ef67083cc0aa330980a5dc9a49e0ce7afb27d0bef7301431f16c9e3d17bb8a24N

Sharing

Copy URL Twitter E-mail

General

Target

ef67083cc0aa330980a5dc9a49e0ce7afb27d0bef7301431f16c9e3d17bb8a24N
Size

153KB
MD5

899114fdd8600a69c2bab9da4cb054c0
SHA1

beaee6b9df935f9dd139bbc3bf0bf5de04ed4142
SHA256

ef67083cc0aa330980a5dc9a49e0ce7afb27d0bef7301431f16c9e3d17bb8a24
SHA512

5531366ba5b8ad1ab73508c68f1686d6d205f69ee87cb5ce69a076f968874d9df5880d835c4bf22a93d3995e97a810900a881dd4a554004c401da8f2045906b7
SSDEEP

3072:/UPIqhhmQFEGsWtRcTAnmT+08SZPrylqP8w/zOxq:8PISTnDYd

Score

1^/10

Malware Config

Signatures

Files

ef67083cc0aa330980a5dc9a49e0ce7afb27d0bef7301431f16c9e3d17bb8a24N
.dll windows:6 windows x64 arch:x64

f31de988e2b3b2f08f5ffbfc8111a74e

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:0e:2f:8f:9e:1b:8b:e5:18:d5:fe:2b:69:cf:cc:b1
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

09/03/2023, 00:00

Not After

11/03/2025, 23:59

Subject

CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

95:ec:8f:bb:25:ad:52:8b:1a:a4:2b:ea:e4:81:d7:78:a2:07:05:3d:11:90:3e:73:41:3a:79:59:22:f9:98:e3
Signer

Actual PE Digest

95:ec:8f:bb:25:ad:52:8b:1a:a4:2b:ea:e4:81:d7:78:a2:07:05:3d:11:90:3e:73:41:3a:79:59:22:f9:98:e3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

