5b9b01f1ec06ad559285201cf0907e1c31473f6fb91aa09813dd8f076f94afe3[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5b9b01f1ec06ad559285201cf0907e1c31473f6fb91aa09813dd8f076f94afe3.exe
Size

163KB
MD5

db081a9968bb0c37a57725cdb66a0c7b
SHA1

d5fed172d82111d1f3bcb46ab3bd8b412f3ee003
SHA256

5b9b01f1ec06ad559285201cf0907e1c31473f6fb91aa09813dd8f076f94afe3
SHA512

8a3717be2bdc1d2e628a069a61ac5b504467c52c7b52496c14050cd0fbc3e1023c791ca8b5c3270579e1cc725a8a0cff62c427dc1c25c2ec74725d1dacc621d5
SSDEEP

3072:cQgprS6r6qB478wpwWs1UjejpAhqtVZcHxsr0DbPdTHTxv:e1X6qBA8NcqpQ9/z

Score

1^/10

Malware Config

Signatures

Files

5b9b01f1ec06ad559285201cf0907e1c31473f6fb91aa09813dd8f076f94afe3.exe
.dll windows:6 windows x64 arch:x64

ab39a562ecdfabf13d806506f868ca7c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19/08/2021, 00:00

Not After

19/08/2023, 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:22:94:bc:39:97:49:53:2d:e7:cc:49:49:95:51:d7:d1:f9:f3:bf:92:98:3b:7c:19:11:2d:82:a0:14:e5:93
Signer

Actual PE Digest

4f:22:94:bc:39:97:49:53:2d:e7:cc:49:49:95:51:d7:d1:f9:f3:bf:92:98:3b:7c:19:11:2d:82:a0:14:e5:93

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\8-2-build-windows-x64-cygwin\jdk8u361\3183\build\windows-x64\jdk\objs\libjava\java.pdb

