ThreatExpert Report: Mal/JavaGen-A, Mal/JavaGen-A, Exploit.Java.CVE-2011, Exploit-CVE2012-0507..

Submission Summary:

Submission details:

Submission received: 25 June 2012, 03:19:04
Processing time: 13 min 2 sec
Submitted sample:

File MD5: 0xAD6DC5D5F1E719151EBAC687C8D49323
File SHA-1: 0x93DAA0DCD2F707BCD4B0F56A778A28388B5ABFB1
Filesize: 5,090 bytes
Alias:

Mal/JavaGen-A, Mal/JavaGen-A [Sophos]
Exploit.Java.CVE-2011 [Ikarus]

Technical Details:

File System Modifications

The following files were created in the system:

Filename(s)

File Size

File Hash

Alias

%Temp%\bro.class

3,014 bytes

MD5: 0x7598E38837AA44AB9DC45B6FBFE87F5C
SHA-1: 0x1E397C7573A91257F8616F883AA8B139EB9736FE

Exploit-CVE2012-0507 [McAfee]
Mal/JavaGen-A [Sophos]
Exploit.Java.CVE-2011 [Ikarus]

%Temp%\did.class

1,752 bytes

MD5: 0xDC71E414DFF7005B9B30EA1686A3EF15
SHA-1: 0x5194D5AD32B5021E433FD2DA0A8EB3EF200FBED7

Exploit-CVE2012-0507 [McAfee]
Exploit.Java.CVE [Ikarus]

%Temp%\kit.class

3,438 bytes

MD5: 0xDD50D49453E36597D9A5B7D41C38DE26
SHA-1: 0x48892793A907B9C39A0424CD68C5CA5E15B507EC

Exploit-CVE2012-0507 [McAfee]
Mal/JavaGen-A [Sophos]
Exploit.Java.CVE-2011 [Ikarus]

%Temp%\META-INF\MANIFEST.MF

71 bytes

MD5: 0x1C9A2B4CA30BF9F0A44D8E24C8DD48EE
SHA-1: 0x1B4AB5B6BAFC64F9A0A17DA457AEC4B47100849B

(not available)

[file and pathname of the sample #1]

5,090 bytes

MD5: 0xAD6DC5D5F1E719151EBAC687C8D49323
SHA-1: 0x93DAA0DCD2F707BCD4B0F56A778A28388B5ABFB1

Mal/JavaGen-A, Mal/JavaGen-A [Sophos]
Exploit.Java.CVE-2011 [Ikarus]

Note:

%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

The following directory was created:

%Temp%\META-INF

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.