018259e98ecdfb5b46fe71ccbd3627bc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

018259e98ecdfb5b46fe71ccbd3627bc_JaffaCakes118
Size

702KB
MD5

018259e98ecdfb5b46fe71ccbd3627bc
SHA1

241a87dca8abe359a78ac73705c81c7e2162451a
SHA256

180225a3a53a44c958f8470988ba1401141df8f988d07f435f4525b5b0f60f3a
SHA512

79e22a82b8136688bf7df508c68c0837fab37bab4b0ac89dec40aeb38249def1114893e1b83117c368b73500e388ee94499ca66484939ba81347514d66df0940
SSDEEP

12288:b/DACq8aZn1cQGrYrAHz9lH7U1M17fVBN1SCbd7IeIc7Oay0EmzXNacgfF5NdnCr:vAn8Yn1cFzPIcBNT9IVc7Oay0EmzXNa0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
018259e98ecdfb5b46fe71ccbd3627bc_JaffaCakes118

Files

018259e98ecdfb5b46fe71ccbd3627bc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_0074D914_62AA_4D7D_BB63_CAB4094995D7
fn_018DA0CB_DDDD_48E8_B2A2_26A58D9BE1DA
fn_01B79717_0EA2_4041_BC8A_F5588297285A
fn_041653D8_AE8E_4B38_A91C_8E6C62D45EE0
fn_042329F6_9659_40B7_96BF_226922B9ECC6
fn_04947460_9149_4E88_ACBC_A24B2D939D9E
fn_04F0B2D4_BC6B_4980_A4AF_60997C74286B
fn_05502D32_672E_46C6_8746_E05F598F91EC
fn_05EC86C1_4CFE_420B_B63D_3352C71ADEA0
fn_079B62A4_77E5_4259_9C4C_B69E57E3780A
fn_079ED5D9_0550_44F9_A73A_F193209199DA
fn_08A93BFE_C5DD_4405_B5B5_1391A5A7EF96
fn_09B0DAFA_6EDA_44CD_99F0_F09466FA7BB2
fn_0A21BB7E_4E63_40D5_B533_DF67131CAAE4
fn_0B08D3B1_163A_4D51_B666_1AB15B610A04
fn_0B477C99_C346_4DCF_8CD6_F4B9B4F775E3
fn_0BAFA0C6_B40A_4208_A974_83511957CB4B
fn_0C29D538_EA68_4975_A8A2_A0DD344F7A3E
fn_0F454EC3_ED1E_49B0_9CAA_852817EBB13C
fn_0FB5CC4C_4EEF_4607_B842_7C929F6B68C3
fn_106EF914_1AA7_45CE_A628_1C3CE980BEB9
fn_107FA3A9_F775_49F5_8696_615E2D434951
fn_12889552_1701_4054_844F_FE2310023A78
fn_12E312D4_1950_4153_A096_0AFC80418781
fn_14E1BD09_EAF5_47B2_8F35_C19E737400C5
fn_15742B4B_BBDC_4E13_A537_FD53E57C13F6
fn_15894329_114D_48D6_90B7_1AEC89DEFDE4
fn_1788152B_0C54_47C2_ADB4_5DAC54D1949D
fn_17B5B3D1_6487_4AB8_94C1_A937AAAB7B6B
fn_17E51A7C_C605_4530_B10F_F5AB27C574AD
fn_18B392EF_E99A_4BD7_AB52_40F9E173A509
fn_18C67831_0D16_4B03_84A9_C663A2A6CF2B
fn_1975D9BC_8F0C_416E_9B81_6C3A9D3EF602
fn_197B4BC9_986E_4978_A4AB_1C1F578A734C
fn_1A41AD64_381B_4AFA_9604_1B8CEE2AF12B
fn_1B765531_89AF_44E5_B7D3_12F8E838C159