java.pdb

Imports

jvm

JVM_GetAndClearReferencePendingList
JVM_GetThreadInterruptEvent
JVM_Clone
JVM_MonitorNotifyAll
JVM_MonitorNotify
JVM_MonitorWait
JVM_IHashCode
JVM_NewInstanceFromConstructor
JVM_InvokeMethod
JVM_AddReadsModule
JVM_AddModuleExportsToAll
JVM_AddModuleExportsToAllUnnamed
JVM_AddModuleExports
JVM_DefineModule
JVM_GetFieldTypeAnnotations
JVM_GetMethodParameters
JVM_GetMethodTypeAnnotations
JVM_ConstantPoolGetTagAt
JVM_ConstantPoolGetUTF8At
JVM_ConstantPoolGetStringAt
JVM_ConstantPoolGetDoubleAt
JVM_ConstantPoolGetFloatAt
JVM_ConstantPoolGetLongAt
JVM_ConstantPoolGetIntAt
JVM_ConstantPoolGetNameAndTypeRefInfoAt
JVM_ConstantPoolGetNameAndTypeRefIndexAt
JVM_ConstantPoolGetMemberRefInfoAt
JVM_ConstantPoolGetFieldAtIfLoaded
JVM_ConstantPoolGetFieldAt
JVM_ConstantPoolGetMethodAtIfLoaded
JVM_ConstantPoolGetMethodAt
JVM_ConstantPoolGetClassRefIndexAt
JVM_ConstantPoolGetClassAtIfLoaded
JVM_ConstantPoolGetClassAt
JVM_ConstantPoolGetSize
JVM_DefineClassWithSource
JVM_FindLoadedClass
JVM_HasReferencePendingList
JVM_IsSupportedJNIVersion
JVM_FindLibraryEntry
JVM_UnloadLibrary
JVM_DoPrivileged
JVM_AssertionStatusDirectives
JVM_FindClassFromCaller
JVM_FindPrimitiveClass
JVM_DesiredAssertionStatus
JVM_GetClassConstantPool
JVM_GetNestMembers
JVM_GetNestHost
JVM_GetClassDeclaredConstructors
JVM_GetClassDeclaredFields
JVM_GetClassDeclaredMethods
JVM_GetClassTypeAnnotations
JVM_GetClassAnnotations
JVM_GetClassSignature
JVM_GetSimpleBinaryName
JVM_GetDeclaringClass
JVM_GetDeclaredClasses
JVM_GetClassModifiers
JVM_IsPrimitiveClass
JVM_IsArrayClass
JVM_GetProtectionDomain
JVM_SetClassSigners
JVM_GetClassSigners
JVM_IsInterface
JVM_GetClassInterfaces
JVM_InitClassName
JVM_GetEnclosingMethodInfo
JVM_SetBootLoaderUnnamedModule
JVM_GetSystemPackages
JVM_GetSystemPackage
JVM_SupportsCX8
JVM_NewMultiArray
JVM_NewArray
JVM_WaitForReferencePendingList
JVM_GetCallerClass
JVM_GetClassAccessFlags
JVM_AreNestMates
JVM_GC
JVM_TotalMemory
JVM_FreeMemory
JVM_MaxMemory
JVM_ActiveProcessorCount
JVM_GetClassContext
JVM_BeforeHalt
JVM_Halt
JVM_RegisterSignal
JVM_RaiseSignal
JVM_FindSignal
JVM_CallStackWalk
JVM_MoreStackWalk
JVM_InitStackTraceElementArray
JVM_InitStackTraceElement
JVM_InternString
JVM_CurrentTimeMillis
JVM_SetPrimitiveArrayElement
JVM_NanoTime
JVM_ArrayCopy
JVM_InitProperties
JVM_StartThread
JVM_StopThread
JVM_IsThreadAlive
JVM_SuspendThread
JVM_ResumeThread
JVM_SetThreadPriority
JVM_Yield
JVM_Sleep
JVM_CurrentThread
JVM_SetArrayElement
JVM_GetPrimitiveArrayElement
JVM_CountStackFrames
JVM_Interrupt
JVM_GetArrayElement
JVM_GetArrayLength
JVM_GetStackAccessControlContext
JVM_IsInterrupted
JVM_HoldsLock
JVM_GetAllThreads
JVM_SetNativeThreadName
JVM_DumpThreads
JVM_FillInStackTrace
JVM_GetNanoTimeAdjustment
JVM_GetVmArguments
JVM_LatestUserDefinedLoader
JVM_InitAgentProperties
JVM_GetTemporaryDirectory
JVM_GetInterfaceVersion
jio_vsnprintf
jio_vfprintf
JVM_GetInheritedAccessControlContext
JVM_FindClassFromBootLoader
JVM_LoadLibrary

verify

VerifyFixClassname
VerifyClass
VerifyClassForMajorVersion
VerifyClassname

advapi32

CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
ConvertSidToStringSidW
LookupAccountSidW
GetTokenInformation
OpenProcessToken
CryptReleaseContext
CryptGenRandom
GetUserNameW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
SetConsoleMode
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
RaiseException
FormatMessageA
LoadLibraryA
GetSystemDirectoryA
GetACP
IsValidCodePage
GetNativeSystemInfo
GetVersionExA
GetWindowsDirectoryA
GetSystemDirectoryW
GetSystemInfo
IsProcessorFeaturePresent
GetTempPathW
GetCurrentDirectoryW
PeekConsoleInputA
GetNumberOfConsoleInputEvents
PeekNamedPipe
WriteFile
SetFilePointerEx
SetFilePointer
SetEndOfFile
ReadFile
GetFileSizeEx
GetDriveTypeW
FlushFileBuffers
IsDBCSLeadByte
FindFirstFileA
GetModuleHandleExW
SetLastError
SetFileTime
SetFileAttributesW
RemoveDirectoryW
GetVolumePathNameW
GetVolumeInformationW
GetLogicalDrives
GetFullPathNameW
GetFileTime
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
SetErrorMode
GetUserGeoID
GetGeoInfoA
GetLocaleInfoA
MultiByteToWideChar
GetDynamicTimeZoneInformation
GetTimeZoneInformation
GetConsoleWindow
WideCharToMultiByte
FormatMessageW
GetProcessId
CreateProcessW
CreatePipe
SetHandleInformation
GetHandleInformation
CreateFileW
Process32Next
Process32First
CreateToolhelp32Snapshot
QueryFullProcessImageNameW
LocalFree
OpenProcess
GetExitCodeProcess
TerminateProcess
GetCurrentProcessId
GetProcessTimes
WaitForMultipleObjects
GetLastError
GetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentStrings
GetUserDefaultLCID
GetUserDefaultUILanguage
GetProcAddress
GetModuleHandleA
CloseHandle
FreeEnvironmentStringsW

vcruntime140

memset
memcmp
wcsrchr
strchr
__std_type_info_destroy_list
__C_specific_handler
wcschr
memcpy
strrchr

