9d305d643b09912c7c316d2eed4d91ed753227e4af514f996ba4861be63cc310[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9d305d643b09912c7c316d2eed4d91ed753227e4af514f996ba4861be63cc310.exe
Size

211KB
MD5

2f8c46012aa588fe1e9c9820ab2d5e31
SHA1

5460b30c6ac271429b5463263bd036b536b866e1
SHA256

9d305d643b09912c7c316d2eed4d91ed753227e4af514f996ba4861be63cc310
SHA512

ce1412230b0489625a672fd0b96720ea97723ebe0a9d613717e839befcbe317d7afc3867ac987daa1a8f9be9d13eb6f0a7fce00d9304fd251245bc8862dc67c4
SSDEEP

6144:75gWIKCqWgNrahc4VwR59zKxkRGbPTgTBjp0:+6b7a9CRckRGHgT70

Score

1^/10

Malware Config

Signatures

Files

9d305d643b09912c7c316d2eed4d91ed753227e4af514f996ba4861be63cc310.exe
.dll windows:6 windows x64 arch:x64

207f1bb3ad806881f039ea681e5875da

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19/08/2021, 00:00

Not After

19/08/2023, 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cd:ad:fd:98:4d:b8:77:56:46:99:f0:a7:14:7f:f8:bf:74:8e:61:08:13:5c:4e:ce:2a:8e:7d:0d:94:c0:fb:a4
Signer

Actual PE Digest

cd:ad:fd:98:4d:b8:77:56:46:99:f0:a7:14:7f:f8:bf:74:8e:61:08:13:5c:4e:ce:2a:8e:7d:0d:94:c0:fb:a4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\8-2-build-windows-x64-cygwin\jdk8u361\3183\build\windows-x64\jdk\objs\libsplashscreen\splashscreen.pdb

Imports

kernel32

IsDebuggerPresent
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
GetTickCount
CreateThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ExitProcess
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetLastError
RaiseException

gdi32

CreatePalette
CreateDIBSection
StretchDIBits
SelectPalette
SelectObject
RealizePalette
GetDeviceCaps
ExtCreateRegion
DeleteObject
DeleteDC
CombineRgn
CreateCompatibleDC
CreateRectRgn

vcruntime140

__C_specific_handler
memset
__std_type_info_destroy_list
memcpy
longjmp
memcmp
__intrinsic_setjmp

api-ms-win-crt-heap-l1-1-0

malloc
realloc
free
calloc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fread
fclose
ungetc
fgetc
fopen
__stdio_common_vsscanf
__stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

_stricmp
strlen
strncmp

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_errno
_initialize_onexit_table

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

pow
floor

Exports

Exports

JNI_OnLoad
Java_java_awt_SplashScreen__1close
Java_java_awt_SplashScreen__1getBounds
Java_java_awt_SplashScreen__1getImageFileName
Java_java_awt_SplashScreen__1getImageJarName
Java_java_awt_SplashScreen__1getInstance
Java_java_awt_SplashScreen__1getScaleFactor
Java_java_awt_SplashScreen__1isVisible
Java_java_awt_SplashScreen__1setImageData
Java_java_awt_SplashScreen__1update
SplashClose
SplashGetScaledImageName
SplashInit
SplashLoadFile
SplashLoadMemory
SplashSetFileJarName
SplashSetScaleFactor

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

207f1bb3ad806881f039ea681e5875da

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

cd:ad:fd:98:4d:b8:77:56:46:99:f0:a7:14:7f:f8:bf:74:8e:61:08:13:5c:4e:ce:2a:8e:7d:0d:94:c0:fb:a4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 45KB - Virtual size: 44KB

.data Size: 512B - Virtual size: 13KB

.pdata Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 952B

.reloc Size: 512B - Virtual size: 452B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

cd:ad:fd:98:4d:b8:77:56:46:99:f0:a7:14:7f:f8:bf:74:8e:61:08:13:5c:4e:ce:2a:8e:7d:0d:94:c0:fb:a4
Signer

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 45KB - Virtual size: 44KB

.data
Size: 512B - Virtual size: 13KB

.pdata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 952B

.reloc
Size: 512B - Virtual size: 452B