73493e2d42dc32df3ecae3f0763a10f28efcdcb0ee1fe2eb8a8127beb51aa66cN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

73493e2d42dc32df3ecae3f0763a10f28efcdcb0ee1fe2eb8a8127beb51aa66cN.exe
Size

660KB
MD5

b79ab5bd1e288cc622a3ede892fcd2d0
SHA1

4e35192584c1744e32ec7a5cbe755597526b4438
SHA256

73493e2d42dc32df3ecae3f0763a10f28efcdcb0ee1fe2eb8a8127beb51aa66c
SHA512

615ef2872d12fb571e7c93820c1a89466ef7b351a754260ffe875caac2af1de4485eece1f64e6ae310e4a558ca47c82f3db096475f4a229bb152080260413f1c
SSDEEP

12288:W829hvv5MTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:W/vCSkQ/7Gb8NLEbeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73493e2d42dc32df3ecae3f0763a10f28efcdcb0ee1fe2eb8a8127beb51aa66cN.exe

Files

73493e2d42dc32df3ecae3f0763a10f28efcdcb0ee1fe2eb8a8127beb51aa66cN.exe
.exe windows:6 windows x64 arch:x64

f6b0c5270f671fa3af66f4f99bd01160

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\jenkins\workspace\8-2-build-windows-x64-cygwin-sans-NAS\jdk8u421\1068\build\windows-x64\deploy\tmp\javacplexec\obj64\javacpl.pdb

Imports

user32

GetWindowThreadProcessId
CloseDesktop
OpenInputDesktop
MessageBoxW
wsprintfW
GetShellWindow
LoadStringW

kernel32

LocalAlloc
WideCharToMultiByte
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RaiseException
GetEnvironmentVariableW
GetLongPathNameW
CloseHandle
GetLastError
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
FormatMessageW
VerSetConditionMask
CreateFileW
GetShortPathNameW
GetTempPathW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
GetCurrentProcess
CreateProcessW
OpenProcess
GlobalMemoryStatusEx
GetLocalTime
GetSystemDirectoryW
GetWindowsDirectoryW
GetVersionExW
GetNativeSystemInfo
GetModuleHandleW
GlobalAlloc
GlobalFree
MultiByteToWideChar
LocalFree
lstrlenW
VerifyVersionInfoW
WTSGetActiveConsoleSessionId
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead

ole32

StringFromCLSID
CoTaskMemFree

oleaut32

SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString
SysStringLen

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy
__std_exception_copy
memset
_CxxThrowException
memcpy
__current_exception
__current_exception_context
__C_specific_handler

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__stdio_common_vswprintf_s
_wfopen_s
__stdio_common_vfwprintf_s
fclose
__stdio_common_vsnwprintf_s
__p__commode

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_wsplitpath_s
_stat64i32

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_crt_atexit
_initialize_onexit_table
_configure_narrow_argv
_cexit
terminate
_set_app_type
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_errno
_c_exit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_invalid_parameter_noinfo
_initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
malloc
_callnewh

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-environment-l1-1-0

_wdupenv_s
_wputenv

api-ms-win-crt-string-l1-1-0

wcscat_s
wcscpy_s
wcscmp
_wcsicmp
wcsncpy_s

api-ms-win-crt-time-l1-1-0

_ftime64_s
_localtime64
wcsftime

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f6b0c5270f671fa3af66f4f99bd01160

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

kernel32

ole32

oleaut32

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 32KB - Virtual size: 32KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 32KB - Virtual size: 32KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 32KB - Virtual size: 32KB

.reloc
Size: 568KB - Virtual size: 572KB