18400b19fb45e10c7b4b625133b286fb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

18400b19fb45e10c7b4b625133b286fb_JaffaCakes118
Size

702KB
MD5

18400b19fb45e10c7b4b625133b286fb
SHA1

8b41a4a64bc4dbf4668e26326ffc6d92ab98df1e
SHA256

c1d45ba9c8aa6e68fb34c675c1d161aac1a110b263b39a0343ef6ae049a3c40b
SHA512

de7c3315914023a3d1c6145653daa96ec8856771ca1413e3c9c1920e1e6e2371dbab0a25f9b2311b5f7d0e6cf23022a3388be32510d4622748b601c71e55782b
SSDEEP

12288:ZSj2CqSE83kcvWc4izHDAFH7U1M17fVBN1Sybd7IOIc7Oa8vd72ma4owVW9qUurR:62nSb3kc1DmIcBNj9Ilc7Oa8vd72ma4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18400b19fb45e10c7b4b625133b286fb_JaffaCakes118

Files

18400b19fb45e10c7b4b625133b286fb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_00F033DC_3137_4F37_BD47_645836BB3ECA
fn_01007843_9D4F_40B8_A209_BF44496D7C83
fn_013A70CE_0150_4BBC_8DB3_FE31F3FD5FC8
fn_026FE340_2993_45CF_91E0_8DBA74B5D10C
fn_04949DEB_39A6_4A8C_8D90_D2EFA9450214
fn_05DA737E_865B_44AB_AA94_2997BD979E88
fn_071B884C_3AFB_4531_9A92_57D91A7364D1
fn_07950784_81B2_4C82_9F2C_AC576C258AFC
fn_07F20C3B_2D71_4809_98D1_19C067BCB898
fn_0824DB32_D850_480B_B1C3_F37EA13449D1
fn_08C4EE84_7AF6_4AFA_8B1E_B7C77457427E
fn_095EE6F3_005E_4F66_836C_A03180FBBBF3
fn_0AB4129E_6E0A_474C_8A7B_1FEE380D2DF6
fn_0C889CD3_CA17_4540_BE30_136AE28121FF
fn_0D1783A3_09ED_4A62_9227_212DDB48683C
fn_0E7C0270_4B57_4332_9D0B_009492526B34
fn_0E9E3F28_18DF_41DE_865C_88758DE7A0DB
fn_0EB988AD_D1BE_4D11_9E22_8DEC30B03DD4
fn_0EF7347A_7F1C_4A72_86B9_42CA7512A35C
fn_0F8067AB_6A3C_4038_8592_E6C833D06FEC
fn_10487A86_BED9_4AC5_B7D4_A92A6058B275
fn_10504279_64E0_4CC8_A880_35679162601E
fn_1489AA66_7639_4516_A72B_696C3AFED3F5
fn_1490AC3E_A2FE_4090_9385_75F2B0E46787
fn_14E9DA97_E189_47D4_979A_F389CB9A2BA0
fn_16262922_8D1F_40C5_A0D6_D6209BA85460
fn_165661A9_E9D6_49FA_A21D_EE2ACF31F072
fn_168341DA_01B9_47DE_AF69_BC027A0CE2DD
fn_17016615_9B70_4E1B_837B_F82E50F7B106
fn_1788BD21_6EA7_485C_A5C5_A60353F937DC
fn_179FEC9F_DE08_4AB0_9F82_C38F549E59DC
fn_17F47A55_3F02_47FA_A059_BBA251FB417D
fn_18C459D5_2337_4E85_A2B7_0A0142AD70EC
fn_19911F8F_B7BE_4399_BE8B_277744A763D2
fn_1A1B9CA3_B805_4AED_81D2_6E8E4EE93C41
fn_1A250D92_CAF2_426F_95F1_F25801C54DA0