fn_1B993D12_58E7_4D2D_A3E3_F5B2A643532D
fn_1BABFB27_6FE7_440B_8879_03C571AE2F2D
fn_1C4C5A1E_F1EC_4C3C_ABDC_D68BBEC4EDBE
fn_1D4DEFA7_A7E5_4B3C_900A_3C3DF4F018A2
fn_1DC683D9_C10C_4E27_88B5_F947A90E9024
fn_1DE08C07_5EDD_46FF_9B40_0BDAEC455B7C
fn_1E181F02_76BF_4827_9093_67C850BF4375
fn_1EAB7B19_7811_48C9_B91F_D3AAF5582D52
fn_1F1242DD_0823_4C2C_9F02_C3B28C453895
fn_1F233CBB_DB39_45A3_9A5A_D50F00DF9926
fn_1FEFA01C_68D4_4284_9B06_2DB29F823F2F
fn_20BA7AD8_2581_4C1E_BB72_DB61602BE670
fn_21BC50BC_4E9D_4FD9_9505_6C206E318773
fn_21CDC571_908B_4B12_9359_A8188FD9D449
fn_2366E5C5_7869_4478_A4DF_FB4E53C5B743
fn_24971472_2545_4642_9A25_F8409DDD6F41
fn_24AA2366_00FF_4A48_BEAD_329C777106C5
fn_25373ACE_B10B_4947_AAD1_E3B0CE526833
fn_25E167EB_F91B_45D9_9978_655414A5925A
fn_2996EF54_79E5_48F3_8A56_4066D6D9806B
fn_2F829E7A_F87B_422D_A325_3F89CCBEB823
fn_30370475_C35E_4E5D_AEED_48CBED6C1240
fn_3058831F_926C_497C_98D4_BAAA242AE451
fn_3107402B_B908_435A_BEAE_2C32A5F0F9D3
fn_310C3F42_2C17_45B9_A72F_9A820CFD3F62
fn_3318C88E_0396_4A3A_8DC8_22390464A153
fn_3383ADF7_CA6A_455F_958B_614F54DFA88E
fn_33B05C5F_B791_4084_91D2_F493EFB3DDBA
fn_344A87A9_1351_4047_AD2D_2E8E0929CFD3
fn_381219F7_717D_4D0C_AC70_2160FF0CDF54
fn_3897199C_4000_434F_9A76_C05ECFA4885C
fn_39D05F8E_5A1D_4C58_8F57_1D04250ABCFC
fn_3ABF0808_4E44_4A38_93EB_3935D9AD22DD
fn_3BFD90E8_733F_4F87_8B25_F2ED5C9DCD84
fn_3C654EDD_02F3_4A9E_BFBA_2BA062F9C840
fn_3CC34EBD_8174_4AE5_AF22_CDA3E63BD234
fn_3CD35BFF_FE11_49BF_8F71_0E318D0F1931
fn_3D757AD8_031A_4B1D_A8C6_8F2F7E69EB07
fn_3EA7136B_C3AD_4BC8_8BAD_FD2A8B754067
fn_3EB7F585_0BFC_4272_8628_BEB1A16A32E1
fn_3EF224D7_93B7_4AC6_A318_64BD6359BE53
fn_3FAB9AA7_03D7_4AF9_8513_5A54BCD9399E
fn_423E2A9E_46F7_4DF0_8354_71CA3E4796CF
fn_42A9D6F3_F93D_4513_83E4_19BAAD3745CF
fn_440ADE93_996E_42EC_95C8_08536EC6254E
fn_46637776_4D37_42FA_AC80_D618EAA5A4AC
fn_47124732_76D6_43D4_8575_32B69DE84795
fn_4779F7BA_EA46_4F3A_A5C7_FF38F8C4CD59
fn_47F9447C_7E8C_4A0D_98C3_E40901BBD269
fn_496B49BD_66B7_495F_8C00_7702012D7123
fn_4D4C3F53_B5E2_4100_8DD1_DDED0C19C1C7
fn_4D6724E7_B3D7_47E9_9C44_4993B48896A3
fn_4F4338A5_8A9C_49BE_8D0A_131C82D9245C
fn_503C45FA_5BF0_4051_A477_D51BE3CE30B2
fn_52625ECE_5BDB_4AF8_9FDB_B24D9234E766
