeRefIndexAt
JVM_ConstantPoolGetMemberRefInfoAt
JVM_ConstantPoolGetFieldAtIfLoaded
JVM_ConstantPoolGetFieldAt
JVM_ConstantPoolGetMethodAtIfLoaded
JVM_ConstantPoolGetMethodAt
JVM_ConstantPoolGetClassRefIndexAt
JVM_ConstantPoolGetClassAtIfLoaded
JVM_ConstantPoolGetClassAt
JVM_GetClassContext
JVM_LookupDefineClass
JVM_DefineClassWithSource
JVM_FindLoadedClass
JVM_FindClassFromBootLoader
JVM_AssertionStatusDirectives
JVM_FindClassFromCaller
JVM_FindPrimitiveClass
JVM_GetClassFileVersion
JVM_GetEnclosingMethodInfo
JVM_DesiredAssertionStatus
JVM_GetClassConstantPool
JVM_GetPermittedSubclasses
JVM_GetRecordComponents
JVM_IsRecord
JVM_GetNestMembers
JVM_GetNestHost
JVM_GetClassAccessFlags
JVM_GetClassDeclaredConstructors
JVM_GetClassDeclaredFields
JVM_GetClassDeclaredMethods
JVM_GetClassTypeAnnotations
JVM_GetClassAnnotations
JVM_GetClassSignature
JVM_GetSimpleBinaryName
JVM_GetDeclaringClass
JVM_GetDeclaredClasses
JVM_GetClassModifiers
JVM_IsHiddenClass
JVM_IsPrimitiveClass
JVM_IsArrayClass
JVM_SetClassSigners
JVM_GetClassSigners
JVM_IsInterface
JVM_GetClassInterfaces
JVM_InitClassName
JVM_DefineArchivedModules
JVM_DumpDynamicArchive
JVM_DumpClassListToFile
JVM_LogLambdaFormInvoker
JVM_GetRandomSeedForDumping
JVM_IsDumpingClassList
JVM_IsSharingEnabled
JVM_IsCDSDumpingEnabled
JVM_InitializeFromArchive
JVM_SetBootLoaderUnnamedModule
JVM_GetSystemPackages
JVM_GetSystemPackage
JVM_SupportsCX8
JVM_NewMultiArray
JVM_NewArray
JVM_BeforeHalt
JVM_Halt
JVM_RegisterSignal
JVM_RaiseSignal
JVM_FindSignal
JVM_CallStackWalk
JVM_MoreStackWalk
JVM_SetStackWalkContinuation
JVM_InitStackTraceElementArray
JVM_InitStackTraceElement
JVM_InternString
JVM_CurrentTimeMillis
JVM_NanoTime
JVM_ArrayCopy
JVM_IHashCode
JVM_GetProperties
JVM_StartThread
JVM_SetThreadPriority
JVM_Yield
JVM_SetPrimitiveArrayElement
JVM_Sleep
JVM_CurrentCarrierThread
JVM_CurrentThread
JVM_SetCurrentThread
JVM_Interrupt
JVM_HoldsLock
JVM_GetStackTrace
JVM_GetAllThreads
JVM_SetNativeThreadName
JVM_SetArrayElement
JVM_GetPrimitiveArrayElement
JVM_DumpThreads
JVM_ScopedValueCache
JVM_GetArrayElement
JVM_GetArrayLength
JVM_GetStackAccessControlContext
JVM_SetScopedValueCache
JVM_FindScopedValueBindings
JVM_GetNextThreadIdOffset
JVM_EnsureMaterializedForStackWalk_func
jio_vfprintf
jio_vsnprintf
JVM_VirtualThreadHideFrames
JVM_VirtualThreadUnmount
JVM_VirtualThreadMount
JVM_VirtualThreadEnd
JVM_VirtualThreadStart
JVM_GetTemporaryDirectory
JVM_InitAgentProperties
JVM_LatestUserDefinedLoader
JVM_GetVmArguments
JVM_GetNanoTimeAdjustment
JVM_ConstantPoolGetSize
JVM_GetInheritedAccessControlContext
JVM_FillInStackTrace
JVM_GetProtectionDomain

