5a737ef35d8d1a3f277799c17d6cf631_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5a737ef35d8d1a3f277799c17d6cf631_JaffaCakes118
Size

2.6MB
MD5

5a737ef35d8d1a3f277799c17d6cf631
SHA1

6eec5820b02777cac92cdf88f8140e19622a7893
SHA256

0b1d4cafae5a68d86a91d3ef9f134ee06e7c1e47031d0d79dfa6405807478241
SHA512

a976860cd65b8f81f37a0886a9d76f143e3be6b0e69071230eafd9a04d6333c82d291c49c02d5cd94a0ebf5f900a31d90c674e1bfff1d9e522ce96fb7a5bbb28
SSDEEP

49152:QiHWSQsqCaf7dbgbg5Cc18KnKwGdN2ak3DRFD5ScBflNazzCtBW:ZQZCO7dbgbgXhKKaEXdfuCBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 8 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RedBoy 4.0.2/Bunifu_UI_v1.5.3.dll
unpack001/RedBoy 4.0.2/FlatUI.dll
unpack001/RedBoy 4.0.2/MetroFramework.Design.dll
unpack001/RedBoy 4.0.2/MetroFramework.Fonts.dll
unpack001/RedBoy 4.0.2/MetroFramework.dll
unpack001/RedBoy 4.0.2/REDBOY.exe
unpack001/RedBoy 4.0.2/SkisploitRedBoyModule.dll
unpack001/RedBoy 4.0.2/Teen.dll

Files

5a737ef35d8d1a3f277799c17d6cf631_JaffaCakes118
.rar
RedBoy 4.0.2/Bunifu_UI_v1.5.3.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RedBoy 4.0.2/FlatUI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\danie\Desktop\FlatUI-master\src\FlatUI\obj\Debug\FlatUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RedBoy 4.0.2/MetroFramework.Design.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RedBoy 4.0.2/MetroFramework.Fonts.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 654KB - Virtual size: 653KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RedBoy 4.0.2/MetroFramework.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RedBoy 4.0.2/Monaco/Monaco.html
.js
RedBoy 4.0.2/Monaco/base.txt
RedBoy 4.0.2/Monaco/classfunc.txt
RedBoy 4.0.2/Monaco/debug.log
RedBoy 4.0.2/Monaco/globalf.txt
RedBoy 4.0.2/Monaco/globalns.txt
RedBoy 4.0.2/Monaco/globalv.txt
RedBoy 4.0.2/Monaco/vs/base/worker/workerMain.js
.js
RedBoy 4.0.2/Monaco/vs/basic-languages/bat/bat.js
RedBoy 4.0.2/Monaco/vs/basic-languages/coffee/coffee.js
RedBoy 4.0.2/Monaco/vs/basic-languages/cpp/cpp.js
RedBoy 4.0.2/Monaco/vs/basic-languages/csharp/csharp.js
RedBoy 4.0.2/Monaco/vs/basic-languages/csp/csp.js
RedBoy 4.0.2/Monaco/vs/basic-languages/css/css.js
RedBoy 4.0.2/Monaco/vs/basic-languages/dockerfile/dockerfile.js
RedBoy 4.0.2/Monaco/vs/basic-languages/fsharp/fsharp.js
RedBoy 4.0.2/Monaco/vs/basic-languages/go/go.js
RedBoy 4.0.2/Monaco/vs/basic-languages/handlebars/handlebars.js
.js
RedBoy 4.0.2/Monaco/vs/basic-languages/html/html.js
.js
RedBoy 4.0.2/Monaco/vs/basic-languages/ini/ini.js
RedBoy 4.0.2/Monaco/vs/basic-languages/java/java.js
RedBoy 4.0.2/Monaco/vs/basic-languages/less/less.js
RedBoy 4.0.2/Monaco/vs/basic-languages/lua/lua.js
RedBoy 4.0.2/Monaco/vs/basic-languages/markdown/markdown.js
.js
RedBoy 4.0.2/Monaco/vs/basic-languages/msdax/msdax.js
RedBoy 4.0.2/Monaco/vs/basic-languages/mysql/mysql.js
RedBoy 4.0.2/Monaco/vs/basic-languages/objective-c/objective-c.js
RedBoy 4.0.2/Monaco/vs/basic-languages/pgsql/pgsql.js
RedBoy 4.0.2/Monaco/vs/basic-languages/php/php.js
RedBoy 4.0.2/Monaco/vs/basic-languages/postiats/postiats.js
RedBoy 4.0.2/Monaco/vs/basic-languages/powershell/powershell.js
RedBoy 4.0.2/Monaco/vs/basic-languages/pug/pug.js
RedBoy 4.0.2/Monaco/vs/basic-languages/python/python.js
RedBoy 4.0.2/Monaco/vs/basic-languages/r/r.js
RedBoy 4.0.2/Monaco/vs/basic-languages/razor/razor.js
.js
RedBoy 4.0.2/Monaco/vs/basic-languages/redis/redis.js
RedBoy 4.0.2/Monaco/vs/basic-languages/redshift/redshift.js
RedBoy 4.0.2/Monaco/vs/basic-languages/ruby/ruby.js
RedBoy 4.0.2/Monaco/vs/basic-languages/rust/rust.js
RedBoy 4.0.2/Monaco/vs/basic-languages/sb/sb.js
RedBoy 4.0.2/Monaco/vs/basic-languages/scss/scss.js
RedBoy 4.0.2/Monaco/vs/basic-languages/solidity/solidity.js
RedBoy 4.0.2/Monaco/vs/basic-languages/sql/sql.js
RedBoy 4.0.2/Monaco/vs/basic-languages/st/st.js
RedBoy 4.0.2/Monaco/vs/basic-languages/swift/swift.js
RedBoy 4.0.2/Monaco/vs/basic-languages/vb/vb.js
RedBoy 4.0.2/Monaco/vs/basic-languages/xml/xml.js
RedBoy 4.0.2/Monaco/vs/basic-languages/yaml/yaml.js
RedBoy 4.0.2/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
RedBoy 4.0.2/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
RedBoy 4.0.2/Monaco/vs/editor/editor.main.css
RedBoy 4.0.2/Monaco/vs/editor/editor.main.js
.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.de.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.es.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.fr.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.it.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.ja.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.ko.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.ru.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.zh-cn.js
RedBoy 4.0.2/Monaco/vs/editor/editor.main.nls.zh-tw.js
RedBoy 4.0.2/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
RedBoy 4.0.2/Monaco/vs/language/css/cssMode.js
.js
RedBoy 4.0.2/Monaco/vs/language/css/cssWorker.js
.js
RedBoy 4.0.2/Monaco/vs/language/html/htmlMode.js
.js
RedBoy 4.0.2/Monaco/vs/language/html/htmlWorker.js
.js
RedBoy 4.0.2/Monaco/vs/language/json/jsonMode.js
.js
RedBoy 4.0.2/Monaco/vs/language/json/jsonWorker.js
.js
RedBoy 4.0.2/Monaco/vs/language/typescript/lib/typescriptServices.js
.js
RedBoy 4.0.2/Monaco/vs/language/typescript/tsMode.js
.js
RedBoy 4.0.2/Monaco/vs/language/typescript/tsWorker.js
.js
RedBoy 4.0.2/Monaco/vs/loader.js
.js
RedBoy 4.0.2/REDBOY.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 992KB - Virtual size: 991KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

