49ebe584ea366e818975f45a849a13ff_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

49ebe584ea366e818975f45a849a13ff_JaffaCakes118
Size

701KB
MD5

49ebe584ea366e818975f45a849a13ff
SHA1

76cbc28ff8bb7ba9ba48931b0a0ac6c9d7b17fa7
SHA256

865a29378dd03851133b96cafa9ac9f5a07368a5a080aef20d4fb477a6a85943
SHA512

c1e4c81fa0f3065a74815fd96f301d77e34d106b61502d7cbab8bfb373c9f8a961437e469f9911076f0b1ad99ed88c6795a1fbc41bdc658a6f89c1ab7e2228a6
SSDEEP

12288:u6u0FgqAm+ihEe7Ttupl/+i7L28H+Gz7fKuNz7CAPzbADyOgYPOv+5mv68Igm1lS:+0FlA/ihEe7alFexuNKqb4yOgwOv+5mH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ebe584ea366e818975f45a849a13ff_JaffaCakes118

Files

49ebe584ea366e818975f45a849a13ff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_01BE6D72_4EA5_49AC_8AE2_34445ADC5DE7
fn_025E5E5D_FCE3_4F9F_B1A6_2BFC425DDCFE
fn_038F80D8_063C_4375_A8ED_04CBBFCEE7C6
fn_05BF3B0F_8290_49CD_B49F_53C18582D04D
fn_05E4C799_CC3E_413C_AA56_8816351AA735
fn_08B52D01_1A1D_4383_9DF1_B3A202FBA7B8
fn_08E2458F_04F5_4CE0_A12E_CBB975C04408
fn_09F7EAEE_7832_469C_893D_A459C3DC2873
fn_0C45BF15_00EC_422C_8C6A_BA7D979A1382
fn_0CAD0E61_C68B_4231_AF14_2A98ADBF4F1E
fn_0CB8EB30_69B8_4E1D_90C5_D21DE2DB655D
fn_0E8C242C_E6BF_479D_B008_589304A40D32
fn_0F107FE5_E5D9_4EBC_B20F_8EBC6EF5D276
fn_0F5B6E00_9CE3_4F35_9A85_1480CB95086C
fn_0F6B955C_D1C6_486C_AF91_5D0C8658C9BA
fn_1013F881_490B_4FDE_8B8B_BD1EA9E64E53
fn_10D4A14B_3BEE_46FA_AEF6_B02833C8AC8C
fn_10EEBE4D_6D04_4987_B7F7_CCD2323C8CF0
fn_1284232D_F318_4ED6_9DA9_5CD36DA76807
fn_14EC660F_136B_4ECE_9070_FDE66AA53A51
fn_14F1F5CD_274E_472E_95E4_0A853ADFD905
fn_1521AF75_29E6_45D2_B926_47C43FDFCCF7
fn_15B84B6B_D75A_4DBD_863D_50D59EAF0A95
fn_15D5D6BF_AFF1_4369_8F2C_BAB7EA996063
fn_17578BE6_8EF4_4C51_AA30_25A00D677AFD
fn_18B25CCC_5C7C_4033_9DB6_28D5CA341212
fn_19006AAF_F4CA_420E_9782_7E7A3EB8E43E
fn_1984F35D_3156_44F9_83BB_CEC22652A612
fn_199F053E_AF8C_49BD_89B5_BC6D57A76A99
fn_1DD131F9_4EA7_4434_925C_F772B50832E1
fn_1E9EDEA1_E6A4_4B18_A3CA_888C381DBED3
fn_1FB160E8_215F_42B4_BC30_59F80BE2319C
fn_21AB4E29_3DC1_4F3C_9C80_5A78B09BE09C
fn_222F36A5_ED00_4CBA_B09C_25173C682067
fn_22CC7141_1EBB_4A9E_A3F6_48122503F1B2
fn_239FC32E_AE55_4F13_AD62_DACB8DE9A426