Imports

jvm

JVM_ActiveProcessorCount
JVM_MaxMemory
JVM_FreeMemory
JVM_TotalMemory
JVM_TraceMethodCalls
JVM_TraceInstructions
JVM_GC
JVM_GetClassAccessFlags
JVM_GetCallerClass
JVM_GetThreadInterruptEvent
JVM_GetSystemPackages
JVM_GetSystemPackage
JVM_Clone
JVM_MonitorNotifyAll
JVM_MonitorNotify
JVM_MonitorWait
JVM_IHashCode
JVM_NewInstanceFromConstructor
JVM_InvokeMethod
JVM_MaxObjectInspectionAge
JVM_GetFieldTypeAnnotations
JVM_GetMethodParameters
JVM_GetMethodTypeAnnotations
JVM_ConstantPoolGetUTF8At
JVM_ConstantPoolGetStringAt
JVM_ConstantPoolGetDoubleAt
JVM_ConstantPoolGetFloatAt
JVM_ConstantPoolGetLongAt
JVM_ConstantPoolGetIntAt
JVM_ConstantPoolGetMemberRefInfoAt
JVM_ConstantPoolGetFieldAtIfLoaded
JVM_ConstantPoolGetFieldAt
JVM_ConstantPoolGetMethodAtIfLoaded
JVM_ConstantPoolGetMethodAt
JVM_ConstantPoolGetClassAtIfLoaded
JVM_ConstantPoolGetClassAt
JVM_ConstantPoolGetSize
JVM_DisableCompiler
JVM_EnableCompiler
JVM_CurrentLoadedClass
JVM_CompileClasses
JVM_CompileClass
JVM_DefineClassWithSource
JVM_DoPrivileged
JVM_FindClassFromBootLoader
JVM_ResolveClass
JVM_IsSupportedJNIVersion
JVM_FindLibraryEntry
JVM_UnloadLibrary
JVM_LoadLibrary
JVM_AssertionStatusDirectives
JVM_FindClassFromCaller
JVM_FindPrimitiveClass
JVM_GetEnclosingMethodInfo
JVM_DesiredAssertionStatus
JVM_GetClassConstantPool
JVM_GetClassDeclaredConstructors
JVM_GetClassDeclaredFields
JVM_GetClassDeclaredMethods
JVM_GetClassTypeAnnotations
JVM_GetClassAnnotations
JVM_GetClassSignature
JVM_GetDeclaringClass
JVM_GetDeclaredClasses
JVM_GetClassModifiers
JVM_GetComponentType
JVM_IsPrimitiveClass
JVM_IsArrayClass
JVM_CurrentClassLoader
JVM_GetClassContext
JVM_ClassDepth
JVM_ClassLoaderDepth
JVM_Halt
JVM_BeforeHalt
JVM_RegisterSignal
JVM_RaiseSignal
JVM_FindSignal
JVM_InternString
JVM_CurrentTimeMillis
JVM_NanoTime
JVM_ArrayCopy
JVM_InitProperties
JVM_StartThread
JVM_StopThread
JVM_IsThreadAlive
JVM_GetProtectionDomain
JVM_SetClassSigners
JVM_SuspendThread
JVM_ResumeThread
JVM_SetThreadPriority
JVM_Yield
JVM_Sleep
JVM_GetClassSigners
JVM_IsInterface
JVM_GetClassInterfaces
JVM_CurrentThread
JVM_CountStackFrames
JVM_Interrupt
JVM_GetClassName
JVM_IsInterrupted
JVM_HoldsLock
JVM_GetAllThreads
JVM_CopySwapMemory
JVM_SupportsCX8
JVM_SetNativeThreadName
JVM_DumpThreads
JVM_NewMultiArray
JVM_NewArray
JVM_FillInStackTrace
JVM_GetStackTraceDepth
JVM_SetPrimitiveArrayElement
JVM_SetArrayElement
JVM_GetStackTraceElement
JVM_GetPrimitiveArrayElement
JVM_KnownToNotExist
JVM_GetResourceLookupCacheURLs
JVM_GetResourceLookupCache
JVM_LatestUserDefinedLoader
JVM_GetTemporaryDirectory
JVM_GetInterfaceVersion
jio_vsnprintf
jio_vfprintf
JVM_GetLastErrorString
JVM_GetArrayLength
JVM_GetStackAccessControlContext
JVM_GetInheritedAccessControlContext
JVM_GetArrayElement
JVM_CompilerCommand
JVM_FindLoadedClass

verify

VerifyFixClassname
VerifyClass
VerifyClassForMajorVersion
VerifyClassname

advapi32

RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegFlushKey
RegSetValueExA
GetUserNameW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
SetConsoleMode
GetEnvironmentVariableA
GetModuleHandleA
GetProcAddress
GetUserDefaultUILanguage
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsA
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
RaiseException
GetModuleFileNameA
LoadLibraryA
GetSystemDirectoryA
GetSystemDefaultLCID
GetLocaleInfoA
IsValidCodePage
GetNativeSystemInfo
GetWindowsDirectoryA
GetSystemDirectoryW
GetSystemInfo
IsProcessorFeaturePresent
GetTempPathW
GetCurrentDirectoryW
PeekConsoleInputA
GetNumberOfConsoleInputEvents
PeekNamedPipe
WriteFile
SetFilePointerEx
SetFilePointer
SetEndOfFile
ReadFile
GetFileSizeEx
GetDriveTypeW
FlushFileBuffers
IsDBCSLeadByte
FindFirstFileA
GetModuleHandleExW
SetLastError
SetFileTime
SetFileAttributesW
RemoveDirectoryW
GetVolumePathNameW
GetLogicalDrives
GetFullPathNameW
GetFileTime
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
SetErrorMode
MultiByteToWideChar
GetTimeZoneInformation
GetVersionExA
GetConsoleWindow
WideCharToMultiByte
FormatMessageW
CreateProcessW
GetExitCodeProcess
TerminateProcess
WaitForMultipleObjects
CreatePipe
GetLastError
SetHandleInformation
GetHandleInformation
CloseHandle
CreateFileW
FreeEnvironmentStringsW
GetUserDefaultLCID

vcruntime140

memcmp
memset
wcsrchr
strchr
wcschr
strrchr
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc
realloc

