0e9a5e7c1e8d2849110b21aedf700fb9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e9a5e7c1e8d2849110b21aedf700fb9_JaffaCakes118
Size

702KB
MD5

0e9a5e7c1e8d2849110b21aedf700fb9
SHA1

00cd37ed75f6ae99d95a36bfd6c44f6de7ff08fb
SHA256

cf6444d5ce7a80a33898b4370fd7868c5ad14ab81fd80a1ce54c51b30ca01778
SHA512

5598d30ad8a8d922e9d20a74ed32819f72413b0981696735fce5fcdc6008cc05fafdb451390154bc86d3a0427d036e5f2fdb72b06153dedae96dab5ac3039514
SSDEEP

12288:Z5ROCqdTHH1XZmrYzwHT9lH7U1M17fVBN1SBnbd7IJIc7Oanx910WL2RHXBkfrT5:dOnd7H1XuTPIcBN0n9Imc7Oanx910WL7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e9a5e7c1e8d2849110b21aedf700fb9_JaffaCakes118

Files

0e9a5e7c1e8d2849110b21aedf700fb9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_00997533_C5FB_4A78_9CCD_286D18DC6FAE
fn_00F15AF4_78B3_43A4_BEC7_E5EC3EC0E84E
fn_02275797_261A_45F4_9B0B_1B682AB54777
fn_025DB75D_0CC5_4299_8D2C_B3375152033E
fn_053FC82A_772A_4070_9B40_47CC867C25A1
fn_0633BE24_0787_4E38_9D93_70EE0A3630DC
fn_065133D3_F892_4A04_9D75_C7829767C9D1
fn_08E8CD1E_E8D4_40D2_92F9_97922DC37C88
fn_09F02512_6D5E_40C7_8F38_5247B66AF75C
fn_0E4DBDCA_0849_4477_8390_3ECA4CDC3FC4
fn_0F15143D_C485_4683_8576_73AE811A3A6C
fn_0FCDCED4_6845_45C7_B818_5BE5C2A79812
fn_101127A3_93D7_4BBA_ACC5_DF3875C80204
fn_1022FB51_D3BD_482B_AAB6_FCF1D0D45B09
fn_11F4BD5D_BDB4_4061_8034_5BD82486455B
fn_12417F0F_8525_444C_8805_1B38D571BA4D
fn_13FCC55E_DDDC_49C9_B634_3E2B24EFA67F
fn_149BD8EF_F1D0_40E1_BDCC_74F91B8B01A2
fn_159D5DB9_F85E_45DE_890F_87E275D6D855
fn_172D4129_B713_481B_8F41_3B119BC24E95
fn_17FF5A8B_828B_43E9_AE15_9691BC6826DD
fn_18D2071A_8750_4A15_9F4F_CE41AAD1A323
fn_198D7CE2_9A60_4DF6_8637_728CDB615675
fn_1A2CBF2D_01B6_4DEB_A38F_BBBF91A1DD31
fn_1A4CAC63_907D_43A8_825A_C0E324927EDB
fn_1ABD478B_43DE_437E_94FD_1B04E597495C
fn_1C20EB64_B31B_4805_A0D6_52EF3C76ABBB
fn_1CC3494E_7730_4364_9794_E693E6072EB2
fn_1D98D019_C555_4EA8_BEED_117475EFF8EE
fn_1F5C01D2_8F9C_45BE_A163_258A668971F3
fn_1FC1C9F1_5A4A_4776_B3D2_DCC99471F044
fn_20BF3AB6_E61C_43CD_AA04_0A668E107B5E
fn_20C6CFD8_149C_40E2_9088_FF7BFC95EE76
fn_2162324A_B307_4CEA_AC88_8A1AE541AB32
fn_24556A41_5980_4927_BB23_113281063FAB
fn_27F01006_57BC_498D_9857_BACDE8E29F04
fn_287A4071_98C9_4BA0_83EC_57ABF3F25FB2
