C:\jdk7_32P\jdk7\build\windows-i586\tmp\npjp2\obj\npjp2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4aad53efb70de2fb6b9a967f7951af80N.dll
Resource
win7-20240704-en
General
-
Target
4aad53efb70de2fb6b9a967f7951af80N.exe
-
Size
279KB
-
MD5
4aad53efb70de2fb6b9a967f7951af80
-
SHA1
ef0449f5735b02e591e57aff9e682cd682b99825
-
SHA256
dc80557e4258073c12f68bf8e09baab61565d2f5bd0e92711ad24d2f0e2fe934
-
SHA512
19795da54e4d91872d1f20a2bf9d3c062cc8f6e4aede9767ed4e6e7f07210f2a1e97a5f0a46073e8604805e7e5085ff27ca68dfef042db47c57a967874a4c9a9
-
SSDEEP
6144:j1VPOfVUcODMM4ScqyJNjuGZzfTYRtRD+E3ABjqDPQf7rMhQAZiKcV4EUU+uyG5K:j1dZiKcV4E1d6kUc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aad53efb70de2fb6b9a967f7951af80N.exe
Files
-
4aad53efb70de2fb6b9a967f7951af80N.exe.dll windows:5 windows x86 arch:x86
c7e69f6c544e7fbf78947efb1b062e1d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
wsprintfA
GetWindowLongA
BeginPaint
FillRect
EndPaint
SetWindowLongA
CallWindowProcA
TranslateMessage
PeekMessageA
CallNextHookEx
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExA
RemovePropA
SetPropA
GetParent
IsWindow
GetPropA
DispatchMessageA
gdi32
GetDeviceCaps
GetObjectType
CreateEnhMetaFileA
CloseEnhMetaFile
PlayEnhMetaFile
DeleteEnhMetaFile
CreateSolidBrush
DeleteObject
StretchDIBits
msvcr100
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_vsnprintf_s
_except_handler4_common
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_ftime64_s
strftime
_snprintf_s
_localtime64
_mbscmp
strcat_s
_splitpath_s
??_V@YAXPAX@Z
_CxxThrowException
memset
malloc
sprintf_s
free
sprintf
strstr
memcpy
strncpy
__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
strtol
_errno
_stricmp
getenv
_vsnprintf
_snprintf
_stat64i32
_mbsicmp
_mbsrchr
_strdup
strcpy_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
kernel32
OutputDebugStringA
InterlockedDecrement
GetSystemTimeAsFileTime
GetCurrentProcessId
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetShortPathNameA
LocalFree
RaiseException
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
TerminateProcess
FormatMessageA
lstrlenA
LocalAlloc
GetSystemDirectoryA
GetVersionExA
GetModuleHandleA
WideCharToMultiByte
GetTempPathA
GetTempFileNameA
CreateFileA
WriteFile
CloseHandle
CreateProcessA
MultiByteToWideChar
GetCurrentThreadId
GetTickCount
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
FreeLibrary
GetLastError
AllocConsole
GetStdHandle
GetModuleFileNameA
WriteConsoleA
LoadLibraryA
GetLongPathNameA
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
ole32
CoTaskMemFree
StringFromCLSID
oleaut32
SysFreeString
SysAllocString
VariantClear
Exports
Exports
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
_Java_sun_plugin2_main_server_MozillaPlugin_allocateNPObject@20
_Java_sun_plugin2_main_server_MozillaPlugin_allocateVariantArray@12
_Java_sun_plugin2_main_server_MozillaPlugin_freeVariantArray@20
_Java_sun_plugin2_main_server_MozillaPlugin_getAuthentication0@36
_Java_sun_plugin2_main_server_MozillaPlugin_getCookie0@20
_Java_sun_plugin2_main_server_MozillaPlugin_getProxy0@20
_Java_sun_plugin2_main_server_MozillaPlugin_hookupApplet@24
_Java_sun_plugin2_main_server_MozillaPlugin_initServiceManager@8
_Java_sun_plugin2_main_server_MozillaPlugin_invokeLater0@20
_Java_sun_plugin2_main_server_MozillaPlugin_javaScriptGetWindow0@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnEvaluate@36
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetIntIdentifier@12
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetProperty@40
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetStringIdentifier@12
_Java_sun_plugin2_main_server_MozillaPlugin_npnHasMethod@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnHasProperty@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnIdentifierIsString@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnIntFromIdentifier@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnInvoke@52
_Java_sun_plugin2_main_server_MozillaPlugin_npnReleaseObject@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnRemoveProperty@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnRetainObject@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnSetException@20
_Java_sun_plugin2_main_server_MozillaPlugin_npnSetProperty@40
_Java_sun_plugin2_main_server_MozillaPlugin_npnUTF8FromIdentifier@16
_Java_sun_plugin2_main_server_MozillaPlugin_setAppletStatus@20
_Java_sun_plugin2_main_server_MozillaPlugin_setCookie0@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIB@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIC@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JID@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIF@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JII@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIJ@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JILjava_lang_String_2@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIS@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIZ@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElementToScriptingObject0@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElementToVoid0@20
_Java_sun_plugin2_main_server_MozillaPlugin_showDocument0@24
_Java_sun_plugin2_main_server_MozillaPlugin_showStatus0@20
_Java_sun_plugin2_main_server_MozillaPlugin_variantArrayElementToObject0@28
_Java_sun_plugin2_main_server_ServerPrintHelper_isPrinterDC0@16
_Java_sun_plugin2_main_server_ServerPrintHelper_printBand0@56
_Java_sun_plugin2_main_server_WindowsHelper_installModalFilterHook@20
_Java_sun_plugin2_main_server_WindowsHelper_installMouseHook@20
_Java_sun_plugin2_main_server_WindowsHelper_runMessagePump0@28
_Java_sun_plugin2_main_server_WindowsHelper_uninstallHook@24
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