api-ms-win-crt-string-l1-1-0

wcsncmp
wcscat
iswctype
_wcsupr
towupper
isalpha
wcsncpy
_strdup
strcat
strcmp
strncpy
wcsncat
isdigit
wcslen
wcscpy
wcscmp
_wcsdup
wcscat_s
toupper
strlen
strcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vfprintf
__acrt_iob_func
fclose
fopen
fgets
__stdio_common_vsprintf

api-ms-win-crt-math-l1-1-0

_isnan

api-ms-win-crt-convert-l1-1-0

wcstombs
atoi
mbstowcs

api-ms-win-crt-runtime-l1-1-0

_wcserror
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno
_initterm
strerror_s
_initterm_e

api-ms-win-crt-filesystem-l1-1-0

_wfullpath
_wrename
_fullpath

api-ms-win-crt-environment-l1-1-0

_wgetenv
_wgetdcwd
_wgetcwd

api-ms-win-crt-locale-l1-1-0

setlocale

Exports

Exports

Canonicalize
GetStringPlatformChars
JDK_GetVersionInfo0
JDK_LoadSystemLibrary
JNI_OnLoad
JNU_CallMethodByName
JNU_CallMethodByNameV
JNU_CallStaticMethodByName
JNU_ClassClass
JNU_ClassObject
JNU_ClassString
JNU_ClassThrowable
JNU_CopyObjectArray
JNU_Equals
JNU_GetEnv
JNU_GetFieldByName
JNU_GetStaticFieldByName
JNU_GetStringPlatformChars
JNU_IsInstanceOfByName
JNU_MonitorWait
JNU_NewObjectByName
JNU_NewStringPlatform
JNU_Notify
JNU_NotifyAll
JNU_PrintClass
JNU_PrintString
JNU_ReleaseStringPlatformChars
JNU_SetFieldByName
JNU_SetStaticFieldByName
JNU_ThrowArrayIndexOutOfBoundsException
JNU_ThrowByName
JNU_ThrowByNameWithLastError
JNU_ThrowByNameWithMessageAndLastError
JNU_ThrowClassNotFoundException
JNU_ThrowIOException
JNU_ThrowIOExceptionWithLastError
JNU_ThrowIllegalAccessError
JNU_ThrowIllegalAccessException
JNU_ThrowIllegalArgumentException
JNU_ThrowInstantiationException
JNU_ThrowInternalError
JNU_ThrowNoSuchFieldError
JNU_ThrowNoSuchFieldException
JNU_ThrowNoSuchMethodError
JNU_ThrowNoSuchMethodException
JNU_ThrowNullPointerException
JNU_ThrowNumberFormatException
JNU_ThrowOutOfMemoryError
JNU_ThrowStringIndexOutOfBoundsException
JNU_ToString
Java_java_io_Console_echo
Java_java_io_Console_encoding
Java_java_io_Console_istty
Java_java_io_FileDescriptor_initIDs
Java_java_io_FileDescriptor_set
Java_java_io_FileDescriptor_sync
Java_java_io_FileInputStream_available0
Java_java_io_FileInputStream_close0
Java_java_io_FileInputStream_initIDs
Java_java_io_FileInputStream_open0
Java_java_io_FileInputStream_read0
Java_java_io_FileInputStream_readBytes
Java_java_io_FileInputStream_skip0
Java_java_io_FileOutputStream_close0
Java_java_io_FileOutputStream_initIDs
Java_java_io_FileOutputStream_open0
Java_java_io_FileOutputStream_write
Java_java_io_FileOutputStream_writeBytes
Java_java_io_ObjectInputStream_bytesToDoubles
Java_java_io_ObjectInputStream_bytesToFloats
Java_java_io_ObjectOutputStream_doublesToBytes
Java_java_io_ObjectOutputStream_floatsToBytes
Java_java_io_ObjectStreamClass_hasStaticInitializer
Java_java_io_ObjectStreamClass_initNative
Java_java_io_RandomAccessFile_close0
Java_java_io_RandomAccessFile_getFilePointer
Java_java_io_RandomAccessFile_initIDs
Java_java_io_RandomAccessFile_length
Java_java_io_RandomAccessFile_open0
Java_java_io_RandomAccessFile_read0
Java_java_io_RandomAccessFile_readBytes
Java_java_io_RandomAccessFile_seek0
Java_java_io_RandomAccessFile_setLength
Java_java_io_RandomAccessFile_write0
Java_java_io_RandomAccessFile_writeBytes
Java_java_io_WinNTFileSystem_canonicalize0
Java_java_io_WinNTFileSystem_canonicalizeWithPrefix0
Java_java_io_WinNTFileSystem_checkAccess
Java_java_io_WinNTFileSystem_createDirectory
Java_java_io_WinNTFileSystem_createFileExclusively