fn_244D679D_EDF7_43E6_BCEA_F027499E84C8
fn_24D867F6_0749_4066_8482_950A17066F13
fn_25218FCA_52ED_4C43_9503_C2CBE0F780EF
fn_2711C880_A965_41FE_97E3_2476A962C80F
fn_2987065F_9686_4BAE_B30D_57341BF51B9D
fn_2A757A38_4D90_4058_8468_6E3F892283E2
fn_2C22261C_8500_4B2B_9E69_CF4497A40FEE
fn_2DFFE00E_7A7F_4ABA_896D_9010F7A24C16
fn_2E2F3AE7_AEFB_451D_ACD0_E917385638F2
fn_2E8E07B1_3A23_48E7_BE6B_8501264621CE
fn_2F414BB9_953C_429D_A518_9357CB6863D0
fn_3056E5E8_24B7_4ACF_8204_1E1187450AF1
fn_306F01FC_BA4C_47DE_8E05_1B4EBF1851C4
fn_31254203_CA9D_494D_B0B8_837445EEA3EA
fn_32275B09_A383_4303_9800_EF19C7D8646E
fn_32A54D3E_A0F6_44E8_8D16_9C6EDE9CA2DE
fn_32AAFEB2_488A_4BCA_A060_B5EECCAC36E0
fn_3622B6E8_CC98_4969_A7BF_A740841BAE45
fn_377B2563_A5F9_4DA7_9642_86EB217B72C4
fn_384D0883_DA38_49E0_AF5C_69967F8247D9
fn_38BBAB9A_8CEE_479A_9F9D_54A42C3E38B8
fn_3A7EDCCC_15AE_4E64_A896_DDF13022A2AC
fn_3D00E876_82B0_4A99_96ED_39CA37456CDA
fn_3EAB657F_CC52_4657_83A7_1ADD180B16D3
fn_40720A40_C616_4AA0_8DA5_156EB65C977C
fn_4250B7B0_C53E_4DFA_B7C8_354583D810A3
fn_425DB6E7_5091_4E09_AE57_9BA75985F080
fn_42957F43_B41B_402D_97BC_71A343EFCE5C
fn_44A01D00_133F_42ED_80A0_486FC7874E1D
fn_44BFA034_CCE5_4A01_A3A1_4BE9FF2B3DA2
fn_4575D632_8028_4019_84F7_6211411BDE33
fn_46025096_3112_4DD5_87E0_7CB86DFEF610
fn_463E4FD4_AAC4_4FE2_A29F_7CD90F721E4D
fn_46499434_0FBE_4CAF_90BD_7B628575E057
fn_4CBF0ADE_AE09_48D5_A8E8_026F757CCC3C
fn_4D5D4384_1E3D_44DC_8D2B_6FFC99430E1D
fn_4EC73083_DB04_4D89_9227_DD603C8A9C26
fn_4EEA6B8B_EFE6_4C00_B954_6546671142A9
fn_4F2AAE33_2AA7_4877_9174_31CD23573B06
fn_4FE2FC3E_4A2A_479D_B4FA_A284AD3F5CD7
fn_5172C186_ACC1_48AA_A9EF_ED0F1297CB4D
fn_541F0D36_8A4B_43FC_920D_FBC70D733138
fn_541F20EE_3100_42F7_B0F6_E960B73F1FFB
fn_55B3D5A7_ED67_43A8_9523_4F7902DEF414
fn_569C3FEB_7D92_4C8B_BCAA_C06D8E1087B5
fn_58BA9BA4_2970_4931_BA0E_B21613FE4A53
fn_58CC8498_52E0_4C3D_8A70_7DC9935A7627
fn_599B36D1_AC32_4185_88D8_C54F3AEEDEF6
fn_5A46B0C9_DCD0_4C2F_8E16_F5726CF1AB0C
fn_5C389B76_D087_46E5_A75F_DF91C0C8040F
fn_5C429C43_712A_48A1_A229_81F4164BCC72
fn_5CB61A25_5B26_4C68_AEF5_03E4FE3950A2
fn_6281DF31_01DA_4CC6_924B_914E1AEBDA7B
fn_63541813_F31E_4C2B_84CE_3FAE230BAE15
fn_640A3EFD_387B_4C9E_92F8_51E5B740834B
