1fb04d3ed7591bede03f6823d36786ae_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1fb04d3ed7591bede03f6823d36786ae_JaffaCakes118
Size

702KB
MD5

1fb04d3ed7591bede03f6823d36786ae
SHA1

bfa41c31910c86830d7a1682d77137a4fa6f4572
SHA256

2c4234a1f121de55c24e04b868d60f2499f26ebe6028855d2a0fbb6db3dcebc6
SHA512

3998583d06f800ad3ae2ff9288c384ad5b1c87206c348b732cb4f1e5bfaa58154f84426315cd3e5796415685fabc2cbe145099c9b4a3c73ebd150bcc8d9176a7
SSDEEP

12288:9/DACq8aZns3AGrYrmHzqlH7U1M17fVBN1SCbd7IeIc7OaaeqmzItRMgtrS2Sebq:ZAn8Yns3fzQIcBNT9IVc7OaaeqmzItRc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fb04d3ed7591bede03f6823d36786ae_JaffaCakes118

Files

1fb04d3ed7591bede03f6823d36786ae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_0057F7F9_34D0_4B3E_800C_B981EFF13891
fn_01187B9A_7097_4E90_8659_F6EC54B0FEF0
fn_02A51580_7A1A_46CA_9F20_80BD0658E085
fn_02C29BE7_00FE_432B_B821_7966CDC67363
fn_0315DD62_6D2E_4B65_BC5A_B4C07ECE64BF
fn_04361DEF_3180_4BCB_AC6A_1B73AB19AED0
fn_0511D21E_4201_48F7_BCE8_31A239175DDC
fn_05F034C2_668F_4439_AB3C_07017B5764DA
fn_073E9345_BABD_4B8B_AC84_8E6F4D0B63E1
fn_092026A6_671A_41D7_ADA2_4D96AE3CD4BA
fn_098A39AE_776B_477D_8D6E_128213E3D801
fn_0A97C9F4_C9FF_42CA_8486_16E6E273AA52
fn_0B9D3117_F88E_4F96_A78F_C40DBFBECD3C
fn_0DA23EC5_B538_4546_B3FE_B2B3BDBA28BB
fn_0DC8D909_72CD_4AAE_A467_7B6932EF1570
fn_0F9E3B8E_0F99_407F_98FC_3E3D389054A1
fn_0FC2A4A5_D810_4E38_BF8C_8691FC6E59D9
fn_0FFCEA88_3A21_4547_AD86_A376E4F37E56
fn_10BB8952_0FB0_476A_B5A9_119092A9315B
fn_122808B5_45FB_40A6_B80A_024836791403
fn_136549F6_4772_412F_91E6_E33781C8FAF9
fn_13F0FBAD_026B_49B2_9DAC_043393A54CCE
fn_150D9F85_A4CD_4534_B7D4_F70C40356BDA
fn_15D5271B_64B5_49F5_BFD8_51DEA686DD8D
fn_1821FF68_E8D7_4DB2_AAE9_701DDD5FAC03
fn_198E3685_CBB0_4B0F_B40A_4F49DBB8B8DB
fn_1A88A0A0_B550_4163_90F9_B439823A54A6
fn_1B675D5D_9540_46C0_8312_ACDC0E56B0A7
fn_1C09328B_2AB5_41DD_9025_C3AC2080EE67
fn_1C40A020_2EB8_4BB3_B23A_A9C7C756E54C
fn_1E567AB2_143C_4333_B5D3_FEA7534EF910
fn_1F670787_9D27_4C41_A7FA_603DA2D55330
fn_2063A6B3_A751_451A_9000_F72F8924E122
fn_2128822E_12FE_4E88_BD85_B3742FDC07A5
fn_224D8454_D854_4894_A5E4_CE8E4255D2DD
fn_224F13DA_4C6F_4792_A064_93ED345BB329