Java_java_io_WinNTFileSystem_delete0
Java_java_io_WinNTFileSystem_getBooleanAttributes
Java_java_io_WinNTFileSystem_getDriveDirectory
Java_java_io_WinNTFileSystem_getLastModifiedTime
Java_java_io_WinNTFileSystem_getLength
Java_java_io_WinNTFileSystem_getSpace0
Java_java_io_WinNTFileSystem_initIDs
Java_java_io_WinNTFileSystem_list
Java_java_io_WinNTFileSystem_listRoots0
Java_java_io_WinNTFileSystem_rename0
Java_java_io_WinNTFileSystem_setLastModifiedTime
Java_java_io_WinNTFileSystem_setPermission
Java_java_io_WinNTFileSystem_setReadOnly
Java_java_lang_ClassLoader_00024NativeLibrary_find
Java_java_lang_ClassLoader_00024NativeLibrary_load
Java_java_lang_ClassLoader_00024NativeLibrary_unload
Java_java_lang_ClassLoader_defineClass0
Java_java_lang_ClassLoader_defineClass1
Java_java_lang_ClassLoader_defineClass2
Java_java_lang_ClassLoader_findBootstrapClass
Java_java_lang_ClassLoader_findBuiltinLib
Java_java_lang_ClassLoader_findLoadedClass0
Java_java_lang_ClassLoader_registerNatives
Java_java_lang_ClassLoader_resolveClass0
Java_java_lang_Class_forName0
Java_java_lang_Class_getPrimitiveClass
Java_java_lang_Class_isAssignableFrom
Java_java_lang_Class_isInstance
Java_java_lang_Class_registerNatives
Java_java_lang_Compiler_registerNatives
Java_java_lang_Double_doubleToRawLongBits
Java_java_lang_Double_longBitsToDouble
Java_java_lang_Float_floatToRawIntBits
Java_java_lang_Float_intBitsToFloat
Java_java_lang_Object_getClass
Java_java_lang_Object_registerNatives
Java_java_lang_Package_getSystemPackage0
Java_java_lang_Package_getSystemPackages0
Java_java_lang_ProcessEnvironment_environmentBlock
Java_java_lang_ProcessImpl_closeHandle
Java_java_lang_ProcessImpl_create
Java_java_lang_ProcessImpl_getExitCodeProcess
Java_java_lang_ProcessImpl_getStillActive
Java_java_lang_ProcessImpl_isProcessAlive
Java_java_lang_ProcessImpl_openForAtomicAppend
Java_java_lang_ProcessImpl_terminateProcess
Java_java_lang_ProcessImpl_waitForInterruptibly
Java_java_lang_ProcessImpl_waitForTimeoutInterruptibly
Java_java_lang_Runtime_availableProcessors
Java_java_lang_Runtime_freeMemory
Java_java_lang_Runtime_gc
Java_java_lang_Runtime_maxMemory
Java_java_lang_Runtime_runFinalization0
Java_java_lang_Runtime_totalMemory
Java_java_lang_Runtime_traceInstructions
Java_java_lang_Runtime_traceMethodCalls
Java_java_lang_SecurityManager_classDepth
Java_java_lang_SecurityManager_classLoaderDepth0
Java_java_lang_SecurityManager_currentClassLoader0
Java_java_lang_SecurityManager_currentLoadedClass0
Java_java_lang_SecurityManager_getClassContext
Java_java_lang_Shutdown_beforeHalt
Java_java_lang_Shutdown_halt0
Java_java_lang_StrictMath_IEEEremainder
Java_java_lang_StrictMath_acos
Java_java_lang_StrictMath_asin
Java_java_lang_StrictMath_atan
Java_java_lang_StrictMath_atan2
Java_java_lang_StrictMath_cbrt
Java_java_lang_StrictMath_cos
Java_java_lang_StrictMath_cosh
Java_java_lang_StrictMath_exp
Java_java_lang_StrictMath_expm1
Java_java_lang_StrictMath_hypot
Java_java_lang_StrictMath_log
Java_java_lang_StrictMath_log10
Java_java_lang_StrictMath_log1p
Java_java_lang_StrictMath_pow
Java_java_lang_StrictMath_sin
Java_java_lang_StrictMath_sinh
Java_java_lang_StrictMath_sqrt
Java_java_lang_StrictMath_tan
Java_java_lang_StrictMath_tanh
Java_java_lang_String_intern
Java_java_lang_System_identityHashCode
Java_java_lang_System_initProperties
Java_java_lang_System_mapLibraryName
Java_java_lang_System_registerNatives
Java_java_lang_System_setErr0
Java_java_lang_System_setIn0