advapi32

OpenProcessToken
GetTokenInformation
LookupAccountSidW
ConvertSidToStringSidW
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueExW
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
GetUserNameW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetStdHandle
GetFileType
GetConsoleCP
CloseHandle
GetModuleHandleA
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
RaiseException
LoadLibraryA
GetSystemDirectoryA
GetACP
IsValidCodePage
GetNativeSystemInfo
GetVersionExA
GetWindowsDirectoryA
GetSystemDirectoryW
GetSystemInfo
IsProcessorFeaturePresent
GetTempPathW
GetCurrentDirectoryW
PeekConsoleInputA
GetNumberOfConsoleInputEvents
PeekNamedPipe
WriteFile
SetFilePointerEx
SetFileInformationByHandle
ReadFile
GetFileSizeEx
GetDriveTypeW
FlushFileBuffers
GetModuleHandleExW
DeviceIoControl
SetLastError
SetFileTime
SetFileAttributesW
RemoveDirectoryW
GetVolumePathNameW
GetVolumeInformationW
GetLogicalDrives
GetFullPathNameW
GetFileTime
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
SetErrorMode
GetUserGeoID
GetGeoInfoA
GetLocaleInfoA
MultiByteToWideChar
GetDynamicTimeZoneInformation
GetTimeZoneInformation
ResetEvent
GetConsoleWindow
WideCharToMultiByte
FormatMessageW
GetProcessId
CreateProcessW
CreatePipe
SetHandleInformation
GetHandleInformation
CreateFileW
Process32Next
Process32First
CreateToolhelp32Snapshot
QueryFullProcessImageNameW
LocalFree
OpenProcess
GetExitCodeProcess
TerminateProcess
GetCurrentProcessId
GetProcessTimes
WaitForMultipleObjects
GetLastError
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentStrings
SetConsoleMode
GetConsoleMode
GetUserDefaultLCID
GetUserDefaultUILanguage
GetProcAddress

vcruntime140

memcpy
memset
memcmp
memmove
__std_type_info_destroy_list
__C_specific_handler
wcsrchr
wcschr
strrchr

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vswprintf
fgets
__acrt_iob_func
fclose
fopen
__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

strncpy
wcsncat
_strdup
iswctype
strcat
wcsncmp
wcscat
strlen
strcpy
wcslen
wcscpy
wcscmp
_wcsdup
wcscat_s
strcmp
towupper
_wcsupr

api-ms-win-crt-convert-l1-1-0

atoi
_itoa_s
wcstombs

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
_cexit
strerror_s
_errno
_execute_onexit_table
_configure_narrow_argv

