oxygen-64bit-openjdk[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

oxygen-64bit-openjdk.exe
Size

358.0MB
MD5

daafbfa9f7e9d822003264767bc6c229
SHA1

52ba6a108f5cbd844016047cbfb642ad99ae09d3
SHA256

c6e6dc83878cdd402e56e558468c47f5748b7811d012dfefe14d5efc491d9b84
SHA512

e8a77227f15e1abdfafc8999e86d34b3b422037a8838b4c876f5918d2cb1c021b1786155ab73b7baf95aae60c4fb9f89c905e98c7beb57aa8513b395cea6b1a7
SSDEEP

6291456:S8JYpfeQNrxEKfDOy61Qrdk0A12hpW86MjuHp4r2VkrIXef4R2kD8rOwNTySWBqq:S8JGf0KrOis2ho86MjuH2tca4R1M1G5

Score

1^/10

Malware Config

Signatures

Files

oxygen-64bit-openjdk.exe
.exe windows:6 windows x64 arch:x64

e9bb4b1e130c95413050fc074b05db2b

Code Sign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:b0:52:4f:af:b3:27:be:14:3a:3b:a8:d4:31:3b:4d
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

26/10/2023, 00:00

Not After

25/10/2026, 23:59

Subject

SERIALNUMBER=J16 /564 /1998,CN=Syncro Soft SRL,O=Syncro Soft SRL,ST=Dolj,C=RO,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302524f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ef:66:70:1c:30:b9:d8:50:64:9a:d7:a9:1c:cb:12:65:5a:d9:4e:86:7d:62:f9:4f:95:32:97:7c:96:ec:58:5f
Signer

Actual PE Digest

ef:66:70:1c:30:b9:d8:50:64:9a:d7:a9:1c:cb:12:65:5a:d9:4e:86:7d:62:f9:4f:95:32:97:7c:96:ec:58:5f

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

CopyRect
OffsetRect
GetDesktopWindow
GetParent
GetWindowRect
SetWindowPos
MonitorFromPoint
ShowWindow
IsWindowVisible
IsIconic
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
DestroyIcon
FlashWindow
GetMonitorInfoA
MonitorFromWindow
SetWindowLongPtrA
GetWindowLongA
FillRect
GetClientRect
SetMenuDefaultItem
SetMenuItemInfoA
TrackPopupMenu
GetSystemMenu
IsZoomed
CallWindowProcA
PostMessageA
SendMessageA
LoadIconW
FindWindowW
RegisterClipboardFormatW
GetWindow
GetClassNameW
GetWindowLongPtrW
GetWindowTextW
GetWindowPlacement
PostMessageW
SendMessageTimeoutW
wsprintfW
LoadIconA
LoadCursorA
MessageBoxA
SetWindowTextW
EnableWindow
DefDlgProcW
SetDlgItemTextW
GetDlgItem
EndDialog
DialogBoxParamA
RegisterClassW
SendDlgItemMessageW
SendDlgItemMessageA
ExitWindowsEx
GetLastActivePopup
GetWindowThreadProcessId
EnumWindows
FindWindowA
SetForegroundWindow
MessageBoxW

advapi32

RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
LookupAccountSidW
StartServiceW
QueryServiceStatus
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
GetLengthSid
CopySid
LookupPrivilegeValueW
RegQueryValueExW
RegOpenKeyExW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
LookupAccountNameW
FreeSid
AllocateAndInitializeSid
RegDeleteValueA
LookupPrivilegeValueA
AdjustTokenPrivileges
ConvertSidToStringSidA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
OpenProcessToken
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCreateKeyExA
RegCloseKey

ole32

GetHGlobalFromStream
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal
CoTaskMemFree
CoInitialize
ReleaseStgMedium
CoCreateInstance