fn_22CD7471_5BBA_4B3D_A5AF_63E1FCF7B9DB
fn_2579E782_82B3_486C_9E7C_0BC15FB34439
fn_25D612F7_0E14_4BAC_BF80_31974375B5C8
fn_265D6C28_B92B_4803_96C1_92663AC6D780
fn_2ABBFE1F_B186_493D_AD10_D036EC371310
fn_2B8F97C3_6B8D_42BB_8C28_2B803A47F7A4
fn_2D22EF06_EC7E_42B9_9A2F_637FF7AC4025
fn_2FCB3A33_9057_49EF_AF6D_EF5442DE3A93
fn_30F229A9_30D4_4FAE_A663_9C76050D3B34
fn_33823582_89BA_41E8_8329_665FE782963F
fn_354C95EC_C9FF_48DD_B1C3_B7AD58D7AD34
fn_35FB52CC_E36B_488A_B40E_70F43DB62434
fn_37AE4170_71C6_43CF_85DC_FF4BEF70EDFF
fn_37D13EFB_9BCC_4294_99B0_9A165C2442B3
fn_39467A5C_C39B_4C0D_9862_D766DE9946BE
fn_399B4AC3_12DA_4F92_A4C6_BD569A4CFB7B
fn_3A9DA3D4_4F6D_406C_9793_2663523F1276
fn_3B6692A0_AB34_42AC_9743_C95B03D2141B
fn_3BA4A5ED_A164_4609_93CB_24B4D4EE746F
fn_3C56A696_9729_48A9_9B73_DAC115E18559
fn_3E047EAD_DD46_4DBB_A5F0_82CB17187C96
fn_3F6FB3B0_046E_4AC0_9570_60E28EB47526
fn_3F8551B5_D9C8_4A90_8326_89AAC0F0595D
fn_41FF6D31_8E14_4889_A73D_04222442BDB2
fn_42CD5D1B_7EAE_4E2A_A0CA_493E2A810A29
fn_447A8096_20B6_4BBF_B2CF_A397173BB3F8
fn_448BB52A_FD58_4E4E_B161_700DF4B89A21
fn_455A2FED_D15C_4D11_B6E7_98FD951E1B91
fn_456AEBE0_0BC9_4D33_A951_8182FE890D21
fn_45DBB0C2_FCD8_493C_9409_78B7D194F804
fn_464E94F3_4BA4_46A2_8553_7E428091F9C7
fn_4659BDFC_43B3_4C5A_9EB9_E6D22B892CCB
fn_46FBF403_CBDB_4758_8DDC_9EA1975C10FE
fn_4750F1D2_7508_46B2_A7C7_C663D1F3D427
fn_47D74120_0E6C_43E2_BEF7_384A598C5F1B
fn_483A3989_F5F8_4A3B_8EE8_874F9E729C77
fn_4901113B_8D16_4F5A_863E_6212205F928B
fn_497D8D93_0276_4057_B313_2BA43CAAB265
fn_49919C6B_A9D3_4F7A_B414_3921EC562430
fn_49BD46C4_5A69_446C_BC5B_A5CA2CF25B71
fn_49D4D671_FD98_48C6_A673_8419FA379B2E
fn_4A3C07F0_7162_4C4D_A2ED_51489CB55F7C
fn_4AC6E580_2EB3_4034_B4C8_DC01B1BC764D
fn_4C4711BC_6307_49CE_91F8_B570866B7F15
fn_4DB77985_F47F_4DEE_8904_D435E4370EAB
fn_4F1CE63D_9011_46E6_AFD3_787AF8F62B65
fn_4F242442_01AB_4D72_97CF_AB18BC3F7134
fn_4FB4C48A_B521_4284_8754_E67D04BD462B
fn_4FFE73DB_1C12_4286_B74E_8BE110F905D5
fn_50C09FF3_E9FB_4541_9C35_E7D84C6295B1
fn_5362F2BA_A47D_4DEF_A591_A092E4CEA865
fn_5412DDCA_E9A3_4F9C_8BF6_57C07D6AEA71
fn_552E53E8_473D_404B_82DB_F4346D86C491
fn_562CCF4D_3A1E_40D2_BE63_25275C543F6A
fn_56519C1A_65E9_452E_ABBF_9BD2E2D9A3ED