api-ms-win-crt-filesystem-l1-1-0

_wrename
_wfullpath

api-ms-win-crt-environment-l1-1-0

_wgetenv
_wgetdcwd
_wgetcwd

Exports

Exports

GetStringPlatformChars
GetStringPlatformCharsStrict
InitializeEncoding
JDK_Canonicalize
JDK_LoadSystemLibrary
JNI_OnLoad
JNU_CallMethodByName
JNU_CallMethodByNameV
JNU_CallStaticMethodByName
JNU_ClassString
JNU_CopyObjectArray
JNU_GetEnv
JNU_GetFieldByName
JNU_GetStaticFieldByName
JNU_GetStringPlatformChars
JNU_GetStringPlatformCharsStrict
JNU_IsInstanceOfByName
JNU_NewObjectByName
JNU_NewStringPlatform
JNU_ReleaseStringPlatformChars
JNU_SetFieldByName
JNU_ThrowArrayIndexOutOfBoundsException
JNU_ThrowByName
JNU_ThrowByNameWithLastError
JNU_ThrowByNameWithMessageAndLastError
JNU_ThrowClassNotFoundException
JNU_ThrowIOException
JNU_ThrowIOExceptionWithLastError
JNU_ThrowIOExceptionWithMessageAndLastError
JNU_ThrowIllegalArgumentException
JNU_ThrowInternalError
JNU_ThrowNullPointerException
JNU_ThrowOutOfMemoryError
JNU_ToString
Java_java_io_Console_encoding
Java_java_io_Console_istty
Java_java_io_FileCleanable_cleanupClose0
Java_java_io_FileDescriptor_close0
Java_java_io_FileDescriptor_getAppend
Java_java_io_FileDescriptor_getHandle
Java_java_io_FileDescriptor_initIDs
Java_java_io_FileDescriptor_sync0
Java_java_io_FileInputStream_available0
Java_java_io_FileInputStream_initIDs
Java_java_io_FileInputStream_length0
Java_java_io_FileInputStream_open0
Java_java_io_FileInputStream_position0
Java_java_io_FileInputStream_read0
Java_java_io_FileInputStream_readBytes
Java_java_io_FileInputStream_skip0
Java_java_io_FileOutputStream_initIDs
Java_java_io_FileOutputStream_open0
Java_java_io_FileOutputStream_write
Java_java_io_FileOutputStream_writeBytes
Java_java_io_ObjectStreamClass_hasStaticInitializer
Java_java_io_ObjectStreamClass_initNative
Java_java_io_RandomAccessFile_getFilePointer
Java_java_io_RandomAccessFile_initIDs
Java_java_io_RandomAccessFile_length0
Java_java_io_RandomAccessFile_open0
Java_java_io_RandomAccessFile_read0
Java_java_io_RandomAccessFile_readBytes0
Java_java_io_RandomAccessFile_seek0
Java_java_io_RandomAccessFile_setLength0
Java_java_io_RandomAccessFile_write0
Java_java_io_RandomAccessFile_writeBytes0
Java_java_io_WinNTFileSystem_canonicalize0
Java_java_io_WinNTFileSystem_canonicalizeWithPrefix0
Java_java_io_WinNTFileSystem_checkAccess0
Java_java_io_WinNTFileSystem_createDirectory0
Java_java_io_WinNTFileSystem_createFileExclusively0
Java_java_io_WinNTFileSystem_delete0
Java_java_io_WinNTFileSystem_getBooleanAttributes0
Java_java_io_WinNTFileSystem_getDriveDirectory
Java_java_io_WinNTFileSystem_getLastModifiedTime0
Java_java_io_WinNTFileSystem_getLength0
Java_java_io_WinNTFileSystem_getNameMax0
Java_java_io_WinNTFileSystem_getSpace0
Java_java_io_WinNTFileSystem_initIDs
Java_java_io_WinNTFileSystem_list0
Java_java_io_WinNTFileSystem_listRoots0
Java_java_io_WinNTFileSystem_rename0
Java_java_io_WinNTFileSystem_setLastModifiedTime0
Java_java_io_WinNTFileSystem_setPermission0
Java_java_io_WinNTFileSystem_setReadOnly0
Java_java_lang_ClassLoader_defineClass0
Java_java_lang_ClassLoader_defineClass1
Java_java_lang_ClassLoader_defineClass2
Java_java_lang_ClassLoader_findBootstrapClass
Java_java_lang_ClassLoader_findLoadedClass0
Java_java_lang_ClassLoader_registerNatives
Java_java_lang_Class_forName0
Java_java_lang_Class_getPrimitiveClass
Java_java_lang_Class_isAssignableFrom
Java_java_lang_Class_isInstance
Java_java_lang_Class_registerNatives
Java_java_lang_Double_doubleToRawLongBits
Java_java_lang_Double_longBitsToDouble
Java_java_lang_Float_floatToRawIntBits
Java_java_lang_Float_intBitsToFloat
Java_java_lang_Module_addExports0
Java_java_lang_Module_addExportsToAll0
Java_java_lang_Module_addExportsToAllUnnamed0
Java_java_lang_Module_addReads0
Java_java_lang_Module_defineModule0
Java_java_lang_NullPointerException_getExtendedNPEMessage
Java_java_lang_Object_getClass
Java_java_lang_ProcessEnvironment_environmentBlock
Java_java_lang_ProcessHandleImpl_00024Info_info0
Java_java_lang_ProcessHandleImpl_00024Info_initIDs
Java_java_lang_ProcessHandleImpl_destroy0
Java_java_lang_ProcessHandleImpl_getCurrentPid0
Java_java_lang_ProcessHandleImpl_getProcessPids0
Java_java_lang_ProcessHandleImpl_initNative
Java_java_lang_ProcessHandleImpl_isAlive0
Java_java_lang_ProcessHandleImpl_parent0
Java_java_lang_ProcessHandleImpl_waitForProcessExit0
Java_java_lang_ProcessImpl_closeHandle
Java_java_lang_ProcessImpl_create
Java_java_lang_ProcessImpl_getExitCodeProcess
Java_java_lang_ProcessImpl_getProcessId0
Java_java_lang_ProcessImpl_getStillActive
Java_java_lang_ProcessImpl_isProcessAlive
Java_java_lang_ProcessImpl_openForAtomicAppend
