Errors

Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-fil>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>

General

  • Target

    client_pwd.2024.rar

  • Size

    12.8MB

  • MD5

    1039a94dfe8b97c23f639dab8b077f2f

  • SHA1

    32b0db25be4ff95bb2ee6a11fa58a64708ebd0e0

  • SHA256

    7d54a7d773ea6f8964bfbd01a01a4d6e1a24a5d221edff7e8457028c02437a63

  • SHA512

    08afbbc11782478a12515c9e04fbefc6ef4606a64a3605b4ceb3970dc9c6f959dbf737f2736639553d9562eb3bbc25eb7d3954fb20b07b11073f481706a38bed

  • SSDEEP

    196608:7a/3w7WYMoBYRlr64Eg1g2EDGs/DZOL6lMNjLAbl8MfsWC3+/9nr7LzVbDj:7i3ttr64GfbbtCACAC3+Fnr7LzVT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • client_pwd.2024.rar
    .rar

    Password: 2024

  • Data/DUState.dat
  • Data/FUdds.dat
  • Data/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2024

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Data/OPer.dat
  • Data/StateHistory/DUState 23-10-19 15-35-57.dat
  • Data/StateHistory/DUState 23-10-20 11-20-37.dat
  • Data/StateHistory/DUState 23-10-20 11-34-27.dat
  • Data/debug.txt
  • Data/tRe.dat
  • Sys/BugReport — копия (2).log
  • Sys/BugReport — копия (2).status
  • Sys/BugReport — копия.log
  • Sys/BugReport — копия.status
  • Sys/BugReport.log
  • Sys/BugReport.status
  • Sys/DriverUpdEng — копия (2).log
  • Sys/DriverUpdEng — копия.log
  • Sys/DriverUpdEng.log
  • Sys/DriverUpdaterLib — копия (2).log
  • Sys/DriverUpdaterLib — копия.log
  • Sys/DriverUpdaterLib.log
  • Sys/event_manager — копия (2).log
  • Sys/event_manager — копия.log
  • Sys/event_manager.log
  • Sys/pd — копия (2).log
  • Sys/pd — копия.log
  • Sys/pd.log
  • client.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2024

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • jre/COPYRIGHT
  • jre/LICENSE
  • jre/README.txt
  • jre/THIRDPARTYLICENSEREADME-JAVAFX.txt
  • jre/THIRDPARTYLICENSEREADME.txt
  • jre/Welcome.html
    .html
  • jre/bin/JAWTAccessBridge-32.dll
    .dll windows:5 windows x86 arch:x86

    Password: 2024

    cc600014039f50aac13b9344c5ec0bc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/JAWTAccessBridge.dll
    .dll windows:5 windows x86 arch:x86

    Password: 2024

    cc600014039f50aac13b9344c5ec0bc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/JavaAccessBridge-32.dll
    .dll windows:5 windows x86 arch:x86

    Password: 2024

    e29944e71ead1ccb0c0a4255cba87233


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/JavaAccessBridge.dll
    .dll windows:5 windows x86 arch:x86

    Password: 2024

    e29944e71ead1ccb0c0a4255cba87233


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/bci.dll
    .dll windows:5 windows x86 arch:x86

    Password: 2024

    d58616d0d1598a8c8edc018de5766553


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/client/Xusage.txt
  • jre/bin/client/jvm.dll
    .dll windows:5 windows x86 arch:x86

    Password: 2024

    114ef3e1b45d13b5810e918781a776cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dcpr.dll
    .dll windows:5 windows x86 arch:x86

    3f4c0ab4d244ccb8bda37cbf2367a663


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/decora_sse.dll
    .dll windows:6 windows x86 arch:x86

    69baa4452861c3d7d819494b4cc2de7a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/deploy.dll
    .dll windows:5 windows x86 arch:x86

    3b3b251693dc00e8bd16f9d22c4941b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dt_shmem.dll
    .dll windows:5 windows x86 arch:x86

    973a341750a3e38e95b6dcd81a670784


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dt_socket.dll
    .dll windows:5 windows x86 arch:x86

    8febe166840ba9db32f4be9252394847


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dtplugin/deployJava1.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    45c657a8f2d508a899e09b8ad3cc89ed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/dtplugin/npdeployJava1.dll
    .dll windows:5 windows x86 arch:x86

    b8eac445ed3e36cf2487431b7fe6d58f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/eula.dll
    .dll windows:5 windows x86 arch:x86

    15634df6fd2a5d773e54f2347cd32373


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/fontmanager.dll
    .dll windows:5 windows x86 arch:x86

