46501a8d9cf0383a104120810e1baba6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

46501a8d9cf0383a104120810e1baba6_JaffaCakes118
Size

302KB
MD5

46501a8d9cf0383a104120810e1baba6
SHA1

e2ff8712e5875be4e3e50d50684b7fa9ba5c8fd1
SHA256

8062ab1fc35f61448d08e26919fd7da3f91d807c912e41321918f24c4adbba1d
SHA512

0fe59918eeb553616c9d54cb55d4340bb2054e238544893591f7014455b79884312b70b8f1895836304b9223491167fe5ddfaf587e045f0e1a2d98c209c7dde9
SSDEEP

3072:5vQRFGkJpck5IkuDIX9K+zDolKIV2rlFszh8PTgyoOK9b1qQUQ4mJcipJqQ63jYf:5EFGkJ2k5IWzclRDzhicoO1Beip+jAz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46501a8d9cf0383a104120810e1baba6_JaffaCakes118

Files

46501a8d9cf0383a104120810e1baba6_JaffaCakes118
.dll windows:6 windows x64 arch:x64

dd33024eea874aa19c65bda964179433

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

shlwapi.pdb

Imports

ntdll

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
__chkstk
RtlNtStatusToDosError
NtClose
NtQueryInformationToken
NtOpenProcessToken
memset
memcpy
memcmp
_wcsicmp
EtwEventWrite
EtwEventEnabled
EtwEventUnregister
EtwEventRegister
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsA
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
ord1
_vsnwprintf
_vsnprintf
memcpy_s
memmove

msvcrt

_unlock
_amsg_exit
free
__CxxFrameHandler3
_onexit
__dllonexit
_XcptFilter
_lock
__C_specific_handler
_initterm
malloc

api-ms-win-core-localization-l1-2-0

LCMapStringW
IsDBCSLeadByte
FormatMessageW
GetLocaleInfoW
LCMapStringA
FormatMessageA

api-ms-win-core-errorhandling-l1-1-1

SetErrorMode
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter
GetLastError

api-ms-win-core-file-l1-2-0

SetFileAttributesA
FindNextFileA
GetFileAttributesW
FindFirstFileW
FindNextFileW
SetFileAttributesW
CreateFileW
FindClose
GetFileAttributesA
FindFirstFileA
SetFileTime
CreateFileA

api-ms-win-core-sysinfo-l1-2-0

GetSystemDirectoryW
GetWindowsDirectoryA
GetTickCount
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
GetWindowsDirectoryW
GetSystemDirectoryA

api-ms-win-core-processenvironment-l1-2-0

GetEnvironmentVariableA
GetEnvironmentVariableW
ExpandEnvironmentStringsW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-libraryloader-l1-1-1

LoadLibraryExA
GetModuleHandleExW
GetModuleHandleW
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryExW
LoadStringW
GetModuleHandleA
LoadStringA
GetModuleFileNameW
GetModuleFileNameA

api-ms-win-core-processthreads-l1-1-1

GetCurrentProcessId
OpenProcessToken
TerminateProcess
GetCurrentThread
GetCurrentProcess
GetCurrentThreadId
OpenThreadToken

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegGetValueW
RegOpenKeyExA
RegQueryValueExW
RegQueryInfoKeyW
RegOpenCurrentUser
RegEnumValueW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyExA
RegDeleteKeyExW

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
CompareStringW
MultiByteToWideChar

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW
GetFileVersionInfoExW
VerQueryValueW

api-ms-win-core-io-l1-1-1

DeviceIoControl

api-ms-win-core-synch-l1-2-0

Sleep
AcquireSRWLockShared
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-heap-l1-2-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-security-base-l1-2-0

GetTokenInformation
GetSidSubAuthority

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-registryuserspecific-l1-1-0