fn_1A449EFA_1A8E_4B25_AC4F_C75D3ADEA8EA
fn_1AC75BBF_BAA0_4A44_8DF4_1E35F8402A0B
fn_1C7C9F6B_45AD_4D7A_A156_063BF788C5C8
fn_1CD0C393_9ED0_4DEF_810C_A3D73CFEB95A
fn_1D4A10BF_86F3_4AC4_8A77_B54344981ECA
fn_1E41F1B4_CF9B_4311_BB2F_63405895F560
fn_1FC78CED_9DBF_4590_B8D1_BB483921BA1B
fn_21A2398F_8855_47D4_8174_FF4B71D837EC
fn_22BFA7B7_2D41_491D_B043_BC9B9CFAD42B
fn_23B0ABF3_377E_4540_B2FD_2CFDE118204F
fn_23D611DC_8560_4C30_A489_BFF4D0878F3C
fn_26AF3A89_C62D_45B7_B5F0_415DB9DF4F4E
fn_270296C5_170D_48E1_91CB_EBF86812E0DE
fn_277F4F88_602B_4143_A745_3D98C28C0814
fn_2938AA23_F246_4912_87E6_6BD6AB1181A3
fn_2972D32E_1F4F_4DF9_8658_A5549617A742
fn_29F5365A_896F_4959_89C2_05B55E371C5A
fn_2B8EE67E_E803_45E0_A991_D27EB5B2D0AB
fn_2BBF71F4_683D_4EE6_98D3_22B8EFD41D2F
fn_2BF633F9_FDA3_4515_9BBD_AA57BF9965E6
fn_2E1B9715_E421_4A67_B19B_0C6D98A17433
fn_30F3323D_1B03_4CCB_B00E_29E5C4DF5A1C
fn_3138C4E1_7ABA_4115_8F69_3985DFBA1B4A
fn_3396E9BC_D2F6_4427_9ECB_3547B338F693
fn_3469D298_E57D_4B1A_A16E_90CB99726FAE
fn_34B6856D_D12C_4D11_9752_DD2D474A4347
fn_34D56977_2E04_492D_966B_A7F9138AD373
fn_35144899_70E1_40EE_A3FD_1BCDCFD025D6
fn_375E5ECC_B65F_4B5F_A15E_BD3511849610
fn_3A14D822_4D5D_45DC_A624_944E18328AAB
fn_3AB5A605_E91D_4610_92E3_3C4AE9639F89
fn_3AC1BF94_F3A3_44AA_AB1F_CBD0E6A2433A
fn_3BA70F23_4C58_4E77_A82B_DB3B9FC5D0D0
fn_40B35A90_D4A1_4E7C_81A6_CC3DED76D601
fn_43820324_094E_4823_B516_DB5C06FD7F36
fn_44250ADE_8EFC_45AE_B27B_EFECB517DF72
fn_44CE23AC_4158_4FD9_832E_FD9F819319EE
fn_45648A3E_BC7A_445B_9A16_B8B6ACF44D63
fn_45E7B724_B6CB_4857_834E_0440B3EB4D73
fn_4678C656_83CD_438C_B29E_2B6BC9969B27
fn_4756C3A1_5ABF_4550_8ABD_665875F528BE
fn_47A80907_3C1F_4983_B67F_0D0AE7CDBFE7
fn_47E1B316_C2A8_444B_80AB_858B1E0D301F
fn_48307A87_5E8B_43AA_90F4_4C51C5ABDC30
fn_4871169B_38BA_421E_9088_E9EAD9435D32
fn_48C7F1F2_E534_4378_93AD_1A50C322DB30
fn_4D8E06F6_9B11_4223_8F7A_77C1F2275490
fn_4DFC0900_948D_445F_BCEA_9FA6A4A7CD2E
fn_50608913_52DF_4319_AF75_127E319182D5
fn_51273F9B_ED1D_499A_9C6D_10264FB05097
fn_51691294_DC6B_4365_A1D1_3D43C38A8AF3
fn_521E6316_537A_4FB0_9775_D81B4D11DAB7
fn_52D9A0EB_71A5_4A39_9E7B_B5BEE2ED580D
fn_55F9C062_ACF6_4B7A_9CE8_2DE5A308585B
fn_56D2CE71_F80D_425C_A986_27C776D61BD6
