c:\jenkins\workspace\8-2-build-windows-i586-cygwin-sans-NAS\jdk8u421\1068\build\windows-i586\deploy\tmp\npjp2\obj\npjp2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9dc676d9f7907a97aa5bd54e3d3277e0ae30b3bc14ad267ec97923bcac3247fb.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9dc676d9f7907a97aa5bd54e3d3277e0ae30b3bc14ad267ec97923bcac3247fb.dll
Resource
win10v2004-20240802-en
General
-
Target
9dc676d9f7907a97aa5bd54e3d3277e0ae30b3bc14ad267ec97923bcac3247fb
-
Size
464KB
-
MD5
c0684501791329bd2fc2065e80d908a6
-
SHA1
0f4c404d79251980b0fd9d0932e4495d10f10cc9
-
SHA256
9dc676d9f7907a97aa5bd54e3d3277e0ae30b3bc14ad267ec97923bcac3247fb
-
SHA512
e1783f08cddfb7c2fcafab25220149d1065152a59396c360f3eec2eb3ec7ac788881d253386221ebf749bb3239a8061746c3b805d439eac08e7fef6f3faf13a4
-
SSDEEP
6144:z1JPKVy/UcODMM4cBqg8UyJNjuGZzfYtRD+E3ABjqDPQf7rhb3XdgjVTDTNnGmyD:z1JPKVrpnGp3pc7F2iS/n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9dc676d9f7907a97aa5bd54e3d3277e0ae30b3bc14ad267ec97923bcac3247fb
Files
-
9dc676d9f7907a97aa5bd54e3d3277e0ae30b3bc14ad267ec97923bcac3247fb.dll windows:6 windows x86 arch:x86
742760263b1230499b06df99acb1eb61
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
CallWindowProcA
BeginPaint
EndPaint
SetPropA
MsgWaitForMultipleObjects
GetWindowThreadProcessId
GetShellWindow
CloseDesktop
OpenInputDesktop
wsprintfA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetParent
IsWindow
PeekMessageA
GetPropA
RemovePropA
FillRect
SetWindowLongA
TranslateMessage
DispatchMessageA
gdi32
StretchDIBits
GetObjectType
GetDeviceCaps
PlayEnhMetaFile
DeleteEnhMetaFile
CreateEnhMetaFileA
CloseEnhMetaFile
DeleteObject
CreateSolidBrush
kernel32
WideCharToMultiByte
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
GetSystemInfo
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleA
AllocConsole
GetTempFileNameA
GetStdHandle
VirtualProtect
VirtualQuery
LoadLibraryExA
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RaiseException
IsProcessorFeaturePresent
GetSystemWindowsDirectoryA
GetCurrentProcessId
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetLongPathNameA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
CloseHandle
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
MultiByteToWideChar
GetCurrentThreadId
GetTickCount
GetModuleFileNameA
VerSetConditionMask
GetEnvironmentVariableA
CreateFileA
GetTempPathA
GetCurrentProcess
CreateProcessA
OpenProcess
GlobalMemoryStatusEx
GetLocalTime
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
GetNativeSystemInfo
GlobalAlloc
GlobalFree
LocalAlloc
LocalFree
GetShortPathNameA
FormatMessageA
lstrlenA
VerifyVersionInfoA
WTSGetActiveConsoleSessionId
WaitForMultipleObjects
GetFileAttributesA
OutputDebugStringA
GetExitCodeProcess
GetModuleHandleExA
ole32
CoTaskMemFree
StringFromCLSID
oleaut32
SysAllocString
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantClear
msvcp140
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Xlength_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??7ios_base@std@@QBE_NXZ
vcruntime140
__RTDynamicCast
memchr
memmove
_purecall
strstr
_except_handler4_common
__std_type_info_destroy_list
__std_exception_destroy
__std_exception_copy
memcmp
__CxxFrameHandler3
_CxxThrowException
__std_terminate
memset
memcpy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vfprintf_s
fsetpos
setvbuf
fwrite
_fseeki64
fread
fputc
fgetpos
fgetc
_get_stream_buffer_pointers
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fflush
fclose
fopen_s
ungetc
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
malloc
free
api-ms-win-crt-environment-l1-1-0
_dupenv_s
_putenv
getenv
api-ms-win-crt-string-l1-1-0
strcat_s
_strdup
strcpy_s
strncpy
_stricmp
api-ms-win-crt-runtime-l1-1-0
_initterm
_initialize_narrow_environment
