d3eec9f995115f0de4c564195c7a566a919ba36ce7752a85d330912462a397e8[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

d3eec9f995115f0de4c564195c7a566a919ba36ce7752a85d330912462a397e8.exe
Size

103KB
MD5

68660bd152a3d0fa4938c9d47824b583
SHA1

9583c88bccbcfc0f18b9f4a16736f272249a723a
SHA256

d3eec9f995115f0de4c564195c7a566a919ba36ce7752a85d330912462a397e8
SHA512

490006a6e368bd3bdd19d59623c52bf09d65e7378a8154891a9030632eefc64ddf76ef3f50b2d13d2787521c9b1b818fdae0ab6cb39731fe3a89bd07be67fd9d
SSDEEP

3072:CzbpE276H/ObrExhFf0MuyMTzG32zFkX3xC:8W2q2yhFMMuL82xb

Score

1^/10

Malware Config

Signatures

Files

d3eec9f995115f0de4c564195c7a566a919ba36ce7752a85d330912462a397e8.exe
.dll windows:6 windows x64 arch:x64

60dc320f45dec0714e7d537390c712e2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a9:0f:07:8c:08:78:61:3b:25:b6:61:ef:29:d2:de:f4:09:d0:f2:14:43:3a:f6:06:28:4d:22:f8:70:25:67:bb
Signer

Actual PE Digest

a9:0f:07:8c:08:78:61:3b:25:b6:61:ef:29:d2:de:f4:09:d0:f2:14:43:3a:f6:06:28:4d:22:f8:70:25:67:bb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\8-2-build-windows-x64-cygwin\jdk8u361\3183\build\windows-x64\jdk\objs\libnet\net.pdb

Imports

ws2_32

WSACleanup
WSAStartup
getprotobyname
recv
getnameinfo
freeaddrinfo
getaddrinfo
WSAEventSelect
WSACreateEvent
WSACloseEvent
gethostname
gethostbyname
gethostbyaddr
ntohl
WSASendDisconnect
htonl
getsockopt
bind
shutdown
send
listen
closesocket
accept
__WSAFDIsSet
WSAIoctl
WSAGetLastError
WSASetLastError
socket
setsockopt
sendto
select
recvfrom
ntohs
getsockname
ioctlsocket
connect
htons

jvm

jio_snprintf
JVM_InitializeSocketLibrary
JVM_CurrentTimeMillis

java

getErrorString
JNU_ThrowByNameWithMessageAndLastError
JNU_NewStringPlatform
JNU_ThrowOutOfMemoryError
JNU_ThrowByName
JNU_ThrowByNameWithLastError
JNU_ThrowNullPointerException
JNU_ReleaseStringPlatformChars
JNU_GetStringPlatformChars
JDK_LoadSystemLibrary

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

kernel32

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetLastError
RaiseException
SetUnhandledExceptionFilter
EnterCriticalSection
InitializeCriticalSection
GetOverlappedResult
MultiByteToWideChar
GetProcAddress
VerifyVersionInfoW
FormatMessageA
LocalFree
VerSetConditionMask
Sleep
SetHandleInformation
UnhandledExceptionFilter
GetCurrentProcess
LeaveCriticalSection
GetVersionExA
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
TerminateProcess

vcruntime140

__C_specific_handler
strchr
memset
memcpy
__std_type_info_destroy_list
strstr

api-ms-win-crt-string-l1-1-0

isspace
strcpy
strncmp
strcmp
strtok
wcslen
strncpy_s
strncpy
strlen
wcscpy
strcat