    51bbf91dd37250917fec58c25617a717


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/fxplugins.dll
    .dll windows:6 windows x86 arch:x86

    392a99ffa08105fe7dcbe1f3fb9add4a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/glass.dll
    .dll windows:6 windows x86 arch:x86

    3effe2590767d904f00dbf033dc5caa7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/glib-lite.dll
    .dll windows:6 windows x86 arch:x86

    7701b6049ce8d395567987c9cef5bdba


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/gstreamer-lite.dll
    .dll windows:6 windows x86 arch:x86

    ce39e1ee980a73afd95d87dd7a668e5c


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/hprof.dll
    .dll windows:5 windows x86 arch:x86

    13358746ca96f6abfeef55d5169d1a86


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/instrument.dll
    .dll windows:5 windows x86 arch:x86

    5358993e890ef250d6937e7311acbbb5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/j2pcsc.dll
    .dll windows:5 windows x86 arch:x86

    63e189e6ac3fe0e3a90b6d97282a498a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/j2pkcs11.dll
    .dll windows:5 windows x86 arch:x86

    13312f067fe890fc2438ee0b627107eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jaas_nt.dll
    .dll windows:5 windows x86 arch:x86

    f413fd6a79b734fd423e8dd71326186a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jabswitch.exe
    .exe windows:5 windows x86 arch:x86

    91f3d614f9b67c32a32d29abb665ae77


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/java-rmi.exe
    .exe windows:5 windows x86 arch:x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/java.dll
    .dll windows:5 windows x86 arch:x86

    9341cbcc9ecda7dd84a0cf238a03286f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/java.exe
    .exe windows:5 windows x86 arch:x86

    14d122df97069aa81335cb1b91d39b72


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/java_crw_demo.dll
    .dll windows:5 windows x86 arch:x86

    5069e51d16f355e9e76e8203cb1df2d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/javacpl.cpl
    .dll windows:5 windows x86 arch:x86

    b0bcbba2fed0933b454d74181e10f32f


    Headers

    Imports

    Exports

    Sections

  • jre/bin/javacpl.exe
    .exe windows:5 windows x86 arch:x86

    a1452e423a8330360c3d9d3d16dcd211


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/javafx_font.dll
    .dll windows:6 windows x86 arch:x86

    f888ba36a8c7ddcbb24a897b019b6c0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/javafx_font_t2k.dll
    .dll windows:6 windows x86 arch:x86

    0eadf6dbfc3e427d67bf5846e4ca43dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/javafx_iio.dll
    .dll windows:6 windows x86 arch:x86

    007f491a085f1a15ba288d64227ab107


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/javaw.exe
    .exe windows:5 windows x86 arch:x86

    e8430c833f339cd7cf45c7f2a8132cef


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/javaws.exe
    .exe windows:5 windows x86 arch:x86

    eaba1b7bb154ef1f08d95893ddbfbdcf


    Code Sign

    Headers

    Imports

    Sections

  • jre/bin/jawt.dll
    .dll windows:5 windows x86 arch:x86

    a367813d79ce542a17d48a6d5815ae0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jdwp.dll
    .dll windows:5 windows x86 arch:x86

    ed947c6caf6fc328d4ab0f7c39763288


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jfr.dll
    .dll windows:5 windows x86 arch:x86

    039a12fcdf9fcc99f7496b8420598d85


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/jfxmedia.dll
    .dll windows:6 windows x86 arch:x86

    39fdac3f69922d84960ebc9d5c70f342


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/plugin2/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/bin/plugin2/npjp2.dll
    .dll windows:5 windows x86 arch:x86