Java_java_lang_System_setOut0
Java_java_lang_Thread_registerNatives
Java_java_lang_Throwable_fillInStackTrace
Java_java_lang_Throwable_getStackTraceDepth
Java_java_lang_Throwable_getStackTraceElement
Java_java_lang_reflect_Array_get
Java_java_lang_reflect_Array_getBoolean
Java_java_lang_reflect_Array_getByte
Java_java_lang_reflect_Array_getChar
Java_java_lang_reflect_Array_getDouble
Java_java_lang_reflect_Array_getFloat
Java_java_lang_reflect_Array_getInt
Java_java_lang_reflect_Array_getLength
Java_java_lang_reflect_Array_getLong
Java_java_lang_reflect_Array_getShort
Java_java_lang_reflect_Array_multiNewArray
Java_java_lang_reflect_Array_newArray
Java_java_lang_reflect_Array_set
Java_java_lang_reflect_Array_setBoolean
Java_java_lang_reflect_Array_setByte
Java_java_lang_reflect_Array_setChar
Java_java_lang_reflect_Array_setDouble
Java_java_lang_reflect_Array_setFloat
Java_java_lang_reflect_Array_setInt
Java_java_lang_reflect_Array_setLong
Java_java_lang_reflect_Array_setShort
Java_java_lang_reflect_Executable_getParameters0
Java_java_lang_reflect_Executable_getTypeAnnotationBytes0
Java_java_lang_reflect_Field_getTypeAnnotationBytes0
Java_java_lang_reflect_Proxy_defineClass0
Java_java_nio_Bits_copySwapMemory0
Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedAction_2
Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedAction_2Ljava_security_AccessControlContext_2
Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedExceptionAction_2
Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedExceptionAction_2Ljava_security_AccessControlContext_2
Java_java_security_AccessController_getInheritedAccessControlContext
Java_java_security_AccessController_getStackAccessControlContext
Java_java_util_TimeZone_getSystemGMTOffsetID
Java_java_util_TimeZone_getSystemTimeZoneID
Java_java_util_concurrent_atomic_AtomicLong_VMSupportsCS8
Java_java_util_logging_FileHandler_isSetUID
Java_java_util_prefs_WindowsPreferences_WindowsRegCloseKey
Java_java_util_prefs_WindowsPreferences_WindowsRegCreateKeyEx
Java_java_util_prefs_WindowsPreferences_WindowsRegDeleteKey
Java_java_util_prefs_WindowsPreferences_WindowsRegDeleteValue
Java_java_util_prefs_WindowsPreferences_WindowsRegEnumKeyEx
Java_java_util_prefs_WindowsPreferences_WindowsRegEnumValue
Java_java_util_prefs_WindowsPreferences_WindowsRegFlushKey
Java_java_util_prefs_WindowsPreferences_WindowsRegOpenKey
Java_java_util_prefs_WindowsPreferences_WindowsRegQueryInfoKey
Java_java_util_prefs_WindowsPreferences_WindowsRegQueryValueEx
Java_java_util_prefs_WindowsPreferences_WindowsRegSetValueEx
Java_jdk_internal_util_EnvUtils_getEnvVar
Java_sun_io_Win32ErrorMode_setErrorMode
Java_sun_misc_GC_maxObjectInspectionAge
Java_sun_misc_MessageUtils_toStderr
Java_sun_misc_MessageUtils_toStdout
Java_sun_misc_NativeSignalHandler_handle0
Java_sun_misc_Signal_findSignal
Java_sun_misc_Signal_handle0
Java_sun_misc_Signal_raise0
Java_sun_misc_URLClassPath_getLookupCacheForClassLoader
Java_sun_misc_URLClassPath_getLookupCacheURLs
Java_sun_misc_URLClassPath_knownToNotExist0
Java_sun_misc_VMSupport_getVMTemporaryDirectory
Java_sun_misc_VMSupport_initAgentProperties
Java_sun_misc_VM_getThreadStateValues
Java_sun_misc_VM_initialize
Java_sun_misc_VM_latestUserDefinedLoader0
Java_sun_misc_Version_getJdkSpecialVersion
Java_sun_misc_Version_getJdkVersionInfo
Java_sun_misc_Version_getJvmSpecialVersion
Java_sun_misc_Version_getJvmVersionInfo
Java_sun_reflect_ConstantPool_getClassAt0