oleaut32

SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SysFreeString

kernel32

IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetStartupInfoW
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
SetFilePointerEx
GetCurrentDirectoryW
GetConsoleMode
ReadConsoleW
HeapFree
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
OutputDebugStringW
GetTimeZoneInformation
GetFileSizeEx
SetStdHandle
SetEndOfFile
HeapReAlloc
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetProcessHeap
RtlCaptureContext
GetLongPathNameA
DeleteCriticalSection
InitializeCriticalSectionEx
MoveFileExW
CreateSemaphoreW
RemoveDirectoryW
CreateDirectoryW
FormatMessageW
GetCurrentThread
GlobalFree
WaitNamedPipeW
CreateNamedPipeW
DisconnectNamedPipe
ConnectNamedPipe
CreateDirectoryA
CreateFileA
CreateFileW
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetLastError
GetProcAddress
LoadLibraryA
GetUserDefaultLCID
GetStdHandle
FlushFileBuffers
GetFileType
GetLongPathNameW
GetTempFileNameW
RemoveDirectoryA
ExitProcess
CreateProcessW
GetModuleFileNameW
WriteConsoleW
GetEnvironmentVariableA
GetEnvironmentVariableW
DeleteFileA
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
GetFullPathNameW
GetFullPathNameA
HeapSize
GetShortPathNameW
GetTempPathW
AreFileApisANSI
GetTempPathA
GetTempFileNameA
SetHandleInformation
CreatePipe
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
GetWindowsDirectoryA
GetWindowsDirectoryW
GetModuleFileNameA
GetShortPathNameA
FoldStringW
MultiByteToWideChar
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WaitForSingleObject
CreateThread
GetExitCodeThread
GetModuleHandleA
GetConsoleOutputCP
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
SearchPathA
CreateProcessA
GetVersionExA
DeleteFileW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCommandLineW
Sleep
GetCurrentProcess
LocalAlloc
LocalFree
CreateMailslotA
GetMailslotInfo
CreateSemaphoreA
LoadResource
LockResource
SizeofResource
GlobalSize
GlobalUnlock
GlobalLock
FindResourceA
GetTickCount
GetConsoleTitleA
SetConsoleTitleA
SetEnvironmentVariableW
SetCurrentDirectoryW
LoadLibraryExA
AllocConsole
SetThreadPriority
WideCharToMultiByte
GetModuleHandleW
LoadLibraryExW
GetDriveTypeW
GetSystemDirectoryW
LoadLibraryW
GetDiskFreeSpaceExW
WaitForMultipleObjects
GetProcessId
OpenProcess
GetNativeSystemInfo
FreeLibrary
GetModuleHandleExW
GlobalMemoryStatus
GetConsoleTitleW
SetConsoleTitleW
SetLastError