SHRegEnumUSKeyA
SHRegQueryUSValueA
SHRegSetUSValueA
SHRegOpenUSKeyA
SHRegSetUSValueW
SHRegWriteUSValueW
SHRegEnumUSKeyW
SHRegWriteUSValueA
SHRegGetUSValueA
SHRegQueryUSValueW
SHRegEnumUSValueA
SHRegCreateUSKeyW
SHRegCreateUSKeyA
SHRegDeleteEmptyUSKeyW
SHRegGetUSValueW
SHRegDeleteUSValueA
SHRegGetBoolUSValueW
SHRegQueryInfoUSKeyW
SHRegCloseUSKey
SHRegEnumUSValueW
SHRegOpenUSKeyW
SHRegGetBoolUSValueA
SHRegDeleteUSValueW
SHRegDeleteEmptyUSKeyA
SHRegQueryInfoUSKeyA

api-ms-win-core-url-l1-1-0

UrlEscapeA
HashData
UrlHashA
UrlGetLocationA
UrlIsW
UrlUnescapeA
UrlCombineA
UrlApplySchemeA
PathIsURLA
UrlIsA
UrlCombineW
UrlCreateFromPathW
UrlGetLocationW
UrlCanonicalizeW
UrlFixupW
UrlIsOpaqueW
UrlGetPartW
UrlApplySchemeW
UrlGetPartA
UrlEscapeW
GetAcceptLanguagesA
UrlIsNoHistoryA
UrlIsOpaqueA
PathCreateFromUrlW
PathCreateFromUrlA
PathIsURLW
UrlCompareA
IsInternetESCEnabled
ParseURLA
UrlHashW
GetAcceptLanguagesW
UrlCreateFromPathA
UrlCanonicalizeA
PathCreateFromUrlAlloc
ParseURLW
UrlIsNoHistoryW
UrlUnescapeW
UrlCompareW

api-ms-win-core-delayload-l1-1-1

DelayLoadFailureHook
ResolveDelayLoadedAPI

api-ms-win-core-sidebyside-l1-1-0

DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxW

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrChrIA
StrStrIA
StrCpyNXW
StrRChrA
StrStrNW
StrDupA
StrCpyNW
StrChrNIW
StrCSpnA
StrCatBuffW
StrCatBuffA
StrRStrIA
StrCSpnIW
StrStrW
StrSpnW
StrCmpNICW
StrCSpnIA
StrRStrIW
StrPBrkA
StrCSpnW
StrTrimW
StrStrIW
StrCmpNICA
StrCmpIW
StrStrNIW
StrChrW
StrRChrIW
StrCmpW
StrRChrW
StrToIntExW
StrCmpICA
StrStrA
StrToIntA
StrCmpNCW
StrSpnA
StrCmpNA
StrDupW
StrPBrkW
StrToIntExA
StrChrIW
StrCmpNIW
StrCmpCA
QISearch
StrToIntW
StrCmpICW
StrRChrIA
StrIsIntlEqualW
StrCmpCW
StrCpyNXA
StrCmpNIA
StrCmpNCA
StrChrA
StrToInt64ExA
StrCmpLogicalW
StrCmpNW
SHLoadIndirectString
StrIsIntlEqualA
StrChrNW
StrCatChainW
StrTrimA
StrToInt64ExW

api-ms-win-core-stringansi-l1-1-0

CharNextA

api-ms-win-core-heap-obsolete-l1-1-0

LocalFree
LocalSize
LocalReAlloc
LocalAlloc

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiA
lstrcmpA
lstrcmpW
lstrcmpiW
lstrlenA
lstrlenW