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vsnprintf_s

api-ms-win-crt-heap-l1-1-0

realloc
calloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_errno

Exports

Exports

JNI_OnLoad
Java_java_net_DatagramPacket_init
Java_java_net_DualStackPlainDatagramSocketImpl_dataAvailable
Java_java_net_DualStackPlainDatagramSocketImpl_initIDs
Java_java_net_DualStackPlainDatagramSocketImpl_socketBind
Java_java_net_DualStackPlainDatagramSocketImpl_socketClose
Java_java_net_DualStackPlainDatagramSocketImpl_socketConnect
Java_java_net_DualStackPlainDatagramSocketImpl_socketCreate
Java_java_net_DualStackPlainDatagramSocketImpl_socketDisconnect
Java_java_net_DualStackPlainDatagramSocketImpl_socketGetIntOption
Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalAddress
Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalPort
Java_java_net_DualStackPlainDatagramSocketImpl_socketReceiveOrPeekData
Java_java_net_DualStackPlainDatagramSocketImpl_socketSend
Java_java_net_DualStackPlainDatagramSocketImpl_socketSetIntOption
Java_java_net_DualStackPlainSocketImpl_accept0
Java_java_net_DualStackPlainSocketImpl_available0
Java_java_net_DualStackPlainSocketImpl_bind0
Java_java_net_DualStackPlainSocketImpl_close0
Java_java_net_DualStackPlainSocketImpl_configureBlocking
Java_java_net_DualStackPlainSocketImpl_connect0
Java_java_net_DualStackPlainSocketImpl_getIntOption
Java_java_net_DualStackPlainSocketImpl_initIDs
Java_java_net_DualStackPlainSocketImpl_listen0
Java_java_net_DualStackPlainSocketImpl_localAddress
Java_java_net_DualStackPlainSocketImpl_localPort0
Java_java_net_DualStackPlainSocketImpl_sendOOB
Java_java_net_DualStackPlainSocketImpl_setIntOption
Java_java_net_DualStackPlainSocketImpl_shutdown0
Java_java_net_DualStackPlainSocketImpl_socket0
Java_java_net_DualStackPlainSocketImpl_waitForConnect
Java_java_net_DualStackPlainSocketImpl_waitForNewConnection
Java_java_net_Inet4AddressImpl_getHostByAddr
Java_java_net_Inet4AddressImpl_getLocalHostName
Java_java_net_Inet4AddressImpl_isReachable0
Java_java_net_Inet4AddressImpl_lookupAllHostAddr
Java_java_net_Inet4Address_init
Java_java_net_Inet6AddressImpl_getHostByAddr
Java_java_net_Inet6AddressImpl_getLocalHostName
Java_java_net_Inet6AddressImpl_isReachable0
Java_java_net_Inet6AddressImpl_lookupAllHostAddr
Java_java_net_Inet6Address_init
Java_java_net_InetAddressImplFactory_isIPv6Supported
Java_java_net_InetAddress_init
Java_java_net_NetworkInterface_getAll
Java_java_net_NetworkInterface_getAll_XP
Java_java_net_NetworkInterface_getByIndex0
Java_java_net_NetworkInterface_getByIndex0_XP
Java_java_net_NetworkInterface_getByInetAddress0
Java_java_net_NetworkInterface_getByInetAddress0_XP
Java_java_net_NetworkInterface_getByName0
Java_java_net_NetworkInterface_getByName0_XP
Java_java_net_NetworkInterface_getMTU0
Java_java_net_NetworkInterface_getMTU0_XP
Java_java_net_NetworkInterface_getMacAddr0
Java_java_net_NetworkInterface_getMacAddr0_XP
Java_java_net_NetworkInterface_init
Java_java_net_NetworkInterface_isLoopback0
Java_java_net_NetworkInterface_isLoopback0_XP
Java_java_net_NetworkInterface_isP2P0
Java_java_net_NetworkInterface_isP2P0_XP
Java_java_net_NetworkInterface_isUp0
Java_java_net_NetworkInterface_isUp0_XP
Java_java_net_NetworkInterface_supportsMulticast0
Java_java_net_NetworkInterface_supportsMulticast0_XP
Java_java_net_SocketInputStream_init
Java_java_net_SocketInputStream_socketRead0
Java_java_net_SocketOutputStream_init
Java_java_net_SocketOutputStream_socketWrite0
