d6df57b717fa203dd5252879e37fe0a0c8ecfe0fa1ceb7013f1e8ebe7ab4a0e7N

Sharing

Copy URL

Twitter E-mail

General

Target

d6df57b717fa203dd5252879e37fe0a0c8ecfe0fa1ceb7013f1e8ebe7ab4a0e7N
Size

27KB
MD5

2c22e8f5c26488b5cfcb05db2da8c760
SHA1

6c58af92bf13a88aea9bb1cffdb61e9ea79aa844
SHA256

d6df57b717fa203dd5252879e37fe0a0c8ecfe0fa1ceb7013f1e8ebe7ab4a0e7
SHA512

7f8e1351f14ad51c35624a94efac9cbd45c8278fd461c0512f80a4e489c97b245c8c562a63607e4f1bce1fd4ebd9d3d7fd573f66c6088276b54026d3f5282474
SSDEEP

384:OOssTd/qqkggOlnD3u+zgpcMIL7ifZSf+VIYi+v+0otAM+o/8E9VF0NymqRk:xs8tqqHj8k2+/Yi+3oAMxkERk

Score

1^/10

Malware Config

Signatures

Files

d6df57b717fa203dd5252879e37fe0a0c8ecfe0fa1ceb7013f1e8ebe7ab4a0e7N
.dll windows:6 windows x64 arch:x64

cca597b8c4135d09b1f86433902a28e3

Code Sign

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-01-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:a8:d8:a9:9e:38:ad:45:af:2c:ad:f3:4f:f5:66:9e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-10-2023 00:00

Not After

15-10-2024 23:59

Subject

SERIALNUMBER=3482342,CN=Amazon.com Services LLC,OU=Amazon Corretto,O=Amazon.com Services LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c8:f3:4e:28:f4:51:25:e4:32:fa:00:8e:61:d4:7a:4a:7d:7e:17:b2:bb:e7:3b:af:9e:7a:cc:33:8e:e5:12:9c
Signer

Actual PE Digest

c8:f3:4e:28:f4:51:25:e4:32:fa:00:8e:61:d4:7a:4a:7d:7e:17:b2:bb:e7:3b:af:9e:7a:cc:33:8e:e5:12:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\wsjdk\Corretto8Src\installers\windows\zip\corretto-build\buildRoot\build\windows-x86_64-normal-server-release\jdk\objs\libj2pcsc\j2pcsc.pdb

Imports

winscard

SCardBeginTransaction
SCardDisconnect
SCardEndTransaction
SCardGetStatusChangeA
SCardEstablishContext
SCardListReadersA
SCardStatusA
SCardTransmit
SCardControl
SCardConnectA

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memset

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc

api-ms-win-crt-string-l1-1-0

strlen
_strdup

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

Exports

Exports

JNI_OnLoad
Java_sun_security_smartcardio_PCSC_SCardBeginTransaction
Java_sun_security_smartcardio_PCSC_SCardConnect
Java_sun_security_smartcardio_PCSC_SCardControl
Java_sun_security_smartcardio_PCSC_SCardDisconnect
Java_sun_security_smartcardio_PCSC_SCardEndTransaction
Java_sun_security_smartcardio_PCSC_SCardEstablishContext
Java_sun_security_smartcardio_PCSC_SCardGetStatusChange
Java_sun_security_smartcardio_PCSC_SCardListReaders
Java_sun_security_smartcardio_PCSC_SCardStatus
Java_sun_security_smartcardio_PCSC_SCardTransmit

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cca597b8c4135d09b1f86433902a28e3

Code Sign

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0d:a8:d8:a9:9e:38:ad:45:af:2c:ad:f3:4f:f5:66:9eCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

c8:f3:4e:28:f4:51:25:e4:32:fa:00:8e:61:d4:7a:4a:7d:7e:17:b2:bb:e7:3b:af:9e:7a:cc:33:8e:e5:12:9cSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winscard

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 600B

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 24B

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0d:a8:d8:a9:9e:38:ad:45:af:2c:ad:f3:4f:f5:66:9e
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

c8:f3:4e:28:f4:51:25:e4:32:fa:00:8e:61:d4:7a:4a:7d:7e:17:b2:bb:e7:3b:af:9e:7a:cc:33:8e:e5:12:9c
Signer

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 600B

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 24B