JMatPro Patch.rar
- SHA256 d5fe39f815e447c99a20ef82305ab103ca53073a878bcf5a3fb26c6cd55ce684
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JMatPro Patch/HASPJava.dll
Resource
win11-20260911-en
windows11-21h2-x64
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
JMatPro Patch/HASPJava1.dll
Resource
win11-20260911-en
windows11-21h2-x64
3 signatures
300 seconds
Behavioral task
behavioral3
Sample
JMatPro Patch/JMatPro2.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
JMatPro Patch/LIB32.dll
Resource
win11-20260911-en
windows11-21h2-x64
3 signatures
300 seconds
General
- Target JMatPro Patch.rar
- Size 17.6MB
- Sample261002-nbrslsswft
- SHA256 d5fe39f815e447c99a20ef82305ab103ca53073a878bcf5a3fb26c6cd55ce684
- MD5 d9b11b0f59c36523b839fe2b802cffc5
- SHA1 41a4b4e37db2cd0cebf571e98a234da8d50e5513
- SHA512 ec5fea8992ef7fb92e38478c0f3bf5d7a6323935162ebbbe54b7cb3516665ead2b90e5aef09c1c69d78c2b15047b506cc7b654e6fe230d4fdee36585b5d363c3
- SSDEEP 393216:yaLYxJYOdUJH7YVlGIkAVHhgX+PaMT2+Cbc6k3qcLas1p:yaUxmOd8HkHGIkARh+ajT2WT3xz1p
- TLSH T1450733105DF4C41B69773721E54E6AFE92C2E820C93579F3B2AA18F7153144B9838EEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/JMatPro Patch/HASPJava.dll unpack001/JMatPro Patch/HASPJava1.dll unpack001/JMatPro Patch/JMatPro2.exe unpack001/JMatPro Patch/LIB32.DLL
File Explorer
-
JMatPro Patch.rar.rar 17.6MB
-
JMatPro Patch/HASPJava.dll.dll 3.7MB
-
JMatPro Patch/HASPJava1.dll.dll 6.4MB
-
JMatPro Patch/JMatPro2.exe.exe 19.3MB
-
JMatPro Patch/LIB32.DLL.dll 2.3MB
-
JMatPro Patch/regkey.dat457B
JMatPro Patch/HASPJava.dll
- SHA256 e1ae0720823cfd700fa80bbdd476a9db5483511f88a4ef56fadd9ee16d2f9823
- MD5 64bf307e044550ad9061d5fb05da69c3
- SHA1 f68cacc489bd48f8c3df64d8138c4359b866df60
- SHA512 ad486e5d6e1cbd0d1c7becd2369c71b0588b3062c27191a789c2cb22c07d40e6dae51e7c354b8fc87a47250da25b11da88b8257c08fb0c688f92ee2e46689f4b
- SSDEEP 98304:YJTGuTqy+eWSAJIoJKR43Q9dn8fmYW+4T58/Z73DrF:YJquGy+fSA+9QQ9d8fRJx7Tr
- TLSH T11E0633FB56A2FEC2C21D70B3A3D3ED0555D1077A68ADA61D73D89D148CD4AA3A327C04
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
9822208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
_Java_Aladdin_HaspApiVersion_GetVersion@28
_Java_Aladdin_HaspTime_DatetimeToHasptime@36
_Java_Aladdin_HaspTime_HasptimeToDatetime@40
_Java_Aladdin_Hasp_Decrypt@20
_Java_Aladdin_Hasp_Encrypt@20
_Java_Aladdin_Hasp_GetInfo@24
_Java_Aladdin_Hasp_GetRtc@16
_Java_Aladdin_Hasp_GetSessioninfo@20
_Java_Aladdin_Hasp_GetSize@24
_Java_Aladdin_Hasp_LegacyDecrypt@20
_Java_Aladdin_Hasp_LegacyEncrypt@20
_Java_Aladdin_Hasp_LegacySetIdletime@16
_Java_Aladdin_Hasp_LegacySetRtc@20
_Java_Aladdin_Hasp_Login@24
_Java_Aladdin_Hasp_LoginScope@28
_Java_Aladdin_Hasp_Logout@12
_Java_Aladdin_Hasp_Read@32
_Java_Aladdin_Hasp_Transfer@28
_Java_Aladdin_Hasp_Update@16
_Java_Aladdin_Hasp_UpdateSession@16
_Java_Aladdin_Hasp_Write@32
Name
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
544B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
233B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
1024B
Virtual Size
700B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.edata
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.winlice
Size
Virtual Size
5.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.new
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
JMatPro Patch/HASPJava1.dll
- SHA256 ca679c9c0bf6d5846f39570e0af6e199222d8edf3368a12691f4a160cfbb9d5a
- MD5 6bee63f642ada92f3c083b0bfa62e065
- SHA1 e9a768a1b0237ef1a4375d7c9c4f9b3cb77fd6e6
- SHA512 af129a699328f780d3d6589cbd44d25841505842a030f75b30bd3806ceb93213f8316fb4109071fd010accb95cff03b32edc78b4441ade220396c5140c9f3ec2
- SSDEEP 196608:lmuq12+/Yee1x7qsYBe+auuXVpQSGU0wcJf:R+/YD7ZbuuXc
- TLSH T17466333798852CC3E7768F72FCE606146DE08A214E662339D2AF378B05D096DDB72D94
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
13811712
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
_Java_Aladdin_HaspApiVersion_GetVersion@28
_Java_Aladdin_HaspTime_DatetimeToHasptime@36
_Java_Aladdin_HaspTime_HasptimeToDatetime@40
_Java_Aladdin_Hasp_Decrypt@20
_Java_Aladdin_Hasp_Encrypt@20
_Java_Aladdin_Hasp_GetInfo@24
_Java_Aladdin_Hasp_GetRtc@16
_Java_Aladdin_Hasp_GetSessioninfo@20
_Java_Aladdin_Hasp_GetSize@24
_Java_Aladdin_Hasp_LegacyDecrypt@20