fn_28DF653A_2E59_482B_A9E0_BFF73681EB7A
fn_29F0EF67_E090_4805_9B5B_B8F0ACD6A56F
fn_2C63729E_FC4A_4D31_8062_722FA5968CAE
fn_2CB7F340_91CC_49F9_9125_9188509EC77F
fn_2DE620A1_0603_48ED_B126_2A4C9D5869DF
fn_2F9B884D_1A0C_4EE6_B15F_C5B263748A4C
fn_359D0EAA_C0F9_4290_81F9_FBD8E42B4FEB
fn_35E872FB_1B13_452B_898D_A8E42A6FC057
fn_36A0730F_CAA7_40D7_84DB_93B72BACD643
fn_399B799E_D1D8_47D6_8547_769707BACC57
fn_3A0A4985_85A4_4D40_802F_A02DA99672E0
fn_3A5A6714_E64C_4629_8688_C4E3D2A02F4A
fn_3A5BB5F8_1643_4D69_8711_175540498B07
fn_3B12A70D_1A0D_47F9_A235_2186AFB77C4A
fn_3CF67E94_1682_4E6F_8007_22594D275ACB
fn_3D02B80D_6FAA_4A3A_BB8A_F917E72D3493
fn_3E1AF722_A84E_40B8_95D4_CDA10649AD26
fn_3E65CDB2_BA34_432E_8F3B_2CD281D8622E
fn_3F26F869_07EF_412D_8EF7_A1E0520D87E4
fn_3F5B72D0_6BE2_43EA_9345_72E784DAA0C9
fn_40357281_367D_487F_8C84_934E6FDC2DD5
fn_40395869_786E_491D_AFF2_B66802957E55
fn_419E07E2_D30C_48C6_92AC_1F81E6AECD5D
fn_41C2A866_CA95_450D_957B_571A8149BEA2
fn_42E278E2_7C21_4F89_BDDE_454492B0F9CE
fn_44EB1A36_BE64_45D7_BE0D_6D0038D36BDB
fn_44F55160_5B35_4F60_93D9_48F76CA76B43
fn_47F1DECF_9078_49CD_B15C_C152A353BF31
fn_4815AD47_B009_4A3B_8A60_7A4D2D08CC44
fn_48B03932_7943_458F_987D_BCAFAA348B11
fn_48B39AC4_BE33_426F_A72A_EC2569EFE406
fn_48C81161_3875_43BB_B07A_BA623E3D4C2B
fn_48DDCD25_F770_49BB_AD36_C0EF89EAD766
fn_4A898764_BAAF_4FDF_A81A_707B209F0BB2
fn_4B2EE645_0AA5_48D6_B391_A487CC87815A
fn_4B38ED18_BF7D_4279_9BB3_AB12BE8FF87A
fn_4BC847D6_FBBD_4A38_A1A7_E85B369DF71B
fn_4C520F77_3EA9_40AC_8C76_ADB95EF34AFC
fn_4C924C8E_445F_4885_88A6_801855F124D4
fn_51C894BE_6D0C_494B_9751_3760044B84B0
fn_52FEB8E2_C026_4209_9E02_556FA2DF0EAF
fn_53A49CEE_C56B_4B0A_A70F_DDC9685C2442
fn_53FF3901_4DEA_425E_9C4E_F55EEBF8FA7D
fn_5568F32E_0252_41B6_BA7A_84B64BF637DF
fn_56628549_FC14_4242_BC36_E636E964677F
fn_57E85E50_C962_4C2C_8176_D1B043B95E3B
fn_58325600_CDFD_469C_9FA8_30157591F6CC
fn_588298A5_CC82_46B3_A410_AF3147081862
fn_589448DC_FB52_43B5_9272_907687F17CF5
fn_59623B8A_1B48_4279_BEE4_1B830A7AC5D9
fn_5AC11043_A889_494C_940C_2DA7F908ED7C
fn_5B95868B_271E_4F3C_9E93_866300A260CC
fn_5BA8FF43_18CD_41CC_B46E_AD2D42AD9658
fn_5BBEAB1F_55C9_41D4_87A5_D9CDB0EFF91C
