The java exe File Malware Analysis

The java.exe File Analysis

Updated 1 year ago

Checked by Malware Check

java.exe

Hash Type	Value	Action
MD5	0646c36bcbaeaa439ca71ebb496c61fd
SHA1	ab0789d7449b01415211c52a61933b9d5629403e
SHA256	f3692f4ddcd2adb242cc652881f7f46483b08cbe6469bb9871d630b751c61e2d
SHA512	7ef0652d460deafda3d13df92c08515941e5db22764d65a4133acdb034c3cea4e563b1da9764432b504c7e12156ee81729bbe1fd7f6cfa1abba5235b263b12be

Hash Type

Value

Action

MD5

0646c36bcbaeaa439ca71ebb496c61fd

SHA1

ab0789d7449b01415211c52a61933b9d5629403e

SHA256

f3692f4ddcd2adb242cc652881f7f46483b08cbe6469bb9871d630b751c61e2d

SHA512

7ef0652d460deafda3d13df92c08515941e5db22764d65a4133acdb034c3cea4e563b1da9764432b504c7e12156ee81729bbe1fd7f6cfa1abba5235b263b12be

PE Analysis

Basic Information

▼

Icon	Hash: bc44de2e6c92bfcd52a56d74b20151c9 Fuzzy: c5daf20d7bdfb7794c893129fcaa5837 dHash: f0809296969280f0
Image Base	`0x140000000`
Entry Point	`0x140000000`
Compilation Time	2023-11-04 07:44:18
Checksum	0x00000000 (Actual: 0x010a0413)
OS Version	4.0
PEiD Signatures	`PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows`
Digital Signature	The PE file does not contain a certificate table.
Imports	0
Exports	0 functions
Resources	7 Resources
Sections	2 Sections

Version Information

▼

Translation	0x0000 0x04b0
FileDescription	CapCut
FileVersion	1.0.0.0
InternalName	CapCut
LegalCopyright	Copyright (C) 2022 ByteDance Pte. Ltd.
OriginalFilename	CapCut
ProductName	CapCut
ProductVersion	1.0.0.000000
Assembly Version	0.0.0.0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00002000`	17,395,808 bytes	17,396,224 bytes	5.25 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`219B2785496F69680ABB60E4DA8AC0C8`
`.rsrc`	`0x0109a000`	32,704 bytes	32,768 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5B4940358A6295FF0815D71DA31D323E`

Resource Analysis

▼

Total Resources: 7 (32,243 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	4	30,772 bytes	95.4%
RT_GROUP_ICON	1	62 bytes	0.2%
RT_VERSION	1	712 bytes	2.2%
RT_MANIFEST	1	697 bytes	2.2%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

File Name	java.exe
File Type	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Scanner Version	1.0.146.174
Database Version	2023-11-04 09:00:45 UTC

The java.exe File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification