8280ca5bf212ac18b62d49ec1a572acd4a4c8fbceeab67bfcd52fd321948cd7aN

Sharing

Copy URL Twitter E-mail

General

Target

8280ca5bf212ac18b62d49ec1a572acd4a4c8fbceeab67bfcd52fd321948cd7aN
Size

39KB
MD5

2af90ca65b9f8e6bca1d2a8b8a7bf3d0
SHA1

d4bf01148fd211c40b70e897aadc9d9fc414b678
SHA256

8280ca5bf212ac18b62d49ec1a572acd4a4c8fbceeab67bfcd52fd321948cd7a
SHA512

3ca6da542b62d22001d8799d035982b2ae4f96a41888347979b4fad1d320b921d5015f8e720f89739abfe83f58da30900f2b821529b52b72b9bd9e17e5c18ecb
SSDEEP

768:okwnwF/M5R2TyJ5R3s8D/bkt5Ruz3Vb3L/5xP:dwnYM5RdJ5R3sozkt5RA3L/5J

Score

1^/10

Malware Config

Signatures

Files

8280ca5bf212ac18b62d49ec1a572acd4a4c8fbceeab67bfcd52fd321948cd7aN
.exe windows:6 windows x64 arch:x64

488de7517137611a0083d4fcc6d76ebe

Code Sign

4d:e5:a8:c7
Certificate

Issuer

CN=Tres Finocchiaro,OU=code.google.com/jzebra,O=jZebra Web Applet,L=Canastota,ST=New York,C=US

Not Before

01/06/2011, 02:49

Not After

31/05/2016, 02:49

Subject

CN=Tres Finocchiaro,OU=code.google.com/jzebra,O=jZebra Web Applet,L=Canastota,ST=New York,C=US

e0:94:71:5f:43:b6:a3:13:30:0f:c2:b4:f7:41:d7:9e:a3:62:ef:37:d3:04:5e:86:d2:21:8b:17:9e:f6:50:02
Signer

Actual PE Digest

e0:94:71:5f:43:b6:a3:13:30:0f:c2:b4:f7:41:d7:9e:a3:62:ef:37:d3:04:5e:86:d2:21:8b:17:9e:f6:50:02

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

java.pdb

Imports

jli

JLI_MemAlloc
JLI_GetStdArgc
JLI_GetStdArgs
JLI_Launch
JLI_InitArgProcessing
JLI_CmdToArgs

kernel32

InitializeSListHead
UnhandledExceptionFilter
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlVirtualUnwind
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlCaptureContext
SetUnhandledExceptionFilter

vcruntime140

memset
__C_specific_handler

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

__p___argc
_seh_filter_exe
_set_app_type
__p___argv
_crt_atexit
terminate
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_cexit
_register_onexit_function
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_initialize_onexit_table

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Exports

Exports

main

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

488de7517137611a0083d4fcc6d76ebe

Code Sign

4d:e5:a8:c7Certificate

e0:94:71:5f:43:b6:a3:13:30:0f:c2:b4:f7:41:d7:9e:a3:62:ef:37:d3:04:5e:86:d2:21:8b:17:9e:f6:50:02Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

jli

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 216B

.pdata Size: 512B - Virtual size: 312B

.rsrc Size: 28KB - Virtual size: 27KB

.reloc Size: 512B - Virtual size: 40B

4d:e5:a8:c7
Certificate

e0:94:71:5f:43:b6:a3:13:30:0f:c2:b4:f7:41:d7:9e:a3:62:ef:37:d3:04:5e:86:d2:21:8b:17:9e:f6:50:02
Signer

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 216B

.pdata
Size: 512B - Virtual size: 312B

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 512B - Virtual size: 40B