fn_5C93B4A4_3D4D_4242_A16F_6163F9650A81
fn_5D2066FD_1D89_49FA_822B_74C14D57BEA6
fn_5D4F1FB5_6633_49D9_AA31_E1E14731F6B4
fn_5DF74A3E_9F5F_444B_B2F4_A7C053AC0F10
fn_5E8C133D_F159_4422_9769_5BDC966799B9
fn_5F0EFE50_61EA_4E09_8BBF_BAC59FFEF7A6
fn_636B5419_9CE7_4C77_8387_D638429A685B
fn_637410DE_BD75_45C3_A88D_C721E05A51F6
fn_64032513_A55C_4775_B115_5C15E31650D5
fn_64DB7ECA_0100_4613_8ED7_07DCBB24A447
fn_668E1141_0843_4D99_A6EB_B24756702162
fn_66E5CAA2_58D4_49CC_9A7A_091F2665432D
fn_66F4F8FE_0D77_4669_9814_B20E1FDE4750
fn_69831E1D_22B4_40F2_8F34_1F75476A27AF
fn_6AB27663_F594_40DA_ABB1_0039511A5D2F
fn_6BE477D7_CFA8_4C3B_8104_8CE2870928FF
fn_7068467D_65ED_406E_9326_A3F0B618CA23
fn_70B71CB2_5CD3_4A04_A48D_3A4E15E872D0
fn_70BD0CB5_BD44_4A60_858C_3C199FF8B12E
fn_70E68D73_7CDB_4DF0_A086_98C73C0C9D96
fn_7116448A_F253_4E61_A049_72A46A567CF1
fn_722AE88B_FBDF_466E_8945_3FD8A503D009
fn_732B5958_EB5B_4F07_A29E_120FE8121737
fn_76CB2D78_F033_44DE_9AA4_F8F3F2112C29
fn_78FC5085_ABCC_4EC7_989F_5478CD7FBC12
fn_7BCF3626_C66F_44AD_83D1_5DD392BAB0A2
fn_7C5901FC_73C9_41EA_8966_5CF0359FF0B3
fn_7CB36D14_A831_4555_B728_6762615CB269
fn_7CB948AE_2481_41FA_B0AE_54E649768D49
fn_7D7E9DA2_DCB3_4280_AAEC_DA9FAC7C5BC9
fn_7E85D467_30C6_4F4E_BFC1_306153A569E7
fn_7ED0A4AC_E1FF_436F_8189_CE03278EA377
fn_7F166390_8EB9_41CE_817C_3391B77EEE47
fn_7F51D0BB_2AA4_48A0_AD71_6E447E15DCE5
fn_7FE1DA1E_4EED_4188_8B61_B8F9C0D6077A
fn_80906DF1_8A53_4818_8112_74E28BB5F7E0
fn_82C73DD4_C9DD_416F_8391_814EADAE6FFF
fn_84DDB48B_4A68_420E_89C7_41ECC3AB10AC
fn_85036B68_AF0F_426E_9446_A1EED2BB9E9D
fn_850724CE_8B71_4E4A_9DF7_067E7D13EA99
fn_861C7159_32EB_4BB7_A125_E980F814FED8
fn_862C36FA_E759_4908_92D1_48908451E2CE
fn_8672EFE9_6343_4592_B2A4_BF29474B77CB
fn_88ACEF3A_4CE2_45C6_9428_A36456B692E5
fn_89547BDE_835B_4065_8104_EF1E770F40E6
fn_899935DD_F9BD_4F4F_9AE8_768D34BD4880
fn_89EC504C_7C6B_4307_B34F_A823B181B730
fn_8AC5F0EE_0D2D_4ADB_8376_BC7CD0CE79CB
fn_8D3B4524_E546_4C7C_A1FA_D4CBEDE08D1E
fn_8E4359C1_29B8_4922_8362_6C6098FC8D56
fn_8E5FAAEE_1A3F_4D3C_A307_7695AC3F482F
fn_90933E91_3A51_4762_B55D_9F7000FF6479
fn_90B7FF79_EB6D_4B36_9875_718E3490DA94
fn_91FC8E01_09F9_4568_BFFE_517822D3F8DF
fn_925BD3C7_536D_42C6_A425_26FA9A7317D5