fn_56E2D669_8846_4171_961D_13322EE39235
fn_57750941_6702_43EA_8699_4C0F4C914E64
fn_57BB345B_0D03_41D4_B57E_5EDF3C4CB72B
fn_59892E38_D4CC_4295_A99B_6E752372A35D
fn_59C12228_55F4_4796_A762_EA618498CEC5
fn_5A2814B5_D6E7_4F11_AC3B_13197AB909B0
fn_5C0C98E3_5F89_4093_8C51_5F0478A93E5A
fn_5D098AA6_3863_49C0_8CA3_4CCF6B118CCA
fn_5D29B9C1_48F4_4F9D_888C_686E2E6B38C8
fn_5FEDD5F6_4B73_4632_8A34_095FDA6421EB
fn_621134D2_05D9_4DFD_9AF0_25DDDCD273A2
fn_622BF517_EE67_4216_87E6_E216F7CB0F35
fn_6408E281_1A43_46B4_9F98_496881E65760
fn_66097A9C_A0E6_45EB_8AE0_3AE30AAB2E70
fn_6740238B_1F4D_4EF8_B3CB_CAB328136516
fn_693262DA_CEA2_42E8_BEE1_8FD59801F69A
fn_6A74DE59_8DD6_43C5_B200_817A645FE013
fn_6D7A8360_E4F2_4672_AB0A_64102FC2ACD9
fn_6E88B243_0C66_4B55_91EF_261049CDEC74
fn_6F664B4D_B403_4D22_B570_BA9D1C9A2C57
fn_70E2D60E_732A_4CF9_8455_B390530E1F91
fn_711E3053_7E28_456F_ACAD_0C656998BD19
fn_71DA48CE_E67E_46E4_9A3A_2E397B3DABD3
fn_724CCC90_E654_480E_95AC_925547002478
fn_736BF8A2_326D_4A2D_8B33_EAAEF344DD59
fn_753A7DAA_7AEF_48F3_8F4C_F5462DBE48A5
fn_7637A6D2_EB26_4E50_9060_D0BBFD5DD27F
fn_77528F58_8857_40A3_9744_7FE399B2F743
fn_77901263_0CFC_4090_B88F_68D5225577A1
fn_77BE4467_8E84_4927_A269_DDD3D1B453AF
fn_78D50BED_0251_40E0_93DE_6117C9036C13
fn_7C056E34_E4E5_407D_B711_4C015BA6B2EF
fn_7D3F3551_7388_4167_9DD6_8FA65F5A8918
fn_7D74936E_BFFE_48CA_B3AB_C43FC77582C8
fn_7E38798A_5A49_42A4_91D7_64026A2E965F
fn_7ED5E70B_BD56_4F1A_905F_E1FFC70BC6FB
fn_7F07ED8E_F437_44F7_8F6F_6BC793A34087
fn_7F2FE75D_EFFA_4962_BEEA_38F98882ECD7
fn_81AA57FC_46DE_461C_9E27_BA432A69F8D7
fn_8463F7DF_24DA_4982_95B9_765FB8CCF68D
fn_84DFFF83_0D15_4127_B486_C1DD1577C0EF
fn_85B60851_B63F_4F25_8CBE_36AC20E9F21E
fn_860C35E6_A0F4_4977_B9EE_07BAC03E1403
fn_87596750_2D9C_4ECC_BF32_97E30914CE75
fn_8855489C_D879_4BEE_AAE2_E4BD42022A32
fn_8AB2946F_CB2B_442A_8540_70E571DE37C2
fn_8C8676D4_99D7_409F_8CC1_3F7AE24AC4E5
fn_8FCCBA36_5D3A_4CA4_9F01_3858A191A600
fn_901B2BE1_4566_4E91_919F_004F840D057B
fn_902FB30D_40ED_4048_A8A5_3C287C99963C
fn_903F3BDA_F101_4F84_826A_7B76E388B427
fn_9066A9EA_8DA1_44D9_BB1C_BCF5656771E4
fn_9223795D_DF2E_4A9D_97B7_124927713157
fn_930F9ABB_C78A_4480_B367_88E1CD97B58B
fn_94E95371_D96F_4E15_8D52_23E65A93F861
