Errors

Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-fil>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>
Reason
expected element type <jnlp> but have <jnlp-file>

General

  • Target
    Client.zip
  • Size 44.3MB
  • Sample261102-hmqrss1wfw
  • SHA256 910912ebc39317997f79a834bc447014cb14a860517449512018cc6503745739
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 3 IoCs

    File was altered after it was signed.

  • Unsigned JAR 6 IoCs

    Checks for missing JAR codesign signature.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 7 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Client.zip
    .zip 44.3MB
  • Client/installer.exe
    .exe 22.2MB
  • Client/lib/accessibility.properties
    155B
  • Client/lib/calendars.properties
    1KB
  • Client/lib/charsets.jar
    .jar 2.9MB
  • Client/lib/classlist
    82KB
  • Client/lib/cmm/CIEXYZ.pf
    50KB
  • Client/lib/cmm/GRAY.pf
    632B
  • Client/lib/cmm/LINEAR_RGB.pf
    1KB
  • Client/lib/cmm/PYCC.pf
    268KB
  • Client/lib/cmm/sRGB.pf
    3KB
  • Client/lib/content-types.properties
    5KB
  • Client/lib/currency.data
    4KB
  • Client/lib/deploy.jar
    .jar 2.2MB
  • Client/lib/deploy/ffjcext.zip
    .zip .js 13KB
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome.manifest
    788B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/content/ffjcext/ffjcext.js
    .js 1KB
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/content/ffjcext/ffjcext.xul
    .xml 495B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/de-DE/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/en-US/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/es-ES/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/fr-FR/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/it-IT/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/ja-JP/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/ko-KR/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/sv-SE/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/zh-CN/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/chrome/locale/zh-TW/ffjcext/ffjcext.dtd
    92B
  • {CAFEEFAC-0018-0000-0101-ABCDEFFEDCBA}/install.rdf
    .xml 653B
  • Client/lib/deploy/messages.properties
    .jnlp 2KB
  • Client/lib/deploy/messages_de.properties
    .jnlp 3KB
  • Client/lib/deploy/messages_es.properties
    3KB
  • Client/lib/deploy/messages_fr.properties
    .jnlp 3KB
  • Client/lib/deploy/messages_it.properties
    3KB
  • Client/lib/deploy/messages_ja.properties
    .jnlp 6KB
  • Client/lib/deploy/messages_ko.properties
    .jnlp 5KB
  • Client/lib/deploy/messages_pt_BR.properties
    .jnlp 3KB
  • Client/lib/deploy/messages_sv.properties
    .jnlp 3KB
  • Client/lib/deploy/messages_zh_CN.properties
    .jnlp 4KB
  • Client/lib/deploy/messages_zh_HK.properties
    .jnlp 3KB
  • Client/lib/deploy/messages_zh_TW.properties
    .jnlp 3KB
  • Client/lib/deploy/splash.gif
    .gif 8KB
  • Client/lib/deploy/[email protected]
    .gif 14KB
  • Client/lib/deploy/splash_11-lic.gif
    .gif 7KB
  • Client/lib/deploy/[email protected]
    .gif 11KB
  • Client/lib/ext/access-bridge-32.jar
    .jar 183KB
  • Client/lib/ext/access-bridge.jar
    .jar 183KB
  • Client/lib/ext/cldrdata.jar
    .jar 3.7MB