fn_92A2B468_3F61_47B9_8EDA_EE1A640BAB76
fn_92BCFFBE_0662_49DD_B866_D20439F1BB7A
fn_93C3E322_4966_42EE_B502_9566F6F78A58
fn_966EC4FB_7431_427F_8662_1C63C2CCE410
fn_97130095_4A7A_453E_979F_23835E6EB760
fn_97234FCC_DDEC_4748_AACE_CB4E9591B223
fn_976FBAD2_207E_48D4_99DD_3BE17CC6BA1F
fn_98107218_2175_4AB6_9DAA_69EA7ED59B7B
fn_98505348_F407_4B1A_8748_746D4F18DF68
fn_9913DCD8_B952_4003_85BA_B5028CF7046D
fn_99D9F52A_C22D_4077_84F3_F0CF78C17146
fn_9A797239_F76B_4229_9594_E28E3B26CC81
fn_9A8295B6_65FB_4A18_8A76_16D79A14A2B3
fn_9B6BB002_818E_4FFE_85EC_FD72ADEB4E02
fn_9B8A733E_83E2_494A_8171_24DB9A27B236
fn_9C32CB13_6C30_439F_9131_740EC01AA6BA
fn_9C8F3F87_1755_4B70_BE9F_72B3D34E9616
fn_9CDB791D_4336_4C26_903D_CE8A600B7EFC
fn_9DAF2768_B313_4160_8E83_FE4A2D6BDCA2
fn_9DBD3CA2_7E59_453F_8A4C_B6EF3AE54264
fn_9DC885E2_C28B_46AE_B0E8_F6EE7737548C
fn_9E27DDA6_94A0_4A10_8C1B_864E5E2287FA
fn_9F2E8A6A_EA89_4F64_8E16_380F067A6926
fn_A1DCF1A1_A02E_4C38_B0C5_4102E8880B6A
fn_A38EFFCE_312B_4FDF_BA2B_9529D6681B50
fn_A5331142_EC2B_458D_98DC_BA3FF0C68CE8
fn_A60A1522_0B0D_4032_8C3C_1A9A128F95BB
fn_A874716D_EF1C_4AC0_B577_885D9E750993
fn_A8959646_4F16_4C78_A418_663164E50EB3
fn_A8C553EB_D22C_4859_94A7_10F814CD5996
fn_A91BE0C2_929F_481B_8005_FD6C053CAA32
fn_A98C1DE5_0BCD_4118_81CE_55F0F67E0BE5
fn_AA2085FE_4651_42D6_A693_BEA7EE21F032
fn_AB16CC86_198A_4E17_A093_EEA793A87042
fn_AB9FA8FA_EFEA_448A_A53D_2D6B5DC93996
fn_AC1FD0B6_3C6E_4DF1_9AB9_F3361F9537CD
fn_AD9A6BF6_C303_4C48_83E8_D1F6D88B2E1F
fn_AF26E940_297C_46FC_BD6C_396197AA10E0
fn_B0A94E4C_085F_4110_B7BD_BE5970953A45
fn_B2A36B17_E7C6_4C01_AE0A_271958F9D477
fn_B35F772F_4D73_4BB6_AD5B_5EB520C67958
fn_B506E184_CA29_4C96_A2C0_F1C757E7BF7F
fn_B5813A77_A342_458D_86DA_9B8FF38D2E72
fn_B6214CF8_191F_43F0_9916_DFE553632AC7
fn_B7496E76_3CEB_4083_82BD_2E4EC1B2803A
fn_B85DD64F_2836_4ADC_B985_38E9E1BDD72F
fn_B89FA4F1_468E_469E_BAF6_3B58C35678D5
fn_B8AB151B_2B9E_45DC_A5B7_F769EDA57FD4
fn_B9A7504B_3D85_483A_BFAB_A81CCE8C1382
fn_BA51E590_6A1D_4F23_AE18_70D591F24E3E
fn_BA74D9C9_83F8_4AF8_934F_C97DF9B7B56C
fn_BAC006AD_7D4D_46EC_9928_04B90FFC8D03
fn_BAF34193_7304_4AD7_A309_EDA67D0A2F3A
fn_BB2DAF45_CFB9_46EC_A091_C99CD4DCCBC4
fn_BB753E81_3852_4E87_A358_1C9A7A1131C1
