c:\ade\jenkins\workspace\8-2-build-windows-i586-cygwin\jdk8u241\331\build\windows-i586\deploy\tmp\npjp2\obj\npjp2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8d09a00a4aa21eea5964c3d2d83582a3e88f2538e5d68b7e911cf287a8e7138d.dll
Resource
win7-20240220-en
General
-
Target
8d09a00a4aa21eea5964c3d2d83582a3e88f2538e5d68b7e911cf287a8e7138d
-
Size
394KB
-
MD5
748c5bdc499554a76f6a7590cb33c1b6
-
SHA1
881b3fa3b61b621876a467a65ac964f1c4bc9541
-
SHA256
8d09a00a4aa21eea5964c3d2d83582a3e88f2538e5d68b7e911cf287a8e7138d
-
SHA512
74ab973467513bf9ce94d22f9e4fd24207d59fb6339f3615e9befb57d8d266be8bb7f9ef7781e5540cd44941595d465026f80c19e1dbc4f2d22fc1f8d693c5ef
-
SSDEEP
6144:axcT+mk5Oa8JmOfiUcODMM4cBqg8UyJNjuGZzfYtRD+E3ABjqDPQf7rhsCylim9p:auTk5H1cBXGFc5h7GRxU8L1ha3VlyY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d09a00a4aa21eea5964c3d2d83582a3e88f2538e5d68b7e911cf287a8e7138d
Files
-
8d09a00a4aa21eea5964c3d2d83582a3e88f2538e5d68b7e911cf287a8e7138d.dll windows:5 windows x86 arch:x86
65586c6dc59302e7b0fa694be5e611e0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
IsWindow
SetWindowLongA
RemovePropA
MsgWaitForMultipleObjects
GetShellWindow
GetWindowThreadProcessId
OpenInputDesktop
CloseDesktop
wsprintfA
UnhookWindowsHookEx
SetWindowsHookExA
GetParent
CallWindowProcA
CallNextHookEx
PeekMessageA
TranslateMessage
DispatchMessageA
SetPropA
GetPropA
BeginPaint
FillRect
EndPaint
gdi32
GetDeviceCaps
GetObjectType
CreateEnhMetaFileA
CloseEnhMetaFile
PlayEnhMetaFile
DeleteEnhMetaFile
CreateSolidBrush
DeleteObject
StretchDIBits
msvcr100
_unlock_file
setvbuf
memcpy_s
fwrite
fgetpos
_fseeki64
fsetpos
_beginthreadex
_mbsnbicmp
calloc
_purecall
strstr
_stricmp
_errno
strtol
_lock_file
_mbsstr
_mbslwr_s
sprintf_s
atoi
_splitpath_s
_wstat64i32
fprintf_s
_putenv
_localtime64
strftime
_ftime64_s
_mbsnbcmp
localeconv
strcspn
memmove_s
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
ungetc
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
fputc
fgetc
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
__iob_func
fprintf
memchr
__RTDynamicCast
??_U@YAPAXI@Z
sscanf
_time64
_mktime64
_mbscmp
_mbsnbcpy_s
printf
_dupenv_s
wcstombs_s
_vsnprintf_s
strcpy_s
_stat64i32
_mbsrchr
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_strdup
__CxxFrameHandler3
??2@YAPAXI@Z
_mbsicmp
memmove
memcpy
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strcat_s
??_V@YAXPAX@Z
??3@YAXPAX@Z
vfprintf
fflush
fclose
memset
getenv
free
malloc
_snprintf_s
fopen_s
_calloc_crt
setlocale
strerror
islower
_fsopen
fseek
__uncaught_exception
abort
_free_locale
___lc_handle_func
___lc_codepage_func
isupper
__crtLCMapStringA
strncpy
_onexit
__pctype_func
kernel32
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetTempFileNameA
AllocConsole
InterlockedCompareExchange
WriteConsoleA
OutputDebugStringA
GetExitCodeProcess
GetModuleHandleExA
GetSystemWindowsDirectoryA
GetFileAttributesA
WideCharToMultiByte
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
QueryPerformanceCounter
WaitForMultipleObjects
OpenProcess
GetLocalTime
GetTempPathA
InterlockedDecrement
GetShortPathNameA
WTSGetActiveConsoleSessionId
FormatMessageA
LocalAlloc
GetWindowsDirectoryA
GetEnvironmentVariableA
lstrlenA
CreateProcessA
GetSystemDirectoryA
CreateFileA
GlobalAlloc
LocalFree
GlobalFree
GetNativeSystemInfo
GetCurrentProcess
VerSetConditionMask
VerifyVersionInfoA
GetVersionExA
GlobalMemoryStatusEx
InterlockedIncrement
GetModuleFileNameA
GetCurrentThreadId
GetTickCount
MultiByteToWideChar
CreateEventA
WaitForSingleObject
ResetEvent
CloseHandle
SetEvent
