f47b467fc29426b63ad365867f3ddf71_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f47b467fc29426b63ad365867f3ddf71_JaffaCakes118
Size

1.2MB
MD5

f47b467fc29426b63ad365867f3ddf71
SHA1

809bf1c1d28815904f4243902baca155c1d5a2fe
SHA256

298f76b2ae090a0eeeb64e167db4de6659166b83b355f4222cba6f0808d41b6a
SHA512

181534f714bc237e953f7bf410d15627e113c851a330554463691cc3001ddb8c01b6ce276bd9704381e0f49192bfa9522a9babd7101e976776f86c86c7d68b48
SSDEEP

24576:INqmUwLX+VyapX+C4cSQJzhfg1CmefmS9TobrqYn/cufIWDpEOx:sjLXwyapOC4cSazVgq+48dnv9E2

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 13 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/CopyU! v2 SW/Cleaner NOC.dll	acprotect
static1/unpack001/CopyU! v2 SW/Cleaner.dll	acprotect
static1/unpack001/CopyU! v2 SW/EChartBar.fne	acprotect
static1/unpack001/CopyU! v2 SW/TrayIcon.fne	acprotect
static1/unpack001/CopyU! v2 SW/USBSpirit.dll	acprotect
static1/unpack001/CopyU! v2 SW/dp1.fne	acprotect
static1/unpack001/CopyU! v2 SW/eAPI.fne	acprotect
static1/unpack001/CopyU! v2 SW/iext.fnr	acprotect
static1/unpack001/CopyU! v2 SW/iext5.fne	acprotect
static1/unpack001/CopyU! v2 SW/krnln.fnr	acprotect
static1/unpack001/CopyU! v2 SW/shell.fne	acprotect
static1/unpack001/CopyU! v2 SW/shellEx.fne	acprotect
static1/unpack001/CopyU! v2 SW/spec.fne	acprotect

UPX packed file 14 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/CopyU! v2 SW/Cleaner NOC.dll	upx
static1/unpack001/CopyU! v2 SW/Cleaner.dll	upx
static1/unpack001/CopyU! v2 SW/CopyU!.exe	upx
static1/unpack001/CopyU! v2 SW/EChartBar.fne	upx
static1/unpack001/CopyU! v2 SW/TrayIcon.fne	upx
static1/unpack001/CopyU! v2 SW/USBSpirit.dll	upx
static1/unpack001/CopyU! v2 SW/dp1.fne	upx
static1/unpack001/CopyU! v2 SW/eAPI.fne	upx
static1/unpack001/CopyU! v2 SW/iext.fnr	upx
static1/unpack001/CopyU! v2 SW/iext5.fne	upx
static1/unpack001/CopyU! v2 SW/krnln.fnr	upx
static1/unpack001/CopyU! v2 SW/shell.fne	upx
static1/unpack001/CopyU! v2 SW/shellEx.fne	upx
static1/unpack001/CopyU! v2 SW/spec.fne	upx

Unsigned PE 15 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CopyU! v2 SW/Cleaner NOC.dll
unpack001/CopyU! v2 SW/Cleaner.dll
unpack001/CopyU! v2 SW/CopyU!.exe
unpack001/CopyU! v2 SW/EChartBar.fne
unpack001/CopyU! v2 SW/EThread.fne
unpack001/CopyU! v2 SW/TrayIcon.fne
unpack001/CopyU! v2 SW/USBSpirit.dll
unpack001/CopyU! v2 SW/dp1.fne
unpack001/CopyU! v2 SW/eAPI.fne
unpack001/CopyU! v2 SW/iext.fnr
unpack001/CopyU! v2 SW/iext5.fne
unpack001/CopyU! v2 SW/krnln.fnr
unpack001/CopyU! v2 SW/shell.fne
unpack001/CopyU! v2 SW/shellEx.fne
unpack001/CopyU! v2 SW/spec.fne

Files

f47b467fc29426b63ad365867f3ddf71_JaffaCakes118
.rar
CopyU! v2 SW/Cleaner NOC.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Cleaner_AddType
Cleaner_DelAllType
Cleaner_DelDir
Cleaner_DelFile
Cleaner_DelType
Cleaner_GetCurState
Cleaner_GetRefCount
Cleaner_GetType
Cleaner_Init
Cleaner_IsDirExist
Cleaner_IsFileExist
Cleaner_Release
Cleaner_SearchDir
Cleaner_SearchFile
Cleaner_StopSearch

Sections

UPX0
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/Cleaner.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CreateCleaner