api-ms-win-core-localization-obsolete-l1-1-0

GetUserDefaultUILanguage
GetSystemDefaultUILanguage
CompareStringA

api-ms-win-core-versionansi-l1-1-0

GetFileVersionInfoExA
GetFileVersionInfoSizeExA
VerQueryValueA

api-ms-win-core-privateprofile-l1-1-0

GetPrivateProfileStringW
WritePrivateProfileStringW

kernelbase

ChrCmpIA
ChrCmpIW

kernel32

LoadLibraryA
MulDiv
DeleteTimerQueueTimer
CreateTimerQueueTimer

api-ms-win-core-shlwapi-legacy-l1-1-0

PathParseIconLocationW
PathFindNextComponentW
PathMatchSpecA
PathSearchAndQualifyA
PathStripPathW
PathIsUNCServerShareW
PathQuoteSpacesW
PathMatchSpecW
PathRemoveBackslashW
PathAddBackslashA
PathRemoveBackslashA
PathUnquoteSpacesW
PathFindFileNameA
IsCharSpaceA
PathRenameExtensionW
PathIsLFNFileSpecW
IsCharXDigitW
PathIsUNCServerShareA
PathCommonPrefixW
PathMatchSpecExW
PathStripToRootA
SHExpandEnvironmentStringsW
PathIsRelativeA
PathIsSameRootA
PathIsUNCServerA
PathRemoveBlanksA
PathCanonicalizeA
PathAppendW
PathAddExtensionW
PathAppendA
PathCombineW
PathSearchAndQualifyW
PathIsUNCA
IsCharCntrlW
PathUnquoteSpacesA
PathSkipRootW
PathParseIconLocationA
PathCombineA
PathSkipRootA
PathQuoteSpacesA
PathIsRootW
PathRemoveFileSpecA
PathFileExistsW
PathRemoveBlanksW
PathCommonPrefixA
IsCharSpaceW
PathRenameExtensionA
PathGetDriveNumberW
PathIsPrefixA
PathMatchSpecExA
IsCharPunctW
PathFindNextComponentA
PathFileExistsA
PathIsLFNFileSpecA
PathAddBackslashW
PathGetCharTypeA
PathCanonicalizeW
PathStripPathA
PathIsUNCW
PathIsFileSpecA
PathGetDriveNumberA
PathRelativePathToA
SHExpandEnvironmentStringsA
PathGetArgsA
PathRemoveExtensionA
PathRelativePathToW
SHTruncateString
PathStripToRootW
PathRemoveExtensionW
PathUnExpandEnvStringsA
PathIsPrefixW
IsCharDigitW
PathUnExpandEnvStringsW
PathGetCharTypeW
PathRemoveFileSpecW
PathFindExtensionW
PathGetArgsW
PathAddExtensionA
PathIsFileSpecW
PathIsRootA
PathIsRelativeW
PathFindFileNameW
PathIsUNCServerW
PathFindExtensionA
PathIsSameRootW
IsCharBlankW

user32

GetClassInfoA
RegisterClassA
PostMessageW
GetClassInfoW
IsWindowUnicode
ReleaseDC
RegisterClassW
GetDC
GetDlgItem
CheckMenuItem
PostMessageA
GetMenuItemCount
RemoveMenu
UnregisterClassA
UnregisterClassW
EndDialog
SetWindowLongPtrA
GetWindowLongPtrA
GetSubMenu
LoadMenuW
IsDlgButtonChecked
SetParent
DialogBoxParamW
DialogBoxParamA
IsChild
EnumChildWindows
GetMenuItemInfoA
DefWindowProcW
EnableMenuItem
GetClientRect
SendMessageA
SystemParametersInfoA
SetPropW
RemovePropW
SetWindowTextA
LoadCursorA
GetWindowTextA
CreateWindowExA
CreateWindowExW
GetParent
SetWindowLongPtrW
SendNotifyMessageA
SetWindowLongA
SendNotifyMessageW
GetIconInfo
GetSysColor
GetWindowLongA
DefWindowProcA
DestroyMenu
GetPropW
GetWindowTextW
GetSystemMetrics
GetWindowThreadProcessId
GetPropA
SystemParametersInfoW
SetWindowTextW
GetMenuDefaultItem
CreatePopupMenu
SendMessageW
MessageBoxW

gdi32

CreateFontIndirectA
ExtTextOutW
GetLayout
GetTextExtentPoint32W
CreateDIBSection
StretchDIBits
Rectangle
SetMapMode
RealizePalette
SelectPalette
GetStockObject
CreateSolidBrush
SetStretchBltMode
GetDIBits
GetGlyphIndicesA
GetObjectA
SetBkColor
DeleteDC
CreatePalette
GetSystemPaletteEntries
CreateCompatibleDC
DeleteObject
GetPaletteEntries
CreateHalftonePalette
GetGlyphIndicesW
GetTextExtentPointW
SelectObject
GetTextExtentExPointI
GetTextExtentPointA