fn_571E8065_44F9_4E74_8710_91C9A52456B4
fn_5768C558_B71C_4B21_AD77_9F721C680E9D
fn_57FE725D_7CE6_4711_A6E9_C9F40BE19EB7
fn_582ED49F_BFAF_4A9B_B713_F97D81429A4D
fn_58BCAC5F_0422_448A_9C68_C8A6093AA338
fn_599AB202_89F7_4E38_90AA_3DA3B930F3C5
fn_59F65E5E_5EDF_42F7_A933_CFF4EFEF6666
fn_5B21160D_20BC_497B_8BB6_0B15DB3468C9
fn_5B537417_1629_4B91_9EB1_3735F9F5C7F8
fn_5D35F8EC_A50A_4792_99B5_8B791E8F0E7B
fn_5E480682_1E43_4884_A02C_9996BA7CF318
fn_5E8AD712_B0D3_449F_B822_51407176A66D
fn_5FEB68B2_E0D3_4C66_A860_664C5E6C28BC
fn_6022AF9C_5487_46D3_8025_CEA81546C28F
fn_610684D5_A3FF_4362_8852_5D51784BF7B8
fn_61552483_CD32_4920_933D_A7928620B8ED
fn_621E5F3F_F27E_4F08_94A6_CB53D61EBBB6
fn_6238C741_076E_4F72_987E_E8AAC0145E56
fn_64A80852_35B4_444F_A21C_85D220A69DAF
fn_6501D20B_9CC0_4474_9059_78F2619627DE
fn_65A2B3C7_9754_4DE9_AE14_650F2D6D0685
fn_676C7159_1C03_4604_85A6_FDE7C444A28A
fn_67D1F123_306D_47B0_9F60_2BD63F99D43D
fn_6855FB36_6650_47A2_A3C1_5D585BF04299
fn_686445E7_5C4D_4E69_93E8_8B3AFC4B895D
fn_68F26F8E_AF10_4BBE_9733_895B256E9712
fn_6958DBEA_B674_405D_BD41_4AC026076E24
fn_69D136BF_5002_44F2_BF5B_5EC7AB1645F5
fn_6A5AC952_7C4B_44CF_9FDA_3837F425A0D9
fn_6B765AC4_48C3_491F_BE75_E2C4DA2BD360
fn_6C73B936_BA8F_4E01_806E_3D301A52AF9E
fn_6DE5F477_84AE_4CA2_8FEC_902FB441BC0E
fn_6F570B58_C9EC_4ADD_A38F_5084FE1E8278
fn_718202C3_A30B_4656_9B56_7A4C91C44DBD
fn_71C2F66A_E440_47EE_BC7C_30F9A950035E
fn_71D0B768_784C_4258_9FA2_3739B8015E80
fn_72CE27FB_8985_4B3A_811B_037540387401
fn_7457DF4E_1E9C_4B30_ACC3_A4A044FB6C49
fn_75F3EA8C_C98A_4D2A_8639_7C1588349E3C
fn_76005312_5ABD_4478_8861_B0C9A389910F
fn_762A4983_FAB8_4AC0_A7F5_536CBC13FC60
fn_77A71A25_89C1_46E9_B672_EC388A99E561
fn_7BCB93E2_4BE0_43C3_B2BD_B1CE6151117B
fn_7E10172A_3579_4CF4_AA22_09AC58BBA278
fn_7EA191A9_7E7E_4259_BD75_1F4BF4C20644
fn_806D9C94_1149_4E91_9919_5DACEBA9263F
fn_82E85039_0403_496E_97D2_46760FA1E613
fn_8431C885_38AE_4131_81BA_FE0533367A7B
fn_8482511A_5ABD_4E96_9239_632EAEC48914
fn_868DC4A9_CD73_4C47_B93A_340AF02F7CFF
fn_8818EBE6_5359_4198_A94C_974F85C3E908
fn_89943F12_0E97_43C7_9654_1F8A0898CEAC
fn_89FD073D_BC43_4748_8351_5AB779F506BF
fn_8B1D015B_4AB1_49B7_8F87_53C345C0E3A1
fn_8B7E14DF_8BFF_4D70_9DDA_D76092DD8D68