Exports

Exports

Java_com_install4j_runtime_installer_platform_win32_ACLHandling_addACE
Java_com_install4j_runtime_installer_platform_win32_FileVersion_compare0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getDriveType0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getPathFromRegistry0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getShortPathName0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getSpecialFolder0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getSystemDirectory0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getUniversalPathName0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getWindowsDirectory0
Java_com_install4j_runtime_installer_platform_win32_Misc_broadcastSettingChange0
Java_com_install4j_runtime_installer_platform_win32_Misc_getEnvVarPairs0
Java_com_install4j_runtime_installer_platform_win32_Misc_getFreeDiskSpace0
Java_com_install4j_runtime_installer_platform_win32_Misc_getMachine0
Java_com_install4j_runtime_installer_platform_win32_Misc_getOsBuildNumber0
Java_com_install4j_runtime_installer_platform_win32_Misc_getPhysicalMemory0
Java_com_install4j_runtime_installer_platform_win32_Misc_getPidFromHandle0
Java_com_install4j_runtime_installer_platform_win32_Misc_getRunningModules0
Java_com_install4j_runtime_installer_platform_win32_Misc_getTopLevelWindows0
Java_com_install4j_runtime_installer_platform_win32_Misc_getWindowTitle0
Java_com_install4j_runtime_installer_platform_win32_Misc_moveWithDelayUntilReboot0
Java_com_install4j_runtime_installer_platform_win32_Misc_reboot0
Java_com_install4j_runtime_installer_platform_win32_Misc_registerExtensionFunctions0
Java_com_install4j_runtime_installer_platform_win32_Misc_setForegroundWindow0
Java_com_install4j_runtime_installer_platform_win32_Misc_terminateProcesses0
Java_com_install4j_runtime_installer_platform_win32_Misc_toFront0
Java_com_install4j_runtime_installer_platform_win32_ObjectPicker_show0
Java_com_install4j_runtime_installer_platform_win32_Registry_changeNotifyAssociations0
Java_com_install4j_runtime_installer_platform_win32_Registry_createKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_deleteKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_deleteValue0
Java_com_install4j_runtime_installer_platform_win32_Registry_enumSubKeys0
Java_com_install4j_runtime_installer_platform_win32_Registry_enumValues0
Java_com_install4j_runtime_installer_platform_win32_Registry_getValue0
Java_com_install4j_runtime_installer_platform_win32_Registry_keyExists0
Java_com_install4j_runtime_installer_platform_win32_Registry_restoreKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_saveKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_setValue0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_changeNotify0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_create0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_createWide0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_initialize0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_uninitialize
Java_com_install4j_runtime_installer_platform_win32_VistaFileChooser_displayDialog0
Java_com_install4j_runtime_installer_platform_win32_VistaFileChooser_initialize0
Java_com_install4j_runtime_installer_platform_win32_VistaTaskDialog_init0
Java_com_install4j_runtime_installer_platform_win32_VistaTaskDialog_show0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_closeHandle0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_connectClient0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_connectNamedPipe0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_createCurrentUserSecurityAttributes0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_createListener0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_disconnectNamedPipe0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_getCurrentProcessId0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_getInvalidHandle0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_isProcessAlive0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_readDataBlock0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_writeDataBlock0
Java_com_install4j_runtime_installer_platform_win32_Win32Exec_launch0
Java_com_install4j_runtime_installer_platform_win32_Win32Firewall_addRule0
Java_com_install4j_runtime_installer_platform_win32_Win32Firewall_deleteRules0
Java_com_install4j_runtime_installer_platform_win32_Win32Firewall_getCurrentProfileTypes0
Java_com_install4j_runtime_installer_platform_win32_Win32Firewall_initialize0
Java_com_install4j_runtime_installer_platform_win32_Win32Handle_close0
Java_com_install4j_runtime_installer_platform_win32_Win32Handle_getDeviceName0
Java_com_install4j_runtime_installer_platform_win32_Win32Handle_list0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_getAutoProxyConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_getDefaultConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_getIEConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_loadFunctions0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_changeServiceConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_getServiceBinary0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_getStartType0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_installService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_queryStatus0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_setDelayedAutoStart0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_setRestartServiceConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_startService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_stopService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_uninstallService0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_addUser0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_deleteLocalGroup0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_deleteUser0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_executeElevated0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getAccountName0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getElevationType0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getUserProfileDirectory0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getUserSid0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_isMemberOfGroup0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_setLsaAccountRight0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_createHIcon0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_destroyHIcon0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_flashWindow0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_getHwnd0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_getPeer0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_initTaskBar0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_setOverlayIcon0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_setProgress0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_setState0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_clearError0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_connect0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_destroy0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getErrorCode0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getErrorLocation0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getErrorMessage0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getHeaders0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_init0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_internetErrorDlg0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_openRequest0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_read0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_sendRequest0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_setDwordOption0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_setOption0
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_installImpl
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_setWindowBackground
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_showWindow
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_uninstallImpl
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_updateFrame
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_registryGetIntValue
registerNatives
registerNativesEx
registerNativesFlatlaf

Sections

.text
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9bb4b1e130c95413050fc074b05db2b

Code Sign

01Certificate

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

4b:b0:52:4f:af:b3:27:be:14:3a:3b:a8:d4:31:3b:4dCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

ef:66:70:1c:30:b9:d8:50:64:9a:d7:a9:1c:cb:12:65:5a:d9:4e:86:7d:62:f9:4f:95:32:97:7c:96:ec:58:5fSigner

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

ole32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 423KB - Virtual size: 423KB

.rdata Size: 206KB - Virtual size: 205KB

.data Size: 7KB - Virtual size: 74KB

.pdata Size: 18KB - Virtual size: 17KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 368KB - Virtual size: 368KB

.reloc Size: 3KB - Virtual size: 2KB

01
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

4b:b0:52:4f:af:b3:27:be:14:3a:3b:a8:d4:31:3b:4d
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

ef:66:70:1c:30:b9:d8:50:64:9a:d7:a9:1c:cb:12:65:5a:d9:4e:86:7d:62:f9:4f:95:32:97:7c:96:ec:58:5f
Signer

.text
Size: 423KB - Virtual size: 423KB

.rdata
Size: 206KB - Virtual size: 205KB

.data
Size: 7KB - Virtual size: 74KB

.pdata
Size: 18KB - Virtual size: 17KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 368KB - Virtual size: 368KB

.reloc
Size: 3KB - Virtual size: 2KB