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
calloc

api-ms-win-crt-string-l1-1-0

iswctype
_strdup
strcat
strcmp
wcsncmp
_wcsupr
wcscat
wcsncat
strncpy
wcslen
wcscpy
wcscmp
_wcsdup
wcscat_s
toupper
strlen
strcpy
isalpha
towupper

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vfprintf
__stdio_common_vswprintf
__acrt_iob_func
fclose
__stdio_common_vsscanf
fgets
fopen

api-ms-win-crt-math-l1-1-0

_isnan

api-ms-win-crt-convert-l1-1-0

atoi
_itoa_s
wcstombs

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_initterm
strerror_s
_initterm_e
_errno
_cexit
_execute_onexit_table

api-ms-win-crt-filesystem-l1-1-0

_wfullpath
_fullpath
_wrename

api-ms-win-crt-environment-l1-1-0

_wgetdcwd
_wgetcwd
_wgetenv

Exports

Exports

Canonicalize
GetStringPlatformChars
InitializeEncoding
JDK_GetVersionInfo0
JDK_LoadSystemLibrary
JNI_OnLoad
JNU_CallMethodByName
JNU_CallMethodByNameV
JNU_CallStaticMethodByName
JNU_ClassClass
JNU_ClassObject
JNU_ClassString
JNU_ClassThrowable
JNU_CopyObjectArray
JNU_Equals
JNU_GetEnv
JNU_GetFieldByName
JNU_GetStaticFieldByName
JNU_GetStringPlatformChars
JNU_IsInstanceOfByName
JNU_MonitorWait
JNU_NewObjectByName
JNU_NewStringPlatform
JNU_Notify
JNU_NotifyAll
JNU_PrintClass
JNU_PrintString
JNU_ReleaseStringPlatformChars
JNU_SetFieldByName
JNU_SetStaticFieldByName
JNU_ThrowArrayIndexOutOfBoundsException
JNU_ThrowByName
JNU_ThrowByNameWithLastError
JNU_ThrowByNameWithMessageAndLastError
JNU_ThrowClassNotFoundException
JNU_ThrowIOException
JNU_ThrowIOExceptionWithLastError
JNU_ThrowIllegalAccessError
JNU_ThrowIllegalAccessException
JNU_ThrowIllegalArgumentException
JNU_ThrowInstantiationException
JNU_ThrowInternalError
JNU_ThrowNoSuchFieldError
JNU_ThrowNoSuchFieldException
JNU_ThrowNoSuchMethodError
JNU_ThrowNoSuchMethodException
JNU_ThrowNullPointerException
JNU_ThrowNumberFormatException
JNU_ThrowOutOfMemoryError
JNU_ThrowStringIndexOutOfBoundsException
JNU_ToString
Java_java_io_Console_echo
Java_java_io_Console_encoding
Java_java_io_Console_istty
Java_java_io_FileCleanable_cleanupClose0
Java_java_io_FileDescriptor_close0
Java_java_io_FileDescriptor_getAppend
Java_java_io_FileDescriptor_getHandle
Java_java_io_FileDescriptor_initIDs
Java_java_io_FileDescriptor_sync
Java_java_io_FileInputStream_available0
Java_java_io_FileInputStream_initIDs
Java_java_io_FileInputStream_open0
Java_java_io_FileInputStream_read0
Java_java_io_FileInputStream_readBytes
Java_java_io_FileInputStream_skip0
Java_java_io_FileOutputStream_initIDs
Java_java_io_FileOutputStream_open0
Java_java_io_FileOutputStream_write
Java_java_io_FileOutputStream_writeBytes
Java_java_io_ObjectInputStream_bytesToDoubles
Java_java_io_ObjectInputStream_bytesToFloats
Java_java_io_ObjectOutputStream_doublesToBytes
Java_java_io_ObjectOutputStream_floatsToBytes
Java_java_io_ObjectStreamClass_hasStaticInitializer
Java_java_io_ObjectStreamClass_initNative
Java_java_io_RandomAccessFile_getFilePointer
Java_java_io_RandomAccessFile_initIDs
Java_java_io_RandomAccessFile_length
Java_java_io_RandomAccessFile_open0
Java_java_io_RandomAccessFile_read0
Java_java_io_RandomAccessFile_readBytes
Java_java_io_RandomAccessFile_seek0
Java_java_io_RandomAccessFile_setLength
Java_java_io_RandomAccessFile_write0
Java_java_io_RandomAccessFile_writeBytes
Java_java_io_WinNTFileSystem_canonicalize0
Java_java_io_WinNTFileSystem_canonicalizeWithPrefix0
Java_java_io_WinNTFileSystem_checkAccess
Java_java_io_WinNTFileSystem_createDirectory
Java_java_io_WinNTFileSystem_createFileExclusively
Java_java_io_WinNTFileSystem_delete0