_Java_Aladdin_Hasp_LegacyEncrypt@20
_Java_Aladdin_Hasp_LegacySetIdletime@16
_Java_Aladdin_Hasp_LegacySetRtc@20
_Java_Aladdin_Hasp_Login@24
_Java_Aladdin_Hasp_LoginScope@28
_Java_Aladdin_Hasp_Logout@12
_Java_Aladdin_Hasp_Read@32
_Java_Aladdin_Hasp_Transfer@28
_Java_Aladdin_Hasp_Update@16
_Java_Aladdin_Hasp_UpdateSession@16
_Java_Aladdin_Hasp_Write@32
Name
Size
2.3MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
92KB
Virtual Size
656KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
133KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.edata
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.winlice
Size
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.new
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=10, id=259, version=30795,
count=148, id=261, version=30795,
count=20, id=260, version=30795,
count=30, id=261, version=32533,
count=15, id=260, version=32533,
count=20, id=259, version=32533,
count=1, productName=Unmarked objects (old),
count=3, id=257, version=30795,
count=153, id=1, productName=Unmarked objects,
count=2, id=264, version=32825,
count=1, id=256, version=32825,
count=1, id=255, version=32825,
count=1, id=258, version=32825,
JMatPro Patch/JMatPro2.exe
- IMPHASH 6e8c3b6e91c44179301c6a2931e1a4ad
- SHA256 6114a7eb1b7caf7801849a0f939f39c8e244162321ccb531d37394ac4bdac42c
- MD5 db18a6b6feac8ae4ea4b924b81a07a1b
- SHA1 ee2291cb258456492fb7f969ff95e54636584bd5
- SHA512 2feb7443e6840d89385eb0a88ef19e0dd9c6ccdb427aa01ce97da7c7f7bee89740a2d0b23c08bce5d8e89bfe5b58afe0eaeb36193aee91c2b80d6a40490cc3a0
- SSDEEP 196608:onUUoM9Usmi+gB/UOmi+V/L1aDKv8Gu9M/mgGfWrMvuCxc3iV8IL6mHG:6oMusmi+OgqjLkmgGfWoU3iys6mm
- TLSH T185178C42FFD203B9DEA315715277A33BBABEBE44C834978FB358961D2D31A104916728
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
16048
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
DeregisterEventSource
kernel32
WriteFile
LoadLibraryA
HeapReAlloc
HeapFree
HeapAlloc
GetStdHandle
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetCommandLineA
FindNextFileA
FindFirstFileA
FindClose
ExitProcess
user32
wvsprintfA
MessageBoxA
Name
.text
Size
10.9MB
Virtual Size
10.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
484KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
4.5MB
Virtual Size
4.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.jidata
Size
96KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.jedata
Size
202KB
Virtual Size
204KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
548KB
Virtual Size
548KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
300KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.config
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
JMatPro Patch/LIB32.DLL
- SHA256 685b2cd35a7e3a0efdb081f62a93e9d9ef48da6f3f849f6e0fed5e0ec1ddc605
- MD5 8da6e4daa5d8a05ba3ea30182beaf018
- SHA1 761f75458575a5ca1a04d1651827711ef9ec2cec
- SHA512 a43dfe0d3954289808e85b95d506f0b877041107c4bef01e662ee8237d646ca2e1fda1493a1a8a552fdfa3f8c0ef69e7a8b61e71bb740f647750735c0ce267b6
- SSDEEP 49152:8H4UmNHagwCL595pwibKv6hUgAyymcGSClBL0SYQREHsfas:8HFmNHagXpXI6w1ElBL0Xsis
- TLSH T1B0B53341EC72343FFEE6BC35E6D58889332942780815E24E29864196A6D3767FF43F86
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
9674692
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
expfunc
Name
Size
28KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
9KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
191KB
Virtual Size
7.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=11, id=241, version=40116,
count=118, id=243, version=40116,
count=24, id=242, version=40116,
count=30, id=261, version=26706,
count=15, id=260, version=26706,
count=18, id=259, version=26706,
count=3, id=261, version=24245,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=104, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
JMatPro Patch/regkey.dat
- SHA256 a39342f8d4eee315550e21786f8797ac5818df67f29fe47d90f6e709c70d427d
- MD5 06cf37972e2c5b885a61c03479ea06a9
- SHA1 47132f6470d3334722449ce3353ef98c5b85dad9
- SHA512 f777dfb5a0ea135bf7dbbc3e146cd616966578785b2d5c108681ee04a37bf50e18c39caa629138228169825cae8eb824f3cffd6fee59819f35cc902715b19a19
- TLSH T1F0F0D4A6A0D211382414AC6A347854CC77A525044910119866660FD97974799755A733
- MD5 SHA1 SHA512 TLSH