fn_642DB918_35C9_41B2_A900_D595E36F10DA
fn_64487E33_E58E_439D_AC3D_C4EF2BF085FC
fn_647CD546_5F04_4D8C_B615_8973D898C438
fn_65038281_D223_4D90_8F6D_91463F98DEA3
fn_68B6B1A6_5A35_49FE_80B9_71149BCD795F
fn_68CE46AB_3B87_444B_91CB_FE6A12614ED8
fn_697A9686_441B_4F1F_B492_2DA9B7F0328B
fn_6C840E1F_C8FC_4B39_BA9E_6F4FABC715B1
fn_6E8123F4_07D0_417F_9447_591C6F697B10
fn_6E8F6B54_E3EA_44FB_85C9_29C1E1420861
fn_6EC05F17_7D1E_440F_8647_9C66CD405FAE
fn_75C82E0D_4F3F_410C_9C22_8F5569439250
fn_76D520E6_F2B9_4936_B194_9374AB00D2BC
fn_77B2D060_BC79_48D1_8124_93A39B573DBC
fn_79110538_10C6_4EF8_BE9C_4F5CA22E25B2
fn_798BE98C_0306_4739_8057_45621D7D3315
fn_79A4ECD3_EDBD_43AD_A70C_CCCB823B5EA2
fn_7A64B9E2_C02A_4BCD_8A25_D996920C2681
fn_7A840892_987D_4F56_BD7E_8100062B9D6A
fn_7C338CCE_6512_42FE_AEC2_F8B98167A78F
fn_7C5D3D55_F20C_4C5F_A6CC_3978D4939DDF
fn_7C89FFD9_AB46_4B9F_A9A7_C4DF6BC5C8F2
fn_7DB6EB5F_2C70_4217_A58F_4222D0915E2C
fn_7DEF39BE_0D16_4215_BF66_AB4536E2E112
fn_7DF94EE3_070F_47FC_8004_78085C1A1D55
fn_7E305445_12F5_43BF_86A8_77329C21BE1C
fn_8036E11D_1343_453A_AE3C_3648D4F91BFC
fn_8095B791_DD4E_4127_A282_89CD25770475
fn_82D77973_1F08_4086_BF30_30FB027FB8C8
fn_82E2525E_8110_42B5_9FB0_75C14E0144EC
fn_8434201F_F8A0_4800_9801_DBE7A40F5E83
fn_85A9EC07_FEA4_4659_B7CB_787DEBC84FF5
fn_85EB708F_E631_444C_B6E7_C20B4A194219
fn_873DF705_2DCA_4577_9A11_C185D9114DEC
fn_88C56FC6_7C15_44D7_AE62_2261110CDBEC
fn_88ED0AE4_DB1B_4663_90B0_A0B363DB6118
fn_8A0396FA_69A9_4A9D_AB37_1A2D31550BEE
fn_8BDE00FE_0372_4C50_A7D1_E64010A761DD
fn_8BEF9270_62F4_4AED_B34D_1430477DD9B2
fn_8C306952_9DBB_45CA_B688_FD0EA2234B01
fn_8C4EEAE5_E81F_424F_8201_0FCC3D35996C
fn_8C9DDCE7_6C63_4074_82B1_026FB0FE8651
fn_8D7A93D5_2580_4BF7_A684_79B4BE668040
fn_8EF8336B_DEB4_4662_A54E_BB6BE6174EB5
fn_8F987B56_45EA_4CF7_BA78_B3202343DABE
fn_908A7367_D098_46E8_8C23_5F7565B8A937
fn_913F5D98_A835_4E5E_A615_0AE4E61B919A
fn_91484C16_AB21_4073_AB7F_723F81E98BBA
fn_91D58669_A638_44D2_95F1_3F52EEC8F083
fn_91F9F13E_FF10_48DC_856E_7F5E6EF009B3
fn_93F88304_F9B0_4822_BA05_70151A58D2E8
fn_956B5677_8A01_433C_9C8D_23FFB0BA4F97
fn_95BFBE5F_F4FA_4213_A1FB_0A81004B2D5B
fn_9767A4DF_F9AD_4BEF_992B_D25F3ACF9336
fn_97B103AD_FE18_41D0_8EE3_ACCE953B19EF