Java_java_io_WinNTFileSystem_getBooleanAttributes
Java_java_io_WinNTFileSystem_getDriveDirectory
Java_java_io_WinNTFileSystem_getLastModifiedTime
Java_java_io_WinNTFileSystem_getLength
Java_java_io_WinNTFileSystem_getNameMax0
Java_java_io_WinNTFileSystem_getSpace0
Java_java_io_WinNTFileSystem_initIDs
Java_java_io_WinNTFileSystem_list
Java_java_io_WinNTFileSystem_listRoots0
Java_java_io_WinNTFileSystem_rename0
Java_java_io_WinNTFileSystem_setLastModifiedTime
Java_java_io_WinNTFileSystem_setPermission
Java_java_io_WinNTFileSystem_setReadOnly
Java_java_lang_ClassLoader_00024NativeLibrary_findEntry
Java_java_lang_ClassLoader_00024NativeLibrary_load0
Java_java_lang_ClassLoader_00024NativeLibrary_unload
Java_java_lang_ClassLoader_defineClass1
Java_java_lang_ClassLoader_defineClass2
Java_java_lang_ClassLoader_findBootstrapClass
Java_java_lang_ClassLoader_findBuiltinLib
Java_java_lang_ClassLoader_findLoadedClass0
Java_java_lang_ClassLoader_registerNatives
Java_java_lang_Class_forName0
Java_java_lang_Class_getPrimitiveClass
Java_java_lang_Class_isAssignableFrom
Java_java_lang_Class_isInstance
Java_java_lang_Class_registerNatives
Java_java_lang_Double_doubleToRawLongBits
Java_java_lang_Double_longBitsToDouble
Java_java_lang_Float_floatToRawIntBits
Java_java_lang_Float_intBitsToFloat
Java_java_lang_Module_addExports0
Java_java_lang_Module_addExportsToAll0
Java_java_lang_Module_addExportsToAllUnnamed0
Java_java_lang_Module_addReads0
Java_java_lang_Module_defineModule0
Java_java_lang_Object_getClass
Java_java_lang_Object_registerNatives
Java_java_lang_ProcessEnvironment_environmentBlock
Java_java_lang_ProcessHandleImpl_00024Info_info0
Java_java_lang_ProcessHandleImpl_00024Info_initIDs
Java_java_lang_ProcessHandleImpl_destroy0
Java_java_lang_ProcessHandleImpl_getCurrentPid0
Java_java_lang_ProcessHandleImpl_getProcessPids0
Java_java_lang_ProcessHandleImpl_initNative
Java_java_lang_ProcessHandleImpl_isAlive0
Java_java_lang_ProcessHandleImpl_parent0
Java_java_lang_ProcessHandleImpl_waitForProcessExit0
Java_java_lang_ProcessImpl_closeHandle
Java_java_lang_ProcessImpl_create
Java_java_lang_ProcessImpl_getExitCodeProcess
Java_java_lang_ProcessImpl_getProcessId0
Java_java_lang_ProcessImpl_getStillActive
Java_java_lang_ProcessImpl_isProcessAlive
Java_java_lang_ProcessImpl_openForAtomicAppend
Java_java_lang_ProcessImpl_terminateProcess
Java_java_lang_ProcessImpl_waitForInterruptibly
Java_java_lang_ProcessImpl_waitForTimeoutInterruptibly
Java_java_lang_Runtime_availableProcessors
Java_java_lang_Runtime_freeMemory
Java_java_lang_Runtime_gc
Java_java_lang_Runtime_maxMemory
Java_java_lang_Runtime_totalMemory
Java_java_lang_SecurityManager_getClassContext
Java_java_lang_Shutdown_beforeHalt
Java_java_lang_Shutdown_halt0
Java_java_lang_StackStreamFactory_00024AbstractStackWalker_callStackWalk
Java_java_lang_StackStreamFactory_00024AbstractStackWalker_fetchStackFrames
Java_java_lang_StackStreamFactory_checkStackWalkModes
Java_java_lang_StackTraceElement_initStackTraceElement
Java_java_lang_StackTraceElement_initStackTraceElements
Java_java_lang_StrictMath_IEEEremainder
Java_java_lang_StrictMath_acos
Java_java_lang_StrictMath_asin
Java_java_lang_StrictMath_atan
Java_java_lang_StrictMath_atan2
Java_java_lang_StrictMath_cos
Java_java_lang_StrictMath_cosh
Java_java_lang_StrictMath_expm1
Java_java_lang_StrictMath_log
Java_java_lang_StrictMath_log10
Java_java_lang_StrictMath_log1p
Java_java_lang_StrictMath_sin
Java_java_lang_StrictMath_sinh
Java_java_lang_StrictMath_sqrt
Java_java_lang_StrictMath_tan
Java_java_lang_StrictMath_tanh
Java_java_lang_StringCoding_err
