index.jar

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx July 9, 2021, 9:50 a.m.		1	1	0

Allocates read-write-execute memory (usually to unpack itself) (1 event)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory July 9, 2021, 9:50 a.m.	process_identifier: 2212 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 2555904 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0000000002430000 process_handle: 0xffffffffffffffff	1	0	0

File has been identified by 9 AntiVirus engines on VirusTotal as malicious (9 events)

Alibaba	Trojan:JS/Banload.7511d5eb
Cyren	JS/Agent.AUY
Kaspersky	Trojan.JS.Agent.eiw
NANO-Antivirus	Trojan.Script.Heuristic-js.iacgm
McAfee-GW-Edition	BehavesLike.Downloader.cc
Avira	EXP/JAVA.Banload.MRAF.Gen
ZoneAlarm	Trojan.JS.Agent.eiw
Cynet	Malicious (score: 99)
McAfee	Artemis!A53C10A1311D

A potential heapspray has been detected. 873 megabytes was sprayed onto the heap of the java.exe process (1 event)

count

3493

name

heapspray

process

java.exe

total_mb

873

length

262144

protection

PAGE_READWRITE