Java_java_lang_ProcessImpl_terminateProcess
Java_java_lang_ProcessImpl_waitForInterruptibly
Java_java_lang_ProcessImpl_waitForTimeoutInterruptibly
Java_java_lang_Runtime_availableProcessors
Java_java_lang_Runtime_freeMemory
Java_java_lang_Runtime_gc
Java_java_lang_Runtime_maxMemory
Java_java_lang_Runtime_totalMemory
Java_java_lang_SecurityManager_getClassContext
Java_java_lang_Shutdown_beforeHalt
Java_java_lang_Shutdown_halt0
Java_java_lang_StackStreamFactory_00024AbstractStackWalker_callStackWalk
Java_java_lang_StackStreamFactory_00024AbstractStackWalker_fetchStackFrames
Java_java_lang_StackStreamFactory_00024AbstractStackWalker_setContinuation
Java_java_lang_StackStreamFactory_checkStackWalkModes
Java_java_lang_StackTraceElement_initStackTraceElement
Java_java_lang_StackTraceElement_initStackTraceElements
Java_java_lang_StringUTF16_isBigEndian
Java_java_lang_String_intern
Java_java_lang_System_identityHashCode
Java_java_lang_System_mapLibraryName
Java_java_lang_System_registerNatives
Java_java_lang_System_setErr0
Java_java_lang_System_setIn0
Java_java_lang_System_setOut0
Java_java_lang_Thread_clearInterruptEvent
Java_java_lang_Thread_registerNatives
Java_java_lang_Throwable_fillInStackTrace
Java_java_lang_VirtualThread_registerNatives
Java_java_lang_invoke_LambdaProxyClassArchive_addToArchive
Java_java_lang_invoke_LambdaProxyClassArchive_findFromArchive
Java_java_lang_ref_Finalizer_isFinalizationEnabled
Java_java_lang_ref_Finalizer_reportComplete
Java_java_lang_ref_PhantomReference_refersTo0
Java_java_lang_ref_Reference_clear0
Java_java_lang_ref_Reference_getAndClearReferencePendingList
Java_java_lang_ref_Reference_hasReferencePendingList
Java_java_lang_ref_Reference_refersTo0
Java_java_lang_ref_Reference_waitForReferencePendingList
Java_java_lang_reflect_Array_get
Java_java_lang_reflect_Array_getBoolean
Java_java_lang_reflect_Array_getByte
Java_java_lang_reflect_Array_getChar
Java_java_lang_reflect_Array_getDouble
Java_java_lang_reflect_Array_getFloat
Java_java_lang_reflect_Array_getInt
Java_java_lang_reflect_Array_getLength
Java_java_lang_reflect_Array_getLong
Java_java_lang_reflect_Array_getShort
Java_java_lang_reflect_Array_multiNewArray
Java_java_lang_reflect_Array_newArray
Java_java_lang_reflect_Array_set
Java_java_lang_reflect_Array_setBoolean
Java_java_lang_reflect_Array_setByte
Java_java_lang_reflect_Array_setChar
Java_java_lang_reflect_Array_setDouble
Java_java_lang_reflect_Array_setFloat
Java_java_lang_reflect_Array_setInt
Java_java_lang_reflect_Array_setLong
Java_java_lang_reflect_Array_setShort
Java_java_lang_reflect_Executable_getParameters0
Java_java_lang_reflect_Executable_getTypeAnnotationBytes0
Java_java_lang_reflect_Field_getTypeAnnotationBytes0
Java_java_security_AccessController_ensureMaterializedForStackWalk
Java_java_security_AccessController_getInheritedAccessControlContext
Java_java_security_AccessController_getProtectionDomain
Java_java_security_AccessController_getStackAccessControlContext
Java_java_util_TimeZone_getSystemGMTOffsetID
Java_java_util_TimeZone_getSystemTimeZoneID
Java_java_util_concurrent_atomic_AtomicLong_VMSupportsCS8
Java_jdk_internal_io_JdkConsoleImpl_echo
Java_jdk_internal_loader_BootLoader_getSystemPackageLocation
Java_jdk_internal_loader_BootLoader_getSystemPackageNames
Java_jdk_internal_loader_BootLoader_setBootLoaderUnnamedModule0
Java_jdk_internal_loader_NativeLibraries_findBuiltinLib
Java_jdk_internal_loader_NativeLibraries_load
Java_jdk_internal_loader_NativeLibraries_unload
Java_jdk_internal_loader_NativeLibrary_findEntry0
Java_jdk_internal_loader_RawNativeLibraries_load0
Java_jdk_internal_loader_RawNativeLibraries_unload0
Java_jdk_internal_misc_CDS_defineArchivedModules
Java_jdk_internal_misc_CDS_dumpClassList
Java_jdk_internal_misc_CDS_dumpDynamicArchive
Java_jdk_internal_misc_CDS_getRandomSeedForDumping
Java_jdk_internal_misc_CDS_initializeFromArchive
Java_jdk_internal_misc_CDS_isDumpingArchive0
Java_jdk_internal_misc_CDS_isDumpingClassList0
Java_jdk_internal_misc_CDS_isSharingEnabled0
Java_jdk_internal_misc_CDS_logLambdaFormInvoker
Java_jdk_internal_misc_PreviewFeatures_isPreviewEnabled
Java_jdk_internal_misc_Signal_findSignal0
Java_jdk_internal_misc_Signal_handle0
Java_jdk_internal_misc_Signal_raise0
Java_jdk_internal_misc_VM_getRuntimeArguments
Java_jdk_internal_misc_VM_getegid
Java_jdk_internal_misc_VM_geteuid
Java_jdk_internal_misc_VM_getgid
Java_jdk_internal_misc_VM_getuid
Java_jdk_internal_misc_VM_initialize
Java_jdk_internal_misc_VM_latestUserDefinedLoader0
Java_jdk_internal_reflect_ConstantPool_getClassAt0
Java_jdk_internal_reflect_ConstantPool_getClassAtIfLoaded0