fn_95011D5E_030E_45D6_A531_49FF25D2BAB5
fn_953AE103_710C_4AB3_8476_C973B048D0C1
fn_95DE20E0_4EAF_4F2A_8757_AD582C1C687A
fn_96B0F31A_8AC3_4B83_8B1D_6A2BA7957039
fn_988798C4_BFEB_4871_B147_136A67A247B0
fn_99A85474_22F5_4637_B70A_EDDD503376A4
fn_9B459C4D_E4C7_4DF2_AAAF_E4DECDDBCE68
fn_9CAFA87F_B86B_4176_BEB6_C3CDAA86BD44
fn_9CE80D06_8818_4B24_9337_90B039BDB915
fn_9F74E7BB_B8EC_4FF6_A3FD_4F7E499BED48
fn_A01CDBD9_B0D5_4092_8B2A_310A830BDD6A
fn_A16D3EE6_32E5_4E73_85A3_55EBBEDEB4BE
fn_A2207088_E02C_4A33_A6EB_71B8F43EA83D
fn_A243F279_17C5_4D8C_93B0_7288815313EA
fn_A2EEC455_00D5_426C_959F_27319292F803
fn_A3F409FF_8EA7_4BD5_98D4_052D78445DEE
fn_A581FDEB_BD6A_4C15_9D8F_9EDB491BC2D1
fn_A5C0BE72_9B23_4A04_ACB4_4FA3813E07F2
fn_A71A6088_EE64_491B_9841_AA826D410C6A
fn_A7338B6B_C0CB_4FCA_BF34_417B77257D72
fn_A890C151_416B_40C7_9E75_E72A0596611D
fn_A9020917_F632_4658_8C14_84547BEE03A2
fn_AA6CBAE5_D957_49B4_AC47_68CAFBB95292
fn_AADE3F9B_8B36_4925_8E56_822F42627B6B
fn_AB095C81_C891_46D6_B44B_A38FADA09E29
fn_AC535834_98D0_4615_9037_25C80763F1BB
fn_ADD5EB0F_892C_4DFA_B2B4_EFFF35CCF576
fn_AE312E5D_C4E4_4AD2_B84F_52E09B007435
fn_AEBC340C_36A9_484B_8D4E_0B66D2765A4C
fn_AF80346E_0357_46D4_A49F_F049E4C44A74
fn_AFA3B207_34DF_430A_A229_0EF9B3395586
fn_B08E0893_C1F9_4FDC_866B_385B83D03D6C
fn_B14BE081_3FD9_47F4_9ABA_97C9A6DF592D
fn_B16C3085_F5B8_4E11_A41B_2E00891E5B9E
fn_B32FE686_934F_47DF_A5AA_68E4B00BDA05
fn_B3CA2FAF_EA5A_44A0_93E4_92F28B4CFE30
fn_B721ECE8_4D4E_4FB3_9BEA_DB532F3AB68E
fn_B7321DB6_7534_4CFB_A161_C393847363D5
fn_BA3C9338_59C9_4984_A86F_FBE87538A0EF
fn_BAB2EA9C_4610_4F3C_A67A_FCA47BB76A28
fn_BB9A0C22_3523_41FF_9969_84EB622E46D1
fn_BC841E71_42FB_4DEB_AA8E_5CA93DA3F11F
fn_BCD33D6C_BBC5_4F3A_B1BD_4065AB89611C
fn_BDAD1410_388A_428C_888B_D56A435704B0
fn_BE7D38F7_5512_48D9_ADC7_86CC7E976D49
fn_BF0F95F4_4765_41C0_9315_8FD35F15D97A
fn_BFD45EFD_4366_41B4_B7CC_EF8B9F0D8924
fn_C189A6FE_160E_44ED_BE9D_AF71D97F54A8
fn_C23CE888_C444_471D_9DB3_1F7D57291C82
fn_C555E1DB_91AB_489F_8BBC_79A3AA035245
fn_C5B46029_1B09_40C9_B818_8C3240266DDC
fn_C5DEDBA7_A810_41C3_BFB7_C68BA13EF044
fn_C65E25A2_F8E5_4E02_B7FF_31769859C9B3
fn_C710D9F8_6D5A_4D83_A000_B6F991690D88
fn_C84D14FD_0735_493F_AE8F_46DFA9D85ECD