fn_8CA4D24A_7030_496B_8C0A_20C533BCAC87
fn_8CF81F9B_6554_4E49_BD10_0933426F696B
fn_8D281FDF_C25B_4AD6_A210_C305B1D26348
fn_90029A22_B477_4F75_8A5B_AF2FC2277370
fn_902C0BDD_69B8_451A_BD2A_B059036D0F85
fn_914DEE3D_F977_4AEB_9601_D0ED9EA6301F
fn_91825757_BA2B_4034_9808_64F6A7048530
fn_92A7B3CC_24EA_4908_B71A_93CDF871D042
fn_9517995A_356A_4B7B_9535_39A0C4B57DED
fn_9809599A_3FD2_4654_AA9B_E1790A3608AE
fn_98149543_2FF6_40CE_9D7A_21BFB39E05A9
fn_99810957_CC6B_418E_B3CC_7A8CAAC4D5FC
fn_99B0385E_C5FF_4826_953A_1526E0BD665F
fn_9C23E476_D45E_4E53_83C8_F6CB43428317
fn_9C922F00_9432_4145_A40E_56CBAE7CEE0A
fn_9D3A4B8D_A226_4B00_9A45_BD04320C964B
fn_9D8A0AD5_E079_4AF6_A155_BFDB664436F6
fn_9F4ACD47_E582_4528_AE1F_BFCEB5CE0C31
fn_9FF6F31B_3303_4BA7_9951_5C4646D173BB
fn_A0BD4EAB_6EEB_4CA7_BABD_DDFD3503BEE6
fn_A11BF790_310C_4A9B_9B3B_0D352CDCA643
fn_A44D8237_3D45_4CD7_96DC_4753BB86C8CE
fn_A55A3047_3481_4372_84EF_9CF4753E7CD7
fn_A5A508C6_1672_4C7C_898D_6CF1F590A1A7
fn_A7447831_345C_4772_B82A_83FD9853B2D3
fn_A7597E6F_3342_4924_A044_807778351C84
fn_A800619E_89CD_4075_8449_CC4C6C289C04
fn_A91904BF_C2B4_446B_876F_90F64BE8D10E
fn_A92CE89B_3AF3_44B4_938C_D5DDE03D82FC
fn_A9482598_C97D_4E79_A52A_B62BA3DA6492
fn_A991A687_5602_41C9_BA5C_A32B452CA106
fn_AA320F5F_A077_455F_8449_F7CA5D70086F
fn_AABD5B8B_DD6A_48DF_A0F1_206EC021C8E7
fn_AC8A9B63_AB89_468A_9837_02875357AF59
fn_B20B9E6B_10EC_4735_9300_4036EFFE38E5
fn_B26A9BF7_CED2_4929_B4A3_84274EE47488
fn_B2EC2CD4_F027_4D53_8E99_D01ED884A404
fn_B46797B0_DC36_4A76_A4B4_3A44F9D3E13F
fn_B5CFD3F6_88F0_46CB_A1FF_07BB8B358529
fn_B618082B_AF37_4496_BED3_CD43F330012E
fn_B618A047_02C1_471B_B830_EB2763489F13
fn_B8280046_8F60_4DB7_B9CB_609F25FF4BE2
fn_B85B89D0_B799_4A2E_AE39_938F8C4E4F24
fn_B8612B92_BB52_48A4_A4D6_2B62E1BD297D
fn_BB76F4F0_A004_49A9_8AF0_1E2846EA8E4C
fn_BB7B18C5_CC71_4EEB_97BD_EC44B7933C30
fn_BC5217D8_13E9_464D_91A5_AC2FA7DD15DB
fn_C2804C1E_C1E3_4F6C_BA33_56F63AB9A1A1
fn_C2BE19FE_673D_4F71_8B07_03AC434D0A4D
fn_C456B756_E16A_49FB_8612_3043D063CA4C
fn_C4FD1F92_1076_48D1_A197_0D350C6F1618
fn_C719976D_D088_4920_99ED_73FC55EA5F90
fn_C7F9DEA0_D51A_4377_A5B5_41A0B3E3A29B
fn_C905DF0E_91CA_4A1D_AD8A_BFB694A49435
fn_CA38DECA_647B_43A3_8253_DC19DD7EB08B