    0f43a83b2702760f998ea822fd04aa87


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jre/lib/accessibility.properties
  • jre/lib/calendars.properties
  • jre/lib/classlist
  • jre/lib/content-types.properties
  • jre/lib/currency.data
  • jre/lib/deploy/ffjcext.zip
    .zip .js polyglot
  • jre/lib/deploy/messages.properties
    .jnlp
  • jre/lib/deploy/messages_de.properties
    .jnlp
  • jre/lib/deploy/messages_es.properties
  • jre/lib/deploy/messages_fr.properties
    .jnlp
  • jre/lib/deploy/messages_it.properties
  • jre/lib/deploy/messages_ja.properties
    .jnlp
  • jre/lib/deploy/messages_ko.properties
    .jnlp
  • jre/lib/deploy/messages_pt_BR.properties
    .jnlp
  • jre/lib/deploy/messages_sv.properties
    .jnlp
  • jre/lib/deploy/messages_zh_CN.properties
    .jnlp
  • jre/lib/deploy/messages_zh_HK.properties
    .jnlp
  • jre/lib/deploy/messages_zh_TW.properties
    .jnlp
  • jre/lib/deploy/splash.gif
    .gif
  • jre/lib/deploy/[email protected]
    .gif
  • jre/lib/deploy/splash_11-lic.gif
    .gif
  • jre/lib/deploy/[email protected]
    .gif
  • jre/lib/flavormap.properties
  • jre/lib/fontconfig.bfc
  • jre/lib/fontconfig.properties.src
  • jre/lib/fonts/LucidaBrightDemiBold.ttf
  • jre/lib/fonts/LucidaBrightDemiItalic.ttf
  • jre/lib/fonts/LucidaBrightItalic.ttf
  • jre/lib/fonts/LucidaBrightRegular.ttf
  • jre/lib/fonts/LucidaSansDemiBold.ttf
  • jre/lib/fonts/LucidaSansRegular.ttf
  • jre/lib/fonts/LucidaTypewriterBold.ttf
  • jre/lib/fonts/LucidaTypewriterRegular.ttf
  • jre/lib/hijrah-config-umalqura.properties
  • jre/lib/i386/jvm.cfg
  • jre/lib/images/cursors/cursors.properties
  • jre/lib/images/cursors/invalid32x32.gif
    .gif
  • jre/lib/images/cursors/win32_CopyDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_CopyNoDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_LinkDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_LinkNoDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_MoveDrop32x32.gif
    .gif
  • jre/lib/images/cursors/win32_MoveNoDrop32x32.gif
    .gif
  • jre/lib/javafx.properties
  • jre/lib/javaws.jar
    .jar
  • jre/lib/jce.jar
    .jar
  • jre/lib/jfr.jar
    .jar
  • jre/lib/jfr/default.jfc
    .xml
  • jre/lib/jfr/profile.jfc
    .xml
  • jre/lib/jfxswt.jar
    .jar
  • jre/lib/jvm.hprof.txt
  • jre/lib/logging.properties
  • jre/lib/management-agent.jar
    .jar
  • jre/lib/management/jmxremote.access
  • jre/lib/management/jmxremote.password.template
  • jre/lib/management/management.properties
  • jre/lib/management/snmp.acl.template
  • jre/lib/meta-index
  • jre/lib/net.properties
  • jre/lib/psfont.properties.ja
  • jre/lib/psfontj2d.properties
  • jre/lib/security/US_export_policy.jar
    .jar
  • jre/lib/security/blacklist
  • jre/lib/security/blacklisted.certs
  • jre/lib/security/cacerts
  • jre/lib/security/java.policy
  • jre/lib/security/java.security
  • jre/lib/security/javaws.policy
  • jre/lib/security/local_policy.jar
    .jar
  • jre/lib/sound.properties
  • jre/lib/tzdb.dat
  • jre/lib/tzmappings
  • jre/release
  • lib/HikariCP-java6.jar
    .jar
  • lib/activation.jar
    .jar
  • lib/antlr4-runtime.jar
    .jar
  • lib/asm-all.jar
    .jar
  • lib/commons-email.jar
    .jar
  • lib/connector-api.jar
    .jar
  • lib/dn-php-sdk.jar
    .jar
  • lib/dyn4j.jar
    .jar
  • lib/gson.jar
    .jar
  • lib/javassist-GA.jar
    .jar
  • lib/jkeymaster.jar
    .jar
  • lib/jphp-app-framework.jar
    .jar
  • lib/jphp-core.jar
    .jar
  • lib/jphp-desktop-ext.jar
    .jar
  • lib/jphp-desktop-hotkey-ext.jar
    .jar
  • lib/jphp-game-ext.jar
    .jar
  • lib/jphp-gui-ext.jar
    .jar
  • lib/jphp-gui-jfoenix-ext.jar
    .jar
  • lib/jphp-json-ext.jar
    .jar
  • lib/jphp-jsoup-ext.jar
    .jar
  • lib/jphp-mail-ext.jar
    .jar
  • lib/jphp-sql-ext.jar
    .jar
  • lib/jphp-systemtray-ext.jar
    .jar
  • lib/jphp-xml-ext.jar
    .jar
  • lib/jphp-zend-ext.jar
    .jar
  • lib/jphp-zip-ext.jar
    .jar
  • lib/jsoup.jar
    .jar
  • lib/mail.jar
    .jar
  • lib/mysql-connector-java.jar
    .jar
  • lib/postgresql.jre7.jar
    .jar
  • lib/slf4j-api.jar
    .jar
  • lib/slf4j-simple.jar
    .jar
  • lib/zt-zip.jar
    .jar