Windows Analysis Report
#U6837#U672c.jar

Overview

General Information

Sample Name: #U6837#U672c.jar
Analysis ID: 631576
MD5: 8a5f40cbc394e138255c6d1a775d6a26
SHA1: dc53deaa3b02534cead9e371010e00f91e229b50
SHA256: 6b96b0e9285822fb15c20d61ac65c9ba6028f423d5aaf7ebd4fa9fa9a435b838
Tags: jar
Infos:

Detection

Score: 0
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

No high impact signatures.

Classification

There are no high impact signatures.

Source: C:\Windows\System32\7za.exe File opened: C:\jar\edu\umd\cs\findbugs Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\edu\umd\cs\findbugs\annotations Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\edu\umd Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\edu\umd\cs Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\META-INF\maven\com.google.code.findbugs Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\META-INF\maven\com.google.code.findbugs\annotations Jump to behavior
Source: pom.xml0.1.dr String found in binary or memory: http://andrei.gmxhome.de/privat.html
Source: pom.xml1.1.dr, pom.xml0.1.dr String found in binary or memory: http://findbugs.sourceforge.net/
Source: pom.xml2.1.dr String found in binary or memory: http://jgrapht.sourceforge.net/LGPL.html
Source: pom.xml0.1.dr String found in binary or memory: http://keithlea.com/
Source: CoreConstants.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html
Source: SiftingJoranConfiguratorBase.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#1andOnly1
Source: AppenderRefAction.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#appender_order
Source: FileAppender.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#earlier_fa_collision
Source: RollingFileAppender.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#rfa_collision
Source: TimeBasedFileNamingAndTriggeringPolicyBase.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#rfa_collision_in_dateFormat
Source: RollingFileAppender.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#rfa_file_after
Source: RollingFileAppender.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#rfa_no_rp
Source: RollingFileAppender.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#rfa_no_tp
Source: CoreConstants.class.1.dr, SizeAndTimeBasedFNATP.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#sat_missing_integer_token
Source: SizeBasedTriggeringPolicy.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#sbtp_size_format
Source: TimeBasedRollingPolicy.class.1.dr String found in binary or memory: http://logback.qos.ch/codes.html#tbr_fnp_not_set
Source: CoreConstants.class.1.dr String found in binary or memory: http://logback.qos.ch/manual/
Source: SizeAndTimeBasedFNATP.class.1.dr String found in binary or memory: http://logback.qos.ch/manual/appenders.html#SizeAndTimeBasedRollingPolicy
Source: pom.xml4.1.dr String found in binary or memory: http://maven.apache.org/POM/4.0.0
Source: pom.xml5.1.dr, pom.xml3.1.dr, pom.xml4.1.dr String found in binary or memory: http://maven.apache.org/xsd/maven-4.0.0.xsd
Source: SubCommandHandler.java.1.dr String found in binary or memory: http://sezpoz.java.net/
Source: pom.xml2.1.dr String found in binary or memory: http://sourceforge.net/projects/jgrapht/)
Source: LICENSE.txt.1.dr String found in binary or memory: http://www.apache.org/licenses/
Source: LICENSE.txt.1.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: pom.xml1.1.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: pom.xml0.1.dr String found in binary or memory: http://www.cs.umd.edu/~pugh/
Source: pom.xml2.1.dr String found in binary or memory: http://www.eclipse.org/legal/epl-v10.html
Source: pom.xml0.1.dr String found in binary or memory: http://www.gnu.org/licenses/lgpl.html
Source: pom.xml4.1.dr String found in binary or memory: http://www.slf4j.org
Source: LoggerFactory.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html
Source: LoggerFactory.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#StaticLoggerBinder
Source: LoggerFactory.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#loggerNameMismatch
Source: LoggerFactory.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#multiple_bindings
Source: MDC.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#no_static_mdc_binder
Source: LoggerFactory.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#null_LF
Source: MDC.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#null_MDCA
Source: LoggerFactory.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#replay
Source: LoggerFactory.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#substituteLogger
Source: LoggerFactory.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#unsuccessfulInit
Source: LoggerFactory.class.1.dr String found in binary or memory: http://www.slf4j.org/codes.html#version_mismatch
Source: pom.xml1.1.dr String found in binary or memory: https://code.google.com/p/jsr-305/
Source: pom.xml5.1.dr String found in binary or memory: https://github.com/Col-E/CAFED00D/
Source: pom.xml0.1.dr String found in binary or memory: https://github.com/findbugsproject/findbugs/
Source: SubCommandHandler.java.1.dr String found in binary or memory: https://github.com/jenkinsci/lib-annotation-indexer
Source: pom.xml5.1.dr String found in binary or memory: https://mvnrepository.com/artifact/ch.qos.logback/logback-classic
Source: pom.xml5.1.dr, pom.xml.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.junit.jupiter/junit-jupiter-api
Source: pom.xml5.1.dr, pom.xml.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.junit.jupiter/junit-jupiter-engine
Source: pom.xml5.1.dr, pom.xml.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.junit.jupiter/junit-jupiter-params
Source: pom.xml5.1.dr, pom.xml.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.junit.platform/junit-platform-surefire-provider
Source: pom.xml5.1.dr, pom.xml.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.ow2.asm/asm
Source: pom.xml.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.ow2.asm/asm-analysis
Source: pom.xml.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.ow2.asm/asm-commons
Source: pom.xml5.1.dr, pom.xml.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.ow2.asm/asm-tree
Source: pom.xml.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.ow2.asm/asm-util
Source: pom.xml5.1.dr String found in binary or memory: https://mvnrepository.com/artifact/org.slf4j/slf4j-api
Source: pom.xml1.1.dr, pom.xml0.1.dr String found in binary or memory: https://oss.sonatype.org/
Source: NOTICE.txt.1.dr String found in binary or memory: https://www.apache.org/).
Source: C:\Windows\System32\7za.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: classification engine Classification label: clean0.winJAR@2/1025@0/0
Source: unknown Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c 7za.exe x -y -oC:\jar "C:\Users\user\Desktop\#U6837#U672c.jar"
Source: C:\Windows\System32\cmd.exe Process created: C:\Windows\System32\7za.exe 7za.exe x -y -oC:\jar "C:\Users\user\Desktop\#U6837#U672c.jar"
Source: #U6837#U672c.jar Static file information: File size 39147646 > 1048576
Source: C:\Windows\System32\7za.exe File opened: C:\jar\edu\umd\cs\findbugs Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\edu\umd\cs\findbugs\annotations Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\edu\umd Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\edu\umd\cs Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\META-INF\maven\com.google.code.findbugs Jump to behavior
Source: C:\Windows\System32\7za.exe File opened: C:\jar\META-INF\maven\com.google.code.findbugs\annotations Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 631576 Sample: #U6837#U672c.jar Startdate: 21/05/2022 Architecture: WINDOWS Score: 0 5 cmd.exe 2->5         started        process3 7 7za.exe 502 5->7         started       
⊘No contacted IP infos