  • Client/lib/ext/dnsns.jar
    .jar 8KB
  • Client/lib/ext/jaccess.jar
    .jar 43KB
  • Client/lib/ext/jfxrt.jar
    .jar 17.3MB
  • Client/lib/ext/localedata.jar
    .jar 1.1MB
  • Client/lib/ext/meta-index
    1KB
  • Client/lib/ext/nashorn.jar
    .jar 1.9MB
  • Client/lib/ext/sunec.jar
    .jar 38KB
  • Client/lib/ext/sunjce_provider.jar
    .jar 272KB
  • Client/lib/ext/sunmscapi.jar
    .jar 31KB
  • Client/lib/ext/sunpkcs11.jar
    .jar 244KB
  • Client/lib/ext/zipfs.jar
    .jar 67KB
  • Client/lib/flavormap.properties
    3KB
  • Client/lib/fontconfig.bfc
    3KB
  • Client/lib/fontconfig.properties.src
    10KB
  • Client/lib/fonts/LucidaBrightDemiBold.ttf
    73KB
  • Client/lib/fonts/LucidaBrightDemiItalic.ttf
    73KB
  • Client/lib/fonts/LucidaBrightItalic.ttf
    78KB
  • Client/lib/fonts/LucidaBrightRegular.ttf
    336KB
  • Client/lib/fonts/LucidaSansDemiBold.ttf
    310KB
  • Client/lib/fonts/LucidaSansRegular.ttf
    681KB
  • Client/lib/fonts/LucidaTypewriterBold.ttf
    228KB
  • Client/lib/fonts/LucidaTypewriterRegular.ttf
    237KB
  • Client/lib/hijrah-config-umalqura.properties
    13KB
  • Client/lib/i386/jvm.cfg
    657B
  • Client/lib/images/cursors/cursors.properties
    1KB
  • Client/lib/images/cursors/invalid32x32.gif
    .gif 153B
  • Client/lib/images/cursors/win32_CopyDrop32x32.gif
    .gif 165B
  • Client/lib/images/cursors/win32_CopyNoDrop32x32.gif
    .gif 153B
  • Client/lib/images/cursors/win32_LinkDrop32x32.gif
    .gif 168B
  • Client/lib/images/cursors/win32_LinkNoDrop32x32.gif
    .gif 153B
  • Client/lib/images/cursors/win32_MoveDrop32x32.gif
    .gif 147B
  • Client/lib/images/cursors/win32_MoveNoDrop32x32.gif
    .gif 153B
  • Client/lib/javafx.properties
    58B
  • Client/lib/javaws.jar
    .jar 465KB
  • Client/lib/jce.jar
    .jar 112KB
  • Client/lib/jfr.jar
    .jar 547KB
  • Client/lib/jfr/default.jfc
    .xml 20KB
  • Client/lib/jfr/profile.jfc
    .xml 20KB
  • Client/lib/jfxswt.jar
    .jar 33KB
  • Client/lib/jsse.jar
    .jar 619KB
  • Client/lib/jvm.hprof.txt
    4KB
  • Client/lib/logging.properties
    2KB
  • Client/lib/management-agent.jar
    .jar 381B
  • Client/lib/management/jmxremote.access
    3KB
  • Client/lib/management/jmxremote.password.template
    2KB
  • Client/lib/management/management.properties
    14KB
  • Client/lib/management/snmp.acl.template
    3KB
  • Client/lib/meta-index
    2KB
  • Client/lib/net.properties
    3KB
  • Client/lib/plugin.jar
    .jar 988KB
  • Client/lib/psfont.properties.ja
    2KB
  • Client/lib/psfontj2d.properties
    10KB
  • Client/lib/resources.jar
    .jar 3.3MB
  • Client/lib/rt.jar
    .jar 60.7MB
  • Client/lib/security/US_export_policy.jar
    .jar 2KB
  • Client/lib/security/blacklist
    4KB
  • Client/lib/security/blacklisted.certs
    1KB
  • Client/lib/security/cacerts
    110KB
  • Client/lib/security/java.policy
    2KB
  • Client/lib/security/java.security
    26KB
  • Client/lib/security/javaws.policy
    103B
  • Client/lib/security/local_policy.jar
    .jar 3KB
  • Client/lib/sound.properties
    1KB
  • Client/lib/tzdb.dat
    101KB
  • Client/lib/tzmappings
    8KB

Client.zip

  • SHA256 910912ebc39317997f79a834bc447014cb14a860517449512018cc6503745739
  • MD5 SHA1 SHA512 SSDEEP TLSH