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetLastError
GetLongPathNameA
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
ole32
StringFromCLSID
CoTaskMemFree
oleaut32
VariantClear
SysFreeString
SysAllocString
SysStringLen
SysAllocStringByteLen
Exports
Exports
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
_Java_sun_plugin2_main_server_MozillaPlugin_allocateNPObject@20
_Java_sun_plugin2_main_server_MozillaPlugin_allocateVariantArray@12
_Java_sun_plugin2_main_server_MozillaPlugin_freeVariantArray@20
_Java_sun_plugin2_main_server_MozillaPlugin_getAuthentication0@36
_Java_sun_plugin2_main_server_MozillaPlugin_getCookie0@20
_Java_sun_plugin2_main_server_MozillaPlugin_getProxy0@20
_Java_sun_plugin2_main_server_MozillaPlugin_hookupApplet@24
_Java_sun_plugin2_main_server_MozillaPlugin_invokeLater0@20
_Java_sun_plugin2_main_server_MozillaPlugin_isBrowserThread0@16
_Java_sun_plugin2_main_server_MozillaPlugin_javaScriptGetWindow0@16
_Java_sun_plugin2_main_server_MozillaPlugin_nativeReleaseObject@16
_Java_sun_plugin2_main_server_MozillaPlugin_nativeRetainObject@16
_Java_sun_plugin2_main_server_MozillaPlugin_nativeUpdateWindowLocation@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnEvaluate@36
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetIntIdentifier@12
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetProperty@40
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetStringIdentifier@12
_Java_sun_plugin2_main_server_MozillaPlugin_npnHasMethod@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnHasProperty@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnIdentifierIsString@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnIntFromIdentifier@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnInvoke@52
_Java_sun_plugin2_main_server_MozillaPlugin_npnRemoveProperty@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnSetException@20
_Java_sun_plugin2_main_server_MozillaPlugin_npnSetProperty@40
_Java_sun_plugin2_main_server_MozillaPlugin_npnUTF8FromIdentifier@16
_Java_sun_plugin2_main_server_MozillaPlugin_setAppletStatus@20
_Java_sun_plugin2_main_server_MozillaPlugin_setCookie0@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIB@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIC@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JID@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIF@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JII@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIJ@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JILjava_lang_String_2@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIS@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIZ@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElementToScriptingObject0@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElementToVoid0@20
_Java_sun_plugin2_main_server_MozillaPlugin_showStatus0@20
_Java_sun_plugin2_main_server_MozillaPlugin_variantArrayElementToObject0@28
_Java_sun_plugin2_main_server_ServerPrintHelper_isPrinterDC0@16
_Java_sun_plugin2_main_server_ServerPrintHelper_printBand0@56
_Java_sun_plugin2_main_server_WindowsHelper_installModalFilterHook@20
_Java_sun_plugin2_main_server_WindowsHelper_installMouseHook@20
_Java_sun_plugin2_main_server_WindowsHelper_isOutOfProcessPlugin@8
_Java_sun_plugin2_main_server_WindowsHelper_runMessagePump0@28
_Java_sun_plugin2_main_server_WindowsHelper_uninstallHook@24
_Java_sun_plugin2_util_PluginTrace_broadcast@12
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 233KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