fn_CB2A3E41_A955_4BF9_AF16_C7AAC6C0C16C
fn_CBDEA662_1E7F_42B2_8608_DBE9769B7E27
fn_CD6E8937_0920_4827_8DFD_B2247C3658D9
fn_CDB4BC33_3FD9_47D5_AE24_262789D10DB4
fn_CEA2E63D_BB32_49A7_8E39_35D1F945FF82
fn_CEAC8602_B1B5_4F37_878B_0F7905BBA2AD
fn_CF30EB96_2AD4_4263_82AC_C44B748A1A80
fn_D0F01E08_FDEA_4757_95E9_5A077CFA2DD7
fn_D1B32589_5C2C_422D_8296_FC78D0A69416
fn_D3D13F3A_937D_49DE_A8FA_0896E56C3FB2
fn_D5F9A5ED_3DFE_4C47_A251_4D22BB572A4F
fn_D691A989_8CD4_4FE6_BDEC_C4BEF7D89F78
fn_D80EE771_4235_4905_AB81_AF6537626ADF
fn_D92D8354_C1E0_4069_B7E4_E04816058E29
fn_D9672DDB_D14C_4C0A_B7F6_EDB0A348343B
fn_DB2E9881_58E4_4945_A7BE_61D3E7246A51
fn_DBD2AEAF_01A9_40F1_B5E6_79D6FACAF732
fn_DD540ED3_DB25_4DA9_8024_EA9230A53EB1
fn_DDBD7B6A_6DCC_4274_B917_3603CA116675
fn_DF3F3337_5B26_4AD2_8E96_4932E68E3E4F
fn_DFA39D23_1559_41A8_BB8D_FDDA9AB27A62
fn_DFB3EC9B_A003_4615_98D2_F32D8D1F37D8
fn_E192DE0D_BC91_4A60_BCE2_1C39145366C6
fn_E5E579CF_8915_4743_BD8E_AD522058B9AC
fn_E6198D69_B749_4D8B_B095_63FB8FA8FAB7
fn_E88D01B5_8868_4B96_824A_AA005BEABB1E
fn_E9FA6E36_FFCA_4A57_BEBA_46B5C35EAF8D
fn_EA275392_95F8_4C07_9A6E_431750520DDD
fn_EA570914_E142_4F4E_A6E6_57FC1DC38E10
fn_EA81086A_739F_4CD1_B779_9ADF002633AA
fn_ED761131_0BCA_4492_BAD7_71FEDE0A78C0
fn_EE052229_0F39_4E0A_91DD_95741D7CFB10
fn_EF432485_C994_4BE6_9AA6_ACEF9C11C419
fn_EF97B520_86D8_431B_A0D9_5F3025DE6843
fn_F0A523E7_BBF1_415C_BC00_3A782968B4E2
fn_F13F05DF_A241_4379_B9D0_1EE7FC8D6D68
fn_F17FF311_3D32_4FD5_93C9_9758AE882447
fn_F20F1D3E_F45D_4A7C_A14E_A5209C803A42
fn_F2117837_63D7_4418_A132_39441C0B194C
fn_F332C2E2_A64F_4872_BFAA_F974563D7665
fn_F3917058_B1F8_40AC_99F6_802FB99AEB9C
fn_F4696EDA_DC01_41E9_84C7_AE085201875C
fn_F5DC4F9F_1E7A_42A1_AAFE_581DB02EE01E
fn_F6C270E1_D3C7_48DA_88A5_79667A47CAE5
fn_F751D9E4_CBEB_4BE5_AF07_500767E5FB3C
fn_F88688D9_6EEA_414C_BC6B_9941666D20B3
fn_F8ED4A27_C80D_47C6_9ADB_309555213A36
fn_FAAFFF33_ACB1_4090_87E2_2ABFC6A28DD8
fn_FC94FB65_E528_49B8_9A4B_64AD32AC2AB5
fn_FD17B475_47F1_4C65_A611_3663407C03E5
fn_FD23AB78_2E19_4DA7_9AB7_F72684954CE3
fn_FE0132F0_48A0_4121_9BA1_B5DA6B8270D5

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 34KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 34KB - Virtual size: 33KB