Exports

Exports

AssocCreate
AssocGetPerceivedType
AssocIsDangerous
AssocQueryKeyA
AssocQueryKeyW
AssocQueryStringA
AssocQueryStringByKeyA
AssocQueryStringByKeyW
AssocQueryStringW
ChrCmpIA
ChrCmpIW
ColorAdjustLuma
ColorHLSToRGB
ColorRGBToHLS
ConnectToConnectionPoint
DelayLoadFailureHook
DllGetClassObject
DllGetVersion
GUIDFromStringW
GetAcceptLanguagesA
GetAcceptLanguagesW
GetMenuPosFromID
HashData
IStream_Copy
IStream_Read
IStream_ReadPidl
IStream_ReadStr
IStream_Reset
IStream_Size
IStream_Write
IStream_WritePidl
IStream_WriteStr
IUnknown_AtomicRelease
IUnknown_Exec
IUnknown_GetSite
IUnknown_GetWindow
IUnknown_QueryService
IUnknown_QueryStatus
IUnknown_Set
IUnknown_SetSite
IntlStrEqWorkerA
IntlStrEqWorkerW
IsCharSpaceA
IsCharSpaceW
IsInternetESCEnabled
IsOS
MLFreeLibrary
MLLoadLibraryA
MLLoadLibraryW
ParseURLA
ParseURLW
PathAddBackslashA
PathAddBackslashW
PathAddExtensionA
PathAddExtensionW
PathAppendA
PathAppendW
PathBuildRootA
PathBuildRootW
PathCanonicalizeA
PathCanonicalizeW
PathCombineA
PathCombineW
PathCommonPrefixA
PathCommonPrefixW
PathCompactPathA
PathCompactPathExA
PathCompactPathExW
PathCompactPathW
PathCreateFromUrlA
PathCreateFromUrlAlloc
PathCreateFromUrlW
PathFileExistsA
PathFileExistsAndAttributesW
PathFileExistsW
PathFindExtensionA
PathFindExtensionW
PathFindFileNameA
PathFindFileNameW
PathFindNextComponentA
PathFindNextComponentW
PathFindOnPathA
PathFindOnPathW
PathFindSuffixArrayA
PathFindSuffixArrayW
PathGetArgsA
PathGetArgsW
PathGetCharTypeA
PathGetCharTypeW
PathGetDriveNumberA
PathGetDriveNumberW
PathIsContentTypeA
PathIsContentTypeW
PathIsDirectoryA
PathIsDirectoryEmptyA
PathIsDirectoryEmptyW
PathIsDirectoryW
PathIsFileSpecA
PathIsFileSpecW
PathIsLFNFileSpecA
PathIsLFNFileSpecW
PathIsNetworkPathA
PathIsNetworkPathW
PathIsPrefixA
PathIsPrefixW
PathIsRelativeA
PathIsRelativeW
PathIsRootA
PathIsRootW
PathIsSameRootA
PathIsSameRootW
PathIsSystemFolderA
PathIsSystemFolderW
PathIsUNCA
PathIsUNCServerA
PathIsUNCServerShareA
PathIsUNCServerShareW
PathIsUNCServerW
PathIsUNCW
PathIsURLA
PathIsURLW
PathMakePrettyA
PathMakePrettyW
PathMakeSystemFolderA
PathMakeSystemFolderW
PathMatchSpecA
PathMatchSpecExA
PathMatchSpecExW
PathMatchSpecW
PathParseIconLocationA
PathParseIconLocationW
PathQuoteSpacesA
PathQuoteSpacesW
PathRelativePathToA
PathRelativePathToW
PathRemoveArgsA
PathRemoveArgsW
PathRemoveBackslashA
PathRemoveBackslashW
PathRemoveBlanksA
PathRemoveBlanksW
PathRemoveExtensionA
PathRemoveExtensionW
PathRemoveFileSpecA
PathRemoveFileSpecW
PathRenameExtensionA
PathRenameExtensionW
PathSearchAndQualifyA
PathSearchAndQualifyW
PathSetDlgItemPathA
PathSetDlgItemPathW
PathSkipRootA
PathSkipRootW
PathStripPathA
PathStripPathW
PathStripToRootA
PathStripToRootW
PathUnExpandEnvStringsA
PathUnExpandEnvStringsW
PathUndecorateA
PathUndecorateW
PathUnmakeSystemFolderA
PathUnmakeSystemFolderW
PathUnquoteSpacesA
PathUnquoteSpacesW
QISearch
SHAllocShared
SHAnsiToAnsi
SHAnsiToUnicode
SHAutoComplete
SHCopyKeyA
SHCopyKeyW
SHCreateMemStream
SHCreateShellPalette