Java_sun_reflect_ConstantPool_getClassAtIfLoaded0
Java_sun_reflect_ConstantPool_getDoubleAt0
Java_sun_reflect_ConstantPool_getFieldAt0
Java_sun_reflect_ConstantPool_getFieldAtIfLoaded0
Java_sun_reflect_ConstantPool_getFloatAt0
Java_sun_reflect_ConstantPool_getIntAt0
Java_sun_reflect_ConstantPool_getLongAt0
Java_sun_reflect_ConstantPool_getMemberRefInfoAt0
Java_sun_reflect_ConstantPool_getMethodAt0
Java_sun_reflect_ConstantPool_getMethodAtIfLoaded0
Java_sun_reflect_ConstantPool_getSize0
Java_sun_reflect_ConstantPool_getStringAt0
Java_sun_reflect_ConstantPool_getUTF8At0
Java_sun_reflect_NativeConstructorAccessorImpl_newInstance0
Java_sun_reflect_NativeMethodAccessorImpl_invoke0
Java_sun_reflect_Reflection_getCallerClass__
Java_sun_reflect_Reflection_getCallerClass__I
Java_sun_reflect_Reflection_getClassAccessFlags
Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getAmPmStrings
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarDataValue
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarID
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCurrencySymbol
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDateTimePattern
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDecimalSeparator
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDefaultLocale
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDisplayString
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getEras
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getGroupingSeparator
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInfinity
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInternationalCurrencySymbol
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMinusSign
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonetaryDecimalSeparator
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonths
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNaN
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNumberPattern
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPerMill
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPercent
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortMonths
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortWeekdays
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getWeekdays
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getZeroDigit
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_initialize
Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_isNativeDigit
NewStringPlatform
VerifyClassCodes
VerifyClassCodesForMajorVersion
getEncodingFromLangID
getErrorString
getJavaIDFromLangID
handleLseek
handleRead
jio_fprintf
jio_snprintf
winFileHandleOpen

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab39a562ecdfabf13d806506f868ca7c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

4f:22:94:bc:39:97:49:53:2d:e7:cc:49:49:95:51:d7:d1:f9:f3:bf:92:98:3b:7c:19:11:2d:82:a0:14:e5:93Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

jvm

verify

advapi32

version

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 5KB - Virtual size: 7KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 1024B - Virtual size: 756B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

4f:22:94:bc:39:97:49:53:2d:e7:cc:49:49:95:51:d7:d1:f9:f3:bf:92:98:3b:7c:19:11:2d:82:a0:14:e5:93
Signer

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 5KB - Virtual size: 7KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 1024B - Virtual size: 756B