fn_9A87A42B_9F25_4338_AC61_7406E459DACF
fn_9AF7B88A_4809_4EF9_A6C7_7E366FC30F0E
fn_9B688121_EC45_4239_B419_5A961542A11C
fn_9C5D2A36_DDBE_452C_A510_3A3F57B81D50
fn_9F4558E5_0EB4_406A_860B_49A4D55D1436
fn_A192DD40_6450_467A_8CA5_B36880A41B73
fn_A1E6BA39_6BEE_4896_82A2_AF46FE2EE7EA
fn_A2F49CB6_1871_4368_8434_6A530DC2E2B1
fn_A420E829_62D2_4FCA_9038_E060633E4082
fn_A519DD41_F10A_4976_9179_70385DE7A82C
fn_A5C69E67_2EB1_4D4C_9BBD_45CFED10F653
fn_A884D462_74D9_4AD9_9B8A_0FB25FFD2128
fn_A904CC26_5CB3_4A1D_A9B6_45018D64DB7D
fn_AACC917E_8E5A_4FEE_AED1_75A8FDC6DE3C
fn_AAE08CF0_86F2_40D1_B17D_FBADCACEF2B7
fn_AB3664B0_7253_4C9C_A1B7_A6ED7A9D61E6
fn_AB50A0FF_713A_4D5A_86B4_0A73967608E4
fn_ABB602E7_466C_4AF9_957B_DD62D24D9FB1
fn_AC6C828B_80D3_4C6D_A3F0_D006B8632661
fn_ACA529C5_5480_4498_9ACE_3F1E767B1EC8
fn_AD01D42A_27A0_42E6_9498_90900E1A2357
fn_AEBAAA7C_0875_41B0_8EF5_2988EB333925
fn_AF29391B_CFAD_42C8_B743_CE8C89878D98
fn_AFB66CBB_EDA6_47A4_AC77_82C510A565F5
fn_B0BFABBE_FF39_470C_A084_852E1BB4725C
fn_B149893E_252F_4FAA_A739_8445B2B5D9CA
fn_B28772ED_B64B_4027_9C88_81F21DD43C8B
fn_B36D89BA_A9EF_4649_A035_5E2B1390DC21
fn_B3E46BEA_395F_4BA3_92A6_9C41AB046A00
fn_B5D2527B_41E3_4112_B4F9_4C90E2C3F1F6
fn_B7470F1C_ADF5_4114_B05A_B2C605AA7258
fn_B80DE70D_BEAD_4CFE_B149_A1CCD60BBFF8
fn_B8E34CDD_CAE9_4E0B_8A2A_5650E44B5E00
fn_B944DE2A_882C_4FF5_B972_79B10BFA66F3
fn_B96A6536_72A8_4126_9FF9_CB9FAD22CA17
fn_BAE331AE_0256_4540_B35C_4F5A4091AA73
fn_BAEADE93_2504_4FC5_913D_34F3BD950D8D
fn_BB236298_C099_446B_89B3_E24797412587
fn_BBB02115_4C7C_417E_A737_87CD34D48BB4
fn_BC6E0B50_5DA3_4AB9_8348_B81A281196B8
fn_BFC4EF28_2F69_4DEB_925A_383CDC93423C
fn_C064DC8D_231C_4B9B_B96A_2A87EC894363
fn_C07661D7_50E3_4830_ACDD_AC7C86AD8C22
fn_C1A5AA04_9230_4AC5_9478_B8605D365FDC
fn_C255B3E2_3990_447B_AEC3_E29346C3A8C6
fn_C6B059C2_DD8A_4DEA_8DBF_F235035A433A
fn_C7F9724A_C09C_44CD_8024_A9E768FBEC06
fn_C8FD16C1_35E4_4D64_BEBC_211F54D56C94
fn_CA49B49C_AE9D_4578_9DC4_8E2DF5DF4DB6
fn_CB97E318_218D_4579_8756_409ECD4A0990
fn_CBBCDED7_4929_424A_9C01_4D244BE4CB92
fn_CC9BA785_5609_449C_86E8_1164159CC60C
fn_CC9F825A_981F_419D_B59A_5BE2F314A6C9
fn_CCE9994A_6F06_47F2_BFCB_F652730422E4