fn_53E53E68_F0AD_4176_95A3_8E4161C7E1E5
fn_5464C1DD_3C67_4FFF_B4A1_9816E93E3C7D
fn_55C05F5E_2603_4C07_AA0B_394831F254F5
fn_5938BFB8_B16F_478B_90FD_441C06D33724
fn_5A464C12_81E2_4FF2_B86B_37BA469F4F6F
fn_5B06B430_4D9B_46C7_9A8B_40C61A99D86B
fn_5B208E79_8C48_4963_B740_367B785488F9
fn_5F3A0B2E_EF6F_4E34_9C48_162222648288
fn_62517EF7_D960_46DB_AFC9_1A6BDCA7206C
fn_625C7EA4_ECD9_4EB2_ACB6_FF6A206A941F
fn_63965886_C370_4AB2_971C_952FDDCFB137
fn_644DCFF7_1820_4B12_BD69_093052DBA7D8
fn_64717855_D920_4B90_BD64_546EBCD9F0CD
fn_650AC1A4_1B1D_4DC1_A561_19CCF2EEA0AC
fn_6574E1BE_0058_43A1_92B3_3A7EF9915052
fn_68183A1E_EF6C_4A8F_B36A_B59B4ED104F8
fn_6A95F35F_812A_4157_9C13_17E876053737
fn_6AAFF8C7_02F4_4ED9_A68D_47195224D961
fn_6C214116_E403_44D7_8C7F_CE5A227D63F8
fn_6CDBF0FB_C8ED_48A1_97FC_147F4C01A2E9
fn_6CE0BE0E_4508_499E_BF58_12002C70FD83
fn_6DB433A5_3346_41E7_905C_578BF1417293
fn_6DCE82D1_195F_4A2D_A1CF_2A46B01F6595
fn_6E5EE6D4_E579_492D_BDE6_D8AD2BC1D0FD
fn_6EE05206_32D6_41E2_9B76_5A276778AC07
fn_6F29B54F_D5B5_4D08_A89C_CB2927B16A88
fn_6F35C777_00E3_4345_AC0E_D40A8F19638C
fn_70BF108A_5D2E_47F0_8125_D747EBC6DD34
fn_721B17F7_E031_4259_8532_A261D18E6DE9
fn_72C5B8B5_928A_4D76_A39D_D3AE3969B215
fn_73561006_10C6_4E50_9684_DDC12635604F
fn_73786E11_0378_4007_96BA_36AD71C508AA
fn_74399BBE_E9DA_43F0_9875_713D843DA6BF
fn_7616EE95_7FE3_4AFF_9580_6C7330122A18
fn_7663351F_80C8_4ED7_A52F_3B3CD8358CF5
fn_769960AE_66B8_49B9_BFE5_83C6E1BC6731
fn_788B13EB_F9F6_4728_B205_713E8B7BA802
fn_7A2194C6_BF4C_4CEC_B92E_6207F2313691
fn_7B02B4B3_9678_41D5_9EB9_3BDEA2E01810
fn_7B7293A4_C79A_4C3B_8E88_73D0C5597A46
fn_7E47A518_9C4D_4224_9327_D8E41F2024A7
fn_8012B207_6ED6_43B0_8E52_2C29EC1E5B41
fn_817DD4EE_FB78_44A8_A976_59F51349B3B8
fn_82E2D83C_95B6_4E2D_8DF6_4C70E68F9853
fn_84423A4B_0558_432F_8ACB_38808C706F8F
fn_84D1B323_C890_430B_B5E4_BAF88A7C0D9A
fn_8608127F_FFE8_4F6F_87A8_A23A411913EE
fn_860F70E8_6E23_4D27_B481_185902F258EB
fn_86CAB91E_862F_4139_A9AE_43EF59DC72AF
fn_8814028C_CD21_4BEA_BA87_9169BC12C3E9
fn_8854D741_1853_4969_8ACE_08DD67B0AF3D
fn_89C551C5_FEBD_4C60_892D_AE6F2FCB32E5
fn_89DEAE4D_08BD_4D76_8256_314232D2ED00
fn_8AFA26E5_2074_47AE_953D_060D7EBC32E1
fn_8BF7B75C_A3B1_4B52_B08D_145C442243A5