fn_CD80FD92_7259_4B36_B6FD_13337F6B0F98
fn_CE342662_8E63_4B99_BDD3_EE2BE020FCC8
fn_CE375885_F8B4_4AAF_AA97_7AD9D085C494
fn_CE6C3159_2A53_4E03_8347_82D35B26CCBD
fn_CF0140BE_4FFF_4628_A15C_8C01113EFE41
fn_CF6131AB_2BA5_497E_AE7E_9B64F7B90FAD
fn_CFA40496_E920_4607_9189_9B858DEE229B
fn_CFAFD095_B074_49C9_A9CE_9BE51C2DA8AD
fn_D2319BF0_4E0B_491F_A4A5_3BFB7F4D5493
fn_D2424B34_0CA5_4778_9A7E_62EFDE8F4DAB
fn_D30C99A1_57B2_4300_89B8_DB6CEF0E50D9
fn_D31E1C8B_146B_4C0B_8A67_AD510BAC58C6
fn_D6D8806D_1C8B_4E58_B9BE_A555BE6C38AA
fn_D6FA9961_8E4D_4C21_9D04_BACFC3257FA3
fn_D7EA7A41_A705_48EA_AC60_F0D323983966
fn_D82484E3_FE3E_4AA4_9051_EF571FC25445
fn_D8418173_57BB_4D67_B4BA_F78756EFA067
fn_D9312C66_2EE1_4FF1_A137_5C32661445C8
fn_D9318E41_11BA_4C66_ADAF_D4B557EA4E3F
fn_D971B86E_413F_41FD_B209_9343D6C04FBE
fn_DF234250_0590_4CC8_BD18_3235E3109438
fn_E00F16E1_80DC_4715_AF74_FA691926F2E1
fn_E0722D8A_173A_48BE_A6DA_4728C03E5E09
fn_E0D5C469_CFC9_4EDB_8042_89D72458D400
fn_E434AD0E_B828_455C_8A42_7A7DF8AD289C
fn_E5509AC9_21B9_4E4D_9139_2C1E3BC69DE2
fn_E56BF094_8E6A_4AAC_9753_D00B56B6496F
fn_E5F5C32A_01A0_41DC_93B9_2BD2DC4592D6
fn_E6C8FEF0_6EAE_41D6_AE6E_6310863D8B25
fn_E6E7C775_5EFC_4F8F_A1DD_72C6FC192B0E
fn_E89E7A0C_7BA3_4404_8246_98BD8F1CD3B4
fn_E958503B_3FBF_4892_9CEC_FCC239962516
fn_EB9EA22B_1183_4449_B2E8_D8C6B71F3A87
fn_EC42173E_C775_4248_A098_866FBB41D3F2
fn_ED18E2DE_3098_4F05_8F01_8EB86817884E
fn_EEB10797_B06B_48B3_9122_92459CD7532B
fn_EEEA3CE1_77C3_4EE1_A4D8_41343BD07996
fn_EFC50725_29AF_4E9D_9E89_50DA31F71ABE
fn_F2B6909E_76D1_4A7D_8E75_4EA8C6F666BD
fn_F45FF07B_CFEE_40C2_8DDC_8D1A5806107F
fn_F5E1AA4E_E16E_4786_8934_D578E4E27306
fn_F5F44925_1B9D_4EF3_84AC_DA413728EA45
fn_F97EB395_EF2F_466E_968D_20E305C13795
fn_FA2C86DA_A2E7_4A2E_BA59_B89A18232D47
fn_FBA57479_FD6F_4134_87BF_3F8BA223AB1B
fn_FBB4B7B4_9F10_4AFB_A30D_7300F4C4387C
fn_FD2F1EA8_F8C2_458D_B5B9_7522DB99BEFF
fn_FD8242F1_E9B7_4E8C_BE4F_B154F4B9F204
fn_FF3B97B0_0F8E_4B20_A0BE_69AE84BE6D45
fn_FF863545_DE8F_430F_9CC2_7590C7F36497
fn_FF8A8008_FFD7_4DD9_B500_472DB843CCAE
fn_FFB86218_95BD_47A4_995E_01E3D12F0ACA

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 34KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 34KB - Virtual size: 33KB