SHCreateStreamOnFileA
SHCreateStreamOnFileEx
SHCreateStreamOnFileW
SHCreateStreamWrapper
SHCreateThread
SHCreateThreadRef
SHCreateThreadWithHandle
SHDeleteEmptyKeyA
SHDeleteEmptyKeyW
SHDeleteKeyA
SHDeleteKeyW
SHDeleteOrphanKeyA
SHDeleteOrphanKeyW
SHDeleteValueA
SHDeleteValueW
SHEnumKeyExA
SHEnumKeyExW
SHEnumValueA
SHEnumValueW
SHFormatDateTimeA
SHFormatDateTimeW
SHFreeShared
SHGetInverseCMAP
SHGetThreadRef
SHGetValueA
SHGetValueW
SHGetViewStatePropertyBag
SHIsChildOrSelf
SHIsLowMemoryMachine
SHLoadIndirectString
SHLockShared
SHMessageBoxCheckA
SHMessageBoxCheckW
SHOpenRegStream2A
SHOpenRegStream2W
SHOpenRegStreamA
SHOpenRegStreamW
SHPackDispParamsV
SHPropertyBag_ReadStrAlloc
SHPropertyBag_WriteBSTR
SHQueryInfoKeyA
SHQueryInfoKeyW
SHQueryValueExA
SHQueryValueExW
SHRegCloseUSKey
SHRegCreateUSKeyA
SHRegCreateUSKeyW
SHRegDeleteEmptyUSKeyA
SHRegDeleteEmptyUSKeyW
SHRegDeleteUSValueA
SHRegDeleteUSValueW
SHRegDuplicateHKey
SHRegEnumUSKeyA
SHRegEnumUSKeyW
SHRegEnumUSValueA
SHRegEnumUSValueW
SHRegGetBoolUSValueA
SHRegGetBoolUSValueW
SHRegGetBoolValueFromHKCUHKLM
SHRegGetIntW
SHRegGetPathA
SHRegGetPathW
SHRegGetUSValueA
SHRegGetUSValueW
SHRegGetValueA
SHRegGetValueFromHKCUHKLM
SHRegGetValueW
SHRegOpenUSKeyA
SHRegOpenUSKeyW
SHRegQueryInfoUSKeyA
SHRegQueryInfoUSKeyW
SHRegQueryUSValueA
SHRegQueryUSValueW
SHRegSetPathA
SHRegSetPathW
SHRegSetUSValueA
SHRegSetUSValueW
SHRegWriteUSValueA
SHRegWriteUSValueW
SHRegisterValidateTemplate
SHReleaseThreadRef
SHRunIndirectRegClientCommand
SHSendMessageBroadcastA
SHSendMessageBroadcastW
SHSetThreadRef
SHSetValueA
SHSetValueW
SHSkipJunction
SHStrDupA
SHStrDupW
SHStripMneumonicA
SHStripMneumonicW
SHUnicodeToAnsi
SHUnicodeToAnsiCP
SHUnicodeToUnicode
SHUnlockShared
ShellMessageBoxA
ShellMessageBoxW
StrCSpnA
StrCSpnIA
StrCSpnIW
StrCSpnW
StrCatBuffA
StrCatBuffW
StrCatChainW
StrCatW
StrChrA
StrChrIA
StrChrIW
StrChrNIW
StrChrNW
StrChrW
StrCmpCA
StrCmpCW
StrCmpICA
StrCmpICW
StrCmpIW
StrCmpLogicalW
StrCmpNA
StrCmpNCA
StrCmpNCW
StrCmpNIA
StrCmpNICA
StrCmpNICW
StrCmpNIW
StrCmpNW
StrCmpW
StrCpyNW
StrCpyW
StrDupA
StrDupW
StrFormatByteSize64A
StrFormatByteSizeA
StrFormatByteSizeEx
StrFormatByteSizeW
StrFormatKBSizeA
StrFormatKBSizeW
StrFromTimeIntervalA
StrFromTimeIntervalW
StrIsIntlEqualA
StrIsIntlEqualW
StrNCatA
StrNCatW
StrPBrkA
StrPBrkW
StrRChrA
StrRChrIA
StrRChrIW
StrRChrW
StrRStrIA
StrRStrIW
StrRetToBSTR
StrRetToBufA
StrRetToBufW
StrRetToStrA
StrRetToStrW
StrSpnA
StrSpnW
StrStrA
StrStrIA
StrStrIW
StrStrNIW
StrStrNW
StrStrW
StrToInt64ExA
StrToInt64ExW
StrToIntA
StrToIntExA
StrToIntExW
StrToIntW
StrTrimA
StrTrimW
UrlApplySchemeA
UrlApplySchemeW
UrlCanonicalizeA
UrlCanonicalizeW
UrlCombineA
UrlCombineW
UrlCompareA
UrlCompareW
UrlCreateFromPathA
UrlCreateFromPathW
UrlEscapeA
UrlEscapeW
UrlFixupW
UrlGetLocationA
UrlGetLocationW
UrlGetPartA
UrlGetPartW
UrlHashA
UrlHashW
UrlIsA
UrlIsNoHistoryA
UrlIsNoHistoryW
UrlIsOpaqueA
UrlIsOpaqueW
UrlIsW
UrlUnescapeA
UrlUnescapeW
WhichPlatform
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