fn_8D4E9735_A16C_4977_A263_B6343DB9AFD8
fn_8D76AD5C_7717_42D7_8823_078D8DF4D613
fn_8E14DBBF_52BB_43C4_8F24_6AD3FB48CC8A
fn_8EA8F82D_7388_4D16_8790_BBC139D425C2
fn_91061C61_4286_4A3F_9937_CB46A21EEF2D
fn_92251417_D3C2_46D5_A282_CBFF55CA7EC2
fn_96745D7F_FB99_44BA_A87E_824DAC483FFA
fn_96A64AAC_6059_48E0_B6D9_6610D923892A
fn_990FE1D5_1CF3_4B18_8965_577D571560F3
fn_9972A60B_1ADB_498A_8009_6A7C8C47F843
fn_999CB875_D335_42A5_8552_87A296FCBDAD
fn_99CA976B_54A5_4CED_8075_1BE0D04AFB35
fn_9C23CCD1_904E_4392_92B2_CF7C52AD361B
fn_9CE720B5_3A79_4247_B5CF_8AE702DA0AD6
fn_9DF84401_B6D6_43BB_A37D_4C44EB14F904
fn_9E344108_2323_41A9_BE76_2C65578039CD
fn_9EAF6AB8_9BE2_409D_BEEB_06CCACED74E8
fn_A0B10FE9_092A_4C60_A9FE_6DFDE196AEA1
fn_A3313CDD_EEC2_4930_BAC0_A0ACBBBD49CE
fn_A44AC162_45FC_4A40_B980_5C89C9CB623D
fn_A5ED6787_6E6C_41BB_A325_28456AF3ECFA
fn_A87DED7B_5A5E_4CDB_9F30_B8D011502FFA
fn_ADBB6347_0EBF_4DFD_B762_32362BB83D2D
fn_ADC02411_D3A2_4B8A_8A2E_E0FC9B7306CD
fn_ADF35BE9_DBF7_46C6_B107_853EF9B1D0FE
fn_AEB87EA2_0EDF_44E9_80F7_62131D862298
fn_AEC272DF_1558_4338_9E8A_80C9EF6B9B25
fn_AEC450EC_C0BC_4048_B486_A9B666AEBB77
fn_B164E438_E6A3_49AB_839B_2D3C5E46315E
fn_B21EB2DE_CFFD_45DD_931D_42D3D418B44B
fn_B4203BB8_457C_4213_A336_EC4230C577D0
fn_B5A9FC15_38A9_4C15_B120_69865089D4C1
fn_B72535DE_8E1B_44BB_8969_34FC9B7EC701
fn_B94949DF_3A06_4AB9_820F_CD67C87F59BE
fn_BA777D68_3669_431C_9F87_C44C9CA92654
fn_BAFB875F_042B_43E4_A1F8_63151BE5B375
fn_BE0232E4_01B9_4AEC_9E08_92FC750ACAC3
fn_BEF9581E_9026_4AF4_8D1D_40598B945DCD
fn_C10D2B98_7C79_4E2C_A0DA_907FF69E2A24
fn_C306FE65_C9A4_4498_8FDA_D9C2A46F23B0
fn_C31A8445_62C9_4993_82D2_F9B7FAD0D49F
fn_C37F7B13_B04C_4256_9C27_29EFAB1ECF4A
fn_C56285B5_67E3_4223_B99C_0ABE020C58DF
fn_C6247CA6_F031_4E4F_815A_81E9C2B41569
fn_C6B217E2_4CE9_4BE7_A442_142F7D51248B
fn_C79280CB_2C56_43D5_AC10_83AE2E2008A5
fn_C90A6186_001E_45A4_ACED_ED1A970117B4
fn_C987E4F2_C508_4733_9E1A_3744BB81A23C
fn_CCEC6FF7_C307_4F2E_AA48_08BFA53B3C18
fn_CD8A3242_637C_4380_AA5D_5D4BF665F706
fn_CEC85F7B_1FFA_43F3_8B45_45DBD0260180
fn_CF55E601_E650_4C13_8C85_EB52AB7B627D
fn_D03C59B1_2325_45C7_8076_D25286D6DA27
fn_D0799124_89E5_47DE_9552_65C182CB01F5
fn_D22DF069_E1B0_4536_909C_2543B1112371