_execute_onexit_table
_beginthreadex
_initterm_e
_invalid_parameter_noinfo
_crt_atexit
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_cexit
_errno
_register_onexit_function
api-ms-win-crt-multibyte-l1-1-0
_mbsnbcpy_s
_mbsicmp
_mbsnbcmp
_mbscmp
_mbsstr
_mbslwr_s
_mbsnbicmp
_mbsrchr
api-ms-win-crt-convert-l1-1-0
strtol
wcstombs_s
atoi
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
_stat64i32
_wstat64i32
_splitpath_s
api-ms-win-crt-time-l1-1-0
_time64
_localtime64
strftime
_ftime64_s
_mktime64
Exports
Exports
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
_Java_sun_plugin2_main_server_MozillaPlugin_allocateNPObject@20
_Java_sun_plugin2_main_server_MozillaPlugin_allocateVariantArray@12
_Java_sun_plugin2_main_server_MozillaPlugin_freeVariantArray@20
_Java_sun_plugin2_main_server_MozillaPlugin_getAuthentication0@36
_Java_sun_plugin2_main_server_MozillaPlugin_getCookie0@20
_Java_sun_plugin2_main_server_MozillaPlugin_getProxy0@20
_Java_sun_plugin2_main_server_MozillaPlugin_hookupApplet@24
_Java_sun_plugin2_main_server_MozillaPlugin_invokeLater0@20
_Java_sun_plugin2_main_server_MozillaPlugin_isBrowserThread0@16
_Java_sun_plugin2_main_server_MozillaPlugin_javaScriptGetWindow0@16
_Java_sun_plugin2_main_server_MozillaPlugin_nativeReleaseObject@16
_Java_sun_plugin2_main_server_MozillaPlugin_nativeRetainObject@16
_Java_sun_plugin2_main_server_MozillaPlugin_nativeUpdateWindowLocation@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnEvaluate@36
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetIntIdentifier@12
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetProperty@40
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetStringIdentifier@12
_Java_sun_plugin2_main_server_MozillaPlugin_npnHasMethod@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnHasProperty@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnIdentifierIsString@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnIntFromIdentifier@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnInvoke@52
_Java_sun_plugin2_main_server_MozillaPlugin_npnRemoveProperty@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnSetException@20
_Java_sun_plugin2_main_server_MozillaPlugin_npnSetProperty@40
_Java_sun_plugin2_main_server_MozillaPlugin_npnUTF8FromIdentifier@16
_Java_sun_plugin2_main_server_MozillaPlugin_setAppletStatus@20
_Java_sun_plugin2_main_server_MozillaPlugin_setCookie0@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIB@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIC@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JID@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIF@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JII@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIJ@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JILjava_lang_String_2@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIS@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIZ@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElementToScriptingObject0@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElementToVoid0@20
_Java_sun_plugin2_main_server_MozillaPlugin_showStatus0@20
_Java_sun_plugin2_main_server_MozillaPlugin_variantArrayElementToObject0@28
_Java_sun_plugin2_main_server_ServerPrintHelper_isPrinterDC0@16
_Java_sun_plugin2_main_server_ServerPrintHelper_printBand0@56
_Java_sun_plugin2_main_server_WindowsHelper_installModalFilterHook@20
_Java_sun_plugin2_main_server_WindowsHelper_installMouseHook@20
_Java_sun_plugin2_main_server_WindowsHelper_isOutOfProcessPlugin@8
_Java_sun_plugin2_main_server_WindowsHelper_runMessagePump0@28
_Java_sun_plugin2_main_server_WindowsHelper_uninstallHook@24
_Java_sun_plugin2_util_PluginTrace_broadcast@12
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