fn_CF7CE856_E11C_4B72_838D_76278E4CDDC0
fn_D2ADD77B_A47F_42D4_8122_97DEC856A4BA
fn_D438119C_6789_4A3F_B311_DBA2C74E8E3A
fn_D4D8033A_AACA_4003_B039_626F86EED549
fn_D5DF0316_5FF8_45A3_9697_FD813FEDB12C
fn_D62DBEA2_B4BF_4185_97C0_8EF3BB988C51
fn_D674AB3B_1A7E_4B7A_AC37_2192C12508B8
fn_D69D208B_FA7E_4B45_B5D0_5785DB1F3122
fn_D7DD14F9_09BB_4809_8FE7_48928EB595A6
fn_D89C0A66_6005_4E07_A131_4531DD2B5A75
fn_D8F19568_C846_4FF5_B6E4_9FE98D415E48
fn_DAD71A61_576C_41A5_9DC3_93DE4D12C96E
fn_DB11934D_0671_4B1D_8ABE_043180C5A55E
fn_DB4ED406_6272_4792_A8B2_B7F8A0A41FD2
fn_DC5DB767_5DC8_42A3_87CC_6C6B00018F43
fn_DD3E3E3E_DE25_4196_9E92_188F1B4F6676
fn_DD96D8B3_ADAC_4A49_9330_B6754A9D16F6
fn_DE86DC49_BCB5_42D7_9BF8_E257544AF348
fn_DE8A03C6_FDBC_4604_9C9F_1606D3E88601
fn_DF395A3E_BA8B_435C_932A_E4BA8D3B994F
fn_DF8366AC_23D3_400B_BF84_6B2E928731D4
fn_E0B3D4B0_959A_4335_87FA_8486799CC60C
fn_E1F1D0EE_B5FA_4A85_BB71_D18FE8E65DEF
fn_E2C97714_0E69_405B_B850_330F215912AA
fn_E3131B9A_3DAC_46AF_A406_9C6C10626525
fn_E3313CE8_4CB2_46E3_A040_9F845E222C5C
fn_E4D4F06E_FC92_4E08_B6B2_9B8C3628AF9C
fn_E667870D_34B2_4F14_A15E_D24A0109E50B
fn_E7C35E98_A632_4D01_95EC_94BA118B97A8
fn_E7E714F9_BD36_4197_A93A_CF90DB5E5AFA
fn_E915E55D_B906_4ED5_9898_CC4CE630C1AD
fn_E972CD99_5119_4287_A74E_72C66DCF6CE5
fn_EC040873_0164_4E0A_B053_2BA8D68B52A4
fn_ECAFC3A4_832E_4DD5_8EA5_D7230BB52536
fn_ED489FB3_1B5E_451E_94EE_BD9E4A3E379F
fn_ED4D1C28_3B41_48DA_8498_85A9368979CF
fn_ED85614D_FD0A_4771_9404_0F5050022B57
fn_EDFDF73A_DD4D_4A85_BB34_70E6DCED5470
fn_EEF58149_DE2C_483E_91CA_ADD093D243C7
fn_EF4227BD_319D_44B8_B457_36C357A7D62B
fn_F346C191_A6B4_4A49_ACC2_C25EF2F09D00
fn_F3E4510C_1B3E_47FA_8E1A_A24BB8019436
fn_F449E39C_5946_492F_A13E_0C43EB0555CB
fn_F5F3D093_E257_4D51_927D_9D287AB99BCA
fn_F65EDE35_2E3A_4D5D_B419_7AD78D916071
fn_F6A2BBD5_B3C0_4A9C_82DE_C6FD3D9DEC77
fn_F7D29478_AB78_4C6E_AC0D_FA3ADCDEEAEE
fn_F8DAD777_A87C_4437_A8DD_C16AD7B9FDCB
fn_F9BA8C04_9340_4AEC_8D51_BA899E1A571A
fn_F9C9AA98_772F_4E08_8F64_5C0494ECF0F8
fn_FDDE63BE_62A4_4E19_B404_968E6B245483
fn_FF26A6B8_8D34_4969_BBC3_AAFEB255CE0B
fn_FF280A11_739A_4052_8CC2_3A279779C315

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 33KB - Virtual size: 33KB