fn_D2FC9619_35FF_49C5_B033_D443C87A832D
fn_D37A0D8C_01C9_4914_BF33_CE65E663393A
fn_D37CA8D1_7094_40E1_8B59_0EE7E9741680
fn_D4360892_40DB_427B_AA33_EE0724B1C3AE
fn_D43C1746_9925_4175_9DDB_979A99046795
fn_D451AA5C_CBE3_465D_BF2A_0988E6207833
fn_D4D285A6_3132_4338_9DA1_B2F04C1B8A1B
fn_D541AA42_BD1C_4696_85B3_C47D53B35512
fn_D59AE400_717C_4FFD_A52F_1EAD19F35AD1
fn_D5AA1934_0646_43A7_9D7F_47FC2943912C
fn_D6422B84_7C31_4F5B_95D5_44C29636D95B
fn_D721F77B_6A84_4E1B_B931_4CFEFDC9B01F
fn_D7C05C6F_EACD_4565_AB95_01007A79ADB2
fn_D85068C9_AFD2_4AC9_8F71_30AEFDE2AA6D
fn_D98EED58_1FB4_4875_8A1F_8D3A2A8B7D63
fn_DB3C7B8D_3D1D_42B0_9DD7_4A97ECFA3362
fn_DBCCEEEF_16A3_47D4_9977_F3163DDE1A58
fn_DF618EA3_3DB4_42CD_BE67_BE1FDDF6EDCC
fn_DF815326_1579_425F_AA98_5045C6C1BAD5
fn_DFA543F4_9C99_44B0_B19B_D6C9FF9E911D
fn_DFE3C9E6_8CC3_48A6_AB75_561FC58AFD25
fn_E2E9E6C8_4400_449B_9AF9_A5E6340A9FE5
fn_E3EF4D4E_A6FF_48FC_8915_56072DA6CFC6
fn_E4388D68_3C75_4FAF_8AE7_F2BDB7897A2D
fn_E4643ED3_6881_4329_9159_033E68151C33
fn_E473C99E_FDAA_45E0_8F7E_399033C4F8A3
fn_E4D37BC0_2239_4051_8086_6F7DB54C323D
fn_E619079E_A048_43F7_9AC7_1A7DA1E51D2A
fn_E6AE8661_3DCE_4CE4_B0B1_44EBB9A6ACFE
fn_E8562752_F16A_48DA_803A_5E469E8ECF3F
fn_E944A93B_CA27_4812_B45A_8CAC0C0917F8
fn_E9F4AC9A_1F60_4FEB_BC4A_D31620E9A8A2
fn_EA2BEC2B_8EE2_4EB7_9F51_C205D648A45E
fn_EAAADF20_B882_4729_B841_0C41AC5EB395
fn_EB0E3807_F24F_415B_901B_5EC9D3C556C0
fn_EB8589A8_48BA_4A2F_AD96_48862B88CDE5
fn_EC9D1E60_A5C1_461B_BF33_E23F3EC42C07
fn_ED47FDE3_4299_4A94_BA00_FE4BBFB93CEE
fn_EF1D846E_3ADC_43C4_B416_F91F7B4F7933
fn_EFB26653_90B9_4CCA_A10E_2CEF09E0467B
fn_F0CA6A1B_4734_491A_B48A_F429D8A94D3E
fn_F112DB4D_A199_4C8F_B103_7E26EDB41D22
fn_F444CF3C_DBD2_452D_95E4_5BE912BD804D
fn_F47BAB13_F758_4795_8DD6_FEA9375DEBEF
fn_F94577F5_D6DB_4A06_8FBB_96B947252795
fn_F982C3F8_5508_48A8_8139_52543DD53BBE
fn_F9EC35B7_A4FE_4091_9308_B066BD29EA04
fn_FA78FA02_5424_4E28_BA13_B73DA7EB82F1
fn_FCE0B2BA_C1C1_4C65_B5F4_E6C075909125
fn_FDE4D056_9668_4D31_A5AE_81488620D996
fn_FDEB3B66_E728_46BB_A0E8_94F8F4737753
fn_FEA20569_2BBD_4104_843C_E79D2C19F6D2

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 34KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 34KB - Virtual size: 33KB