Java_java_lang_StringUTF16_isBigEndian
Java_java_lang_String_intern
Java_java_lang_System_identityHashCode
Java_java_lang_System_initProperties
Java_java_lang_System_mapLibraryName
Java_java_lang_System_registerNatives
Java_java_lang_System_setErr0
Java_java_lang_System_setIn0
Java_java_lang_System_setOut0
Java_java_lang_Thread_registerNatives
Java_java_lang_Throwable_fillInStackTrace
Java_java_lang_ref_Reference_getAndClearReferencePendingList
Java_java_lang_ref_Reference_hasReferencePendingList
Java_java_lang_ref_Reference_waitForReferencePendingList
Java_java_lang_reflect_Array_get
Java_java_lang_reflect_Array_getBoolean
Java_java_lang_reflect_Array_getByte
Java_java_lang_reflect_Array_getChar
Java_java_lang_reflect_Array_getDouble
Java_java_lang_reflect_Array_getFloat
Java_java_lang_reflect_Array_getInt
Java_java_lang_reflect_Array_getLength
Java_java_lang_reflect_Array_getLong
Java_java_lang_reflect_Array_getShort
Java_java_lang_reflect_Array_multiNewArray
Java_java_lang_reflect_Array_newArray
Java_java_lang_reflect_Array_set
Java_java_lang_reflect_Array_setBoolean
Java_java_lang_reflect_Array_setByte
Java_java_lang_reflect_Array_setChar
Java_java_lang_reflect_Array_setDouble
Java_java_lang_reflect_Array_setFloat
Java_java_lang_reflect_Array_setInt
Java_java_lang_reflect_Array_setLong
Java_java_lang_reflect_Array_setShort
Java_java_lang_reflect_Executable_getParameters0
Java_java_lang_reflect_Executable_getTypeAnnotationBytes0
Java_java_lang_reflect_Field_getTypeAnnotationBytes0
Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedAction_2
Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedAction_2Ljava_security_AccessControlContext_2
Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedExceptionAction_2
Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedExceptionAction_2Ljava_security_AccessControlContext_2
Java_java_security_AccessController_getInheritedAccessControlContext
Java_java_security_AccessController_getStackAccessControlContext
Java_java_util_TimeZone_getSystemGMTOffsetID
Java_java_util_TimeZone_getSystemTimeZoneID
Java_java_util_concurrent_atomic_AtomicLong_VMSupportsCS8
Java_jdk_internal_loader_BootLoader_getSystemPackageLocation
Java_jdk_internal_loader_BootLoader_getSystemPackageNames
Java_jdk_internal_loader_BootLoader_setBootLoaderUnnamedModule0
Java_jdk_internal_misc_Signal_findSignal0
Java_jdk_internal_misc_Signal_handle0
Java_jdk_internal_misc_Signal_raise0
Java_jdk_internal_misc_VM_getRuntimeArguments
Java_jdk_internal_misc_VM_getegid
Java_jdk_internal_misc_VM_geteuid
Java_jdk_internal_misc_VM_getgid
Java_jdk_internal_misc_VM_getuid
Java_jdk_internal_misc_VM_initialize
Java_jdk_internal_misc_VM_latestUserDefinedLoader0
Java_jdk_internal_reflect_ConstantPool_getClassAt0
Java_jdk_internal_reflect_ConstantPool_getClassAtIfLoaded0
Java_jdk_internal_reflect_ConstantPool_getClassRefIndexAt0
Java_jdk_internal_reflect_ConstantPool_getDoubleAt0
Java_jdk_internal_reflect_ConstantPool_getFieldAt0
Java_jdk_internal_reflect_ConstantPool_getFieldAtIfLoaded0
Java_jdk_internal_reflect_ConstantPool_getFloatAt0
Java_jdk_internal_reflect_ConstantPool_getIntAt0
Java_jdk_internal_reflect_ConstantPool_getLongAt0
Java_jdk_internal_reflect_ConstantPool_getMemberRefInfoAt0
Java_jdk_internal_reflect_ConstantPool_getMethodAt0
Java_jdk_internal_reflect_ConstantPool_getMethodAtIfLoaded0
Java_jdk_internal_reflect_ConstantPool_getNameAndTypeRefIndexAt0
Java_jdk_internal_reflect_ConstantPool_getNameAndTypeRefInfoAt0
Java_jdk_internal_reflect_ConstantPool_getSize0