fn_BFB65494_5D78_42C6_81EC_0AE21ACD6AE1
fn_C525C5E0_5050_4B2C_BBED_A071CBB5E1EB
fn_C56FD05C_6322_40CC_93D5_35F5D02D3F35
fn_C5D53CEA_1D90_481E_9772_B927C232223F
fn_C8C1CE4F_54B2_48B3_B68D_C277F095263E
fn_CB675862_4837_484A_B032_23884492DCC5
fn_CCD7573A_DA31_4902_A3AE_91C9E1609731
fn_D008DF72_A4D7_4C37_98CF_70E5CF6B4A24
fn_D0BED253_91CA_4EE7_B6B6_9C8AB248EF67
fn_D3C86DB6_4DBD_4599_958D_85748725AA6F
fn_D50E9299_A881_47FB_ACA7_AF773F2D6259
fn_D5260124_A8D4_4BF0_8482_5BA1995DCA44
fn_D5FF80CC_E30D_498D_B0E5_37B99CE7BED0
fn_D64021CC_A19C_4465_8C26_8AF505697A30
fn_D776D575_4C0B_4B80_93FB_AAEB961530BD
fn_D7F26BC1_9F59_4CB2_AD26_93BF18F21BA7
fn_D9E79535_0104_4DAB_ABFF_6A6190DFFD76
fn_DB8605BE_0921_4251_9F3D_ACF509CDD410
fn_DB91475A_975A_4CF0_83DA_0DC70F80C17C
fn_DC78E2D0_937B_40BF_8EF9_3C0F20398543
fn_DE7BB6C1_F545_4E6F_8E2E_7948777F0563
fn_E031127D_B4B6_46FB_BDC2_23E942E1F94C
fn_E165A975_0B96_489A_AC6F_A7679D5A6FD1
fn_E2A88087_9318_466F_ABAD_8B9A2A2E8DFC
fn_E452F2C2_E608_46D4_A2B3_9A08214C291F
fn_E472448C_FD95_4B4B_86AF_001FD6729C27
fn_E5D29B23_D034_4028_AAC8_33FE988C233D
fn_E6095781_59CF_410E_B4E9_07CB0512909F
fn_E6F602D9_78B5_4BDC_B8CD_1633D556A0AF
fn_E7024A9E_EFE3_48F6_9024_11F0B8E8FB09
fn_E9CBB2CE_26DC_4653_B969_770D27B557AE
fn_EADCD7B4_146D_45F6_8668_B9272BF40371
fn_EAF95FC2_B5D6_4642_A104_14645E7344F1
fn_EEB2A3D5_C5DA_471A_8701_4ACD9B636A2F
fn_EEFCCF6A_6747_4D13_B9DE_F4579A93CECC
fn_F0A3ECCA_99DC_41DA_8765_6DBAB78FA323
fn_F19D3A1E_57C5_41C3_BA10_C3DE980FB084
fn_F1F4E548_6529_4E93_A404_28BD01AC56A8
fn_F26789D0_3764_4157_BE39_6B566AAAE520
fn_F4F20F86_400F_44D0_99D2_2AFE6D30283F
fn_F73612C6_5555_4B98_BD75_BC735F5E530F
fn_F84E771F_149E_4925_BA73_2920393118EA
fn_F86D3D32_AA8F_4D9E_AB9F_817D5EAC17CA
fn_F94F8B47_6E32_4D43_AECD_7387650C0BC1
fn_F95CBBE5_72CE_45CB_B521_9EA08D69D0CA
fn_F996F03C_A3EC_480C_8EDA_22512FDA025A
fn_FB4A3BE5_C500_4234_B50F_61C5A848F9DF
fn_FBC25731_2030_4147_9246_CC883D94834B
fn_FCB28160_CF84_483B_A92B_EA7E7790BEDF
fn_FD12D04F_9B15_4BA7_B81E_923FC6551811
fn_FF7BEB49_00F9_42EA_96ED_CA59A6A39C6A
fn_FF991C25_73CA_4AFE_B95C_3055737349F1

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 34KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 34KB - Virtual size: 33KB