Java_java_net_TwoStacksPlainDatagramSocketImpl_bind0
Java_java_net_TwoStacksPlainDatagramSocketImpl_connect0
Java_java_net_TwoStacksPlainDatagramSocketImpl_dataAvailable
Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketClose
Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketCreate
Java_java_net_TwoStacksPlainDatagramSocketImpl_disconnect0
Java_java_net_TwoStacksPlainDatagramSocketImpl_getTTL
Java_java_net_TwoStacksPlainDatagramSocketImpl_getTimeToLive
Java_java_net_TwoStacksPlainDatagramSocketImpl_init
Java_java_net_TwoStacksPlainDatagramSocketImpl_join
Java_java_net_TwoStacksPlainDatagramSocketImpl_leave
Java_java_net_TwoStacksPlainDatagramSocketImpl_peek
Java_java_net_TwoStacksPlainDatagramSocketImpl_peekData
Java_java_net_TwoStacksPlainDatagramSocketImpl_receive0
Java_java_net_TwoStacksPlainDatagramSocketImpl_send
Java_java_net_TwoStacksPlainDatagramSocketImpl_setTTL
Java_java_net_TwoStacksPlainDatagramSocketImpl_setTimeToLive
Java_java_net_TwoStacksPlainDatagramSocketImpl_socketGetOption
Java_java_net_TwoStacksPlainDatagramSocketImpl_socketLocalAddress
Java_java_net_TwoStacksPlainDatagramSocketImpl_socketNativeSetOption
Java_java_net_TwoStacksPlainSocketImpl_initProto
Java_java_net_TwoStacksPlainSocketImpl_socketAccept
Java_java_net_TwoStacksPlainSocketImpl_socketAvailable
Java_java_net_TwoStacksPlainSocketImpl_socketBind
Java_java_net_TwoStacksPlainSocketImpl_socketClose0
Java_java_net_TwoStacksPlainSocketImpl_socketConnect
Java_java_net_TwoStacksPlainSocketImpl_socketCreate
Java_java_net_TwoStacksPlainSocketImpl_socketGetOption
Java_java_net_TwoStacksPlainSocketImpl_socketListen
Java_java_net_TwoStacksPlainSocketImpl_socketNativeSetOption
Java_java_net_TwoStacksPlainSocketImpl_socketSendUrgentData
Java_java_net_TwoStacksPlainSocketImpl_socketShutdown
Java_sun_net_PortConfig_getLower0
Java_sun_net_PortConfig_getUpper0
Java_sun_net_dns_ResolverConfigurationImpl_init0
Java_sun_net_dns_ResolverConfigurationImpl_loadDNSconfig0
Java_sun_net_dns_ResolverConfigurationImpl_notifyAddrChange0
Java_sun_net_spi_DefaultProxySelector_getSystemProxy
Java_sun_net_spi_DefaultProxySelector_init
Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getCredentialsHandle
Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getNextToken
Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_initFirst
Java_sun_net_www_protocol_http_ntlm_NTLMAuthentication_isTrustedSite0
Java_sun_net_www_protocol_http_ntlm_NTLMAuthentication_isTrustedSiteAvailable0
NET_Bind
NET_BindV6
NET_EnableFastTcpLoopback
NET_GetPortFromSockaddr
NET_GetSockOpt
NET_InetAddressToSockaddr
NET_MapSocketOption
NET_MapSocketOptionV6
NET_SetSockOpt
NET_SockaddrEqualsInetAddress
NET_SockaddrToInetAddress
NET_SocketClose
NET_ThrowNew
NET_Timeout
NET_Timeout2
NET_WinBind
initInetAddressIDs
ipv6_available

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60dc320f45dec0714e7d537390c712e2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

a9:0f:07:8c:08:78:61:3b:25:b6:61:ef:29:d2:de:f4:09:d0:f2:14:43:3a:f6:06:28:4d:22:f8:70:25:67:bbSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

jvm

java

advapi32

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 512B - Virtual size: 184B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

a9:0f:07:8c:08:78:61:3b:25:b6:61:ef:29:d2:de:f4:09:d0:f2:14:43:3a:f6:06:28:4d:22:f8:70:25:67:bb
Signer

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 512B - Virtual size: 184B