Java_jdk_internal_reflect_ConstantPool_getStringAt0
Java_jdk_internal_reflect_ConstantPool_getTagAt0
Java_jdk_internal_reflect_ConstantPool_getUTF8At0
Java_jdk_internal_reflect_NativeConstructorAccessorImpl_newInstance0
Java_jdk_internal_reflect_NativeMethodAccessorImpl_invoke0
Java_jdk_internal_reflect_Reflection_areNestMates
Java_jdk_internal_reflect_Reflection_getCallerClass__
Java_jdk_internal_reflect_Reflection_getClassAccessFlags
Java_jdk_internal_util_EnvUtils_getEnvVar
Java_jdk_internal_vm_VMSupport_getVMTemporaryDirectory
Java_jdk_internal_vm_VMSupport_initAgentProperties
Java_sun_io_Win32ErrorMode_setErrorMode
Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getAmPmStrings
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarDataValue
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarDisplayStrings
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarID
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCurrencySymbol
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDateTimePattern
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDecimalSeparator
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDefaultLocale
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDisplayString
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getEras
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getGroupingSeparator
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInfinity
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInternationalCurrencySymbol
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMinusSign
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonetaryDecimalSeparator
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonths
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNaN
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNumberPattern
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPerMill
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPercent
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortMonths
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortWeekdays
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getWeekdays
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getZeroDigit
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_initialize
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_isNativeDigit
NewStringPlatform
VerifyClassCodes
VerifyClassCodesForMajorVersion
getEncodingFromLangID
getErrorString
getJavaIDFromLangID
getLastErrorString
handleLseek
handleRead
jio_fprintf
jio_snprintf
throwFileNotFoundException
winFileHandleOpen

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f31de988e2b3b2f08f5ffbfc8111a74e

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:0e:2f:8f:9e:1b:8b:e5:18:d5:fe:2b:69:cf:cc:b1Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

95:ec:8f:bb:25:ad:52:8b:1a:a4:2b:ea:e4:81:d7:78:a2:07:05:3d:11:90:3e:73:41:3a:79:59:22:f9:98:e3Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

jvm

verify

advapi32

version

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 5KB - Virtual size: 7KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 1024B - Virtual size: 764B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:0e:2f:8f:9e:1b:8b:e5:18:d5:fe:2b:69:cf:cc:b1
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

95:ec:8f:bb:25:ad:52:8b:1a:a4:2b:ea:e4:81:d7:78:a2:07:05:3d:11:90:3e:73:41:3a:79:59:22:f9:98:e3
Signer

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 5KB - Virtual size: 7KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 1024B - Virtual size: 764B