Java_jdk_internal_reflect_ConstantPool_getClassRefIndexAt0
Java_jdk_internal_reflect_ConstantPool_getDoubleAt0
Java_jdk_internal_reflect_ConstantPool_getFieldAt0
Java_jdk_internal_reflect_ConstantPool_getFieldAtIfLoaded0
Java_jdk_internal_reflect_ConstantPool_getFloatAt0
Java_jdk_internal_reflect_ConstantPool_getIntAt0
Java_jdk_internal_reflect_ConstantPool_getLongAt0
Java_jdk_internal_reflect_ConstantPool_getMemberRefInfoAt0
Java_jdk_internal_reflect_ConstantPool_getMethodAt0
Java_jdk_internal_reflect_ConstantPool_getMethodAtIfLoaded0
Java_jdk_internal_reflect_ConstantPool_getNameAndTypeRefIndexAt0
Java_jdk_internal_reflect_ConstantPool_getNameAndTypeRefInfoAt0
Java_jdk_internal_reflect_ConstantPool_getSize0
Java_jdk_internal_reflect_ConstantPool_getStringAt0
Java_jdk_internal_reflect_ConstantPool_getTagAt0
Java_jdk_internal_reflect_ConstantPool_getUTF8At0
Java_jdk_internal_reflect_DirectConstructorHandleAccessor_00024NativeAccessor_newInstance0
Java_jdk_internal_reflect_DirectMethodHandleAccessor_00024NativeAccessor_invoke0
Java_jdk_internal_reflect_NativeConstructorAccessorImpl_newInstance0
Java_jdk_internal_reflect_NativeMethodAccessorImpl_invoke0
Java_jdk_internal_reflect_Reflection_areNestMates
Java_jdk_internal_reflect_Reflection_getCallerClass
Java_jdk_internal_reflect_Reflection_getClassAccessFlags
Java_jdk_internal_util_SystemProps_00024Raw_platformProperties
Java_jdk_internal_util_SystemProps_00024Raw_vmProperties
Java_jdk_internal_vm_ContinuationSupport_isSupported0
Java_jdk_internal_vm_Continuation_registerNatives
Java_jdk_internal_vm_ForeignLinkerSupport_isSupported0
Java_jdk_internal_vm_VMSupport_getVMTemporaryDirectory
Java_jdk_internal_vm_VMSupport_initAgentProperties
Java_sun_io_Win32ErrorMode_setErrorMode
Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getAmPmStrings
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarDataValue
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarDisplayStrings
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarID
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCurrencySymbol
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDateTimePattern
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDecimalSeparator
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDefaultLocale
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDisplayString
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getEras
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getGroupingSeparator
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInfinity
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInternationalCurrencySymbol
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMinusSign
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonetaryDecimalSeparator
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonths
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNaN
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNumberPattern
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPerMill
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPercent
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortMonths
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortWeekdays
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getWeekdays
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getZeroDigit
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_initialize
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_isNativeDigit
getEncodingFromLangID
getErrorString
getJavaIDFromLangID
getPrefixed
handleLseek
handleRead
jio_fprintf
jio_snprintf

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b9c6101bc738990deaabcc779ba4b74

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:0e:2f:8f:9e:1b:8b:e5:18:d5:fe:2b:69:cf:cc:b1Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

d9:22:de:d4:87:47:c8:28:30:27:03:7b:13:7c:75:97:d2:9f:a2:d4:36:38:99:ab:83:3a:af:90:22:95:13:e2Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

jvm

advapi32

version

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 57KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 3KB - Virtual size: 5KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 1024B - Virtual size: 804B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:0e:2f:8f:9e:1b:8b:e5:18:d5:fe:2b:69:cf:cc:b1
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

d9:22:de:d4:87:47:c8:28:30:27:03:7b:13:7c:75:97:d2:9f:a2:d4:36:38:99:ab:83:3a:af:90:22:95:13:e2
Signer

.text
Size: 58KB - Virtual size: 57KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 3KB - Virtual size: 5KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 1024B - Virtual size: 804B