Sections

.text
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

minATL
Size: - Virtual size: 24B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd33024eea874aa19c65bda964179433

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntdll

msvcrt

api-ms-win-core-localization-l1-2-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-file-l1-2-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-processenvironment-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-libraryloader-l1-1-1

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-registry-l1-1-0

api-ms-win-core-path-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-version-l1-1-0

api-ms-win-core-io-l1-1-1

api-ms-win-core-synch-l1-2-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-heap-l1-2-0

api-ms-win-core-string-l2-1-0

api-ms-win-security-base-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-registryuserspecific-l1-1-0

api-ms-win-core-url-l1-1-0

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-sidebyside-l1-1-0

api-ms-win-core-apiquery-l1-1-0

api-ms-win-core-shlwapi-obsolete-l1-1-0

api-ms-win-core-stringansi-l1-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-localization-obsolete-l1-1-0

api-ms-win-core-versionansi-l1-1-0

api-ms-win-core-privateprofile-l1-1-0

kernelbase

kernel32

api-ms-win-core-shlwapi-legacy-l1-1-0

user32

gdi32

Exports

Exports

Sections

.text Size: 258KB - Virtual size: 258KB

.data Size: 5KB - Virtual size: 5KB

.pdata Size: 14KB - Virtual size: 13KB

.idata Size: 18KB - Virtual size: 17KB

minATL Size: - Virtual size: 24B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 258KB - Virtual size: 258KB

.data
Size: 5KB - Virtual size: 5KB

.pdata
Size: 14KB - Virtual size: 13KB

.idata
Size: 18KB - Virtual size: 17KB

minATL
Size: - Virtual size: 24B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 1KB