Sections

UPX0
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/CopyU!.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 764KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/CopyU!.run
CopyU! v2 SW/EChartBar.fne
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetNewInf

Sections

UPX0
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/EThread.fne
.dll windows:4 windows x86 arch:x86

63cbf8bd20c1290cfab1ed83b71ea939

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
CloseHandle
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
TerminateThread
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetProcAddress
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

GetNewInf

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CopyU! v2 SW/TrayIcon.fne
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetNewInf

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/USBSpirit.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

USBSpirit_EjectUSBStorageDevice
USBSpirit_GetUSBStorageDeviceInfo
USBSpirit_GetUSBStorageDeviceList
USBSpirit_GetUSBStorageDeviceQuantity
USBSpirit_Init
USBSpirit_IsThisUSBStorageDevice
USBSpirit_Release
USBSpirit_SetInsertFunc
USBSpirit_SetPulloutFunc

Sections

UPX0
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/dp1.fne
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Compress
GetNewInf
MGetMD5

Sections

UPX0
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/eAPI.fne
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetNewInf

Sections

UPX0
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/iext.fnr
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetNewInf

Sections

UPX0
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/iext5.fne
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetNewInf

Sections

UPX0
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 115KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/krnln.fnr
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetNewInf
GetNewSock

Sections

UPX0
Size: - Virtual size: 804KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 360KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/shell.fne
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetNewInf

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/shellEx.fne
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetNewInf

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/spec.fne
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetNewInf

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CopyU! v2 SW/新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 196KB

UPX1 Size: 41KB - Virtual size: 44KB

UPX2 Size: 1024B - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 280KB

UPX1 Size: 63KB - Virtual size: 64KB

UPX2 Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 764KB

UPX1 Size: 106KB - Virtual size: 108KB

.rsrc Size: 67KB - Virtual size: 68KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 232KB

UPX1 Size: 83KB - Virtual size: 84KB

.rsrc Size: 3KB - Virtual size: 4KB

63cbf8bd20c1290cfab1ed83b71ea939

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 64KB

.reloc Size: 4KB - Virtual size: 3KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 156KB

UPX1 Size: 56KB - Virtual size: 56KB

.rsrc Size: 2KB - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 220KB

UPX1 Size: 50KB - Virtual size: 52KB

.rsrc Size: 2KB - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 132KB

UPX1 Size: 53KB - Virtual size: 56KB

UPX2 Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 288KB

UPX1 Size: 114KB - Virtual size: 116KB

.rsrc Size: 3KB - Virtual size: 4KB

Headers

UPX0
Size: - Virtual size: 196KB

UPX1
Size: 41KB - Virtual size: 44KB

UPX2
Size: 1024B - Virtual size: 4KB

UPX0
Size: - Virtual size: 280KB

UPX1
Size: 63KB - Virtual size: 64KB

UPX2
Size: 512B - Virtual size: 4KB

UPX0
Size: - Virtual size: 764KB

UPX1
Size: 106KB - Virtual size: 108KB

.rsrc
Size: 67KB - Virtual size: 68KB

UPX0
Size: - Virtual size: 232KB

UPX1
Size: 83KB - Virtual size: 84KB

.rsrc
Size: 3KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 64KB

.reloc
Size: 4KB - Virtual size: 3KB

UPX0
Size: - Virtual size: 156KB

UPX1
Size: 56KB - Virtual size: 56KB

.rsrc
Size: 2KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 220KB

UPX1
Size: 50KB - Virtual size: 52KB

.rsrc
Size: 2KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 132KB

UPX1
Size: 53KB - Virtual size: 56KB

UPX2
Size: 512B - Virtual size: 4KB

UPX0
Size: - Virtual size: 288KB

UPX1
Size: 114KB - Virtual size: 116KB

.rsrc
Size: 3KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 212KB

UPX1
Size: 74KB - Virtual size: 76KB

.rsrc
Size: 2KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 280KB

UPX1
Size: 115KB - Virtual size: 116KB

.rsrc
Size: 3KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 804KB

UPX1
Size: 360KB - Virtual size: 364KB

.rsrc
Size: 7KB - Virtual size: 8KB

UPX0
Size: - Virtual size: 60KB

UPX1
Size: 21KB - Virtual size: 24KB

UPX2
Size: 512B - Virtual size: 4KB

UPX0
Size: - Virtual size: 24KB

UPX1
Size: 5KB - Virtual size: 8KB

UPX2
Size: 512B - Virtual size: 4KB

UPX0
Size: - Virtual size: 72KB

UPX1
Size: 33KB - Virtual size: 36KB

UPX2
Size: 512B - Virtual size: 4KB