8xn6pK63
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RedBoy 4.0.2/SkisploitRedBoyModule.dll
.dll windows:6 windows x86 arch:x86

6fd3a7ceec62ed25f4ff7cef48189f14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Thunder\Desktop\Desktop\GayBoy\Release\Skisploit.pdb

Imports

kernel32

FreeLibrary
FormatMessageA
ReadFile
VirtualProtect
CreateNamedPipeA
SetConsoleTextAttribute
VirtualFree
SetConsoleTitleA
GetStdHandle
VirtualAlloc
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
GetModuleHandleA
DisconnectNamedPipe
CreateToolhelp32Snapshot
MultiByteToWideChar
Sleep
DisableThreadLibraryCalls
CloseHandle
GetProcAddress
GetSystemInfo
CreateThread
AddVectoredExceptionHandler
GetCurrentProcessId
GetConsoleWindow
AllocConsole
VirtualQuery
OpenThread
ConnectNamedPipe
GetCurrentProcess
InterlockedExchange
InterlockedCompareExchange
FlushInstructionCache
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
GetThreadContext
SetThreadContext
ResumeThread
GetModuleHandleW
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
LoadLibraryA
GetLastError
FreeConsole
GetModuleFileNameA
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
RaiseException
WideCharToMultiByte
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetProcessHeap
UnhandledExceptionFilter

user32

FindWindowA
MessageBoxA
SetWindowPos
MessageBoxW
ShowWindow
SendInput

msvcp140

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xout_of_range@std@@YAXPBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

ws2_32

recv
socket
send
gethostbyaddr
connect
htons
WSACleanup
closesocket
gethostbyname
WSAStartup
inet_addr

vcruntime140

strrchr
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
longjmp
memcpy
memset
_except_handler4_common
_CxxThrowException
__std_type_info_destroy_list
__vcrt_GetModuleFileNameW
__vcrt_LoadLibraryExW
strchr
memchr
_setjmp3
strstr
memmove
__std_terminate

api-ms-win-crt-stdio-l1-1-0

_fseeki64
fsetpos
fgetpos
fgetc
fputc
_pclose
tmpfile
fwrite
setvbuf
__stdio_common_vfscanf
_get_stream_buffer_pointers
_popen
__stdio_common_vsprintf
freopen
ferror
fopen
__acrt_iob_func
fclose
getc
clearerr
fflush
ftell
__stdio_common_vfprintf
fgets
tmpnam
fputs
ungetc
feof
fread
fseek

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
realloc

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_cexit
strerror
system
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_errno
exit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

api-ms-win-crt-convert-l1-1-0

strtod
strtoul

api-ms-win-crt-string-l1-1-0

strcpy_s
strpbrk
toupper
strcat_s
isspace
strcoll
isupper
islower
tolower
isxdigit
ispunct
isalpha
isalnum
strncat
iscntrl
strncpy
strcspn
isdigit

api-ms-win-crt-locale-l1-1-0

setlocale
localeconv

api-ms-win-crt-math-l1-1-0

_CItanh
_CIsinh
_CIfmod
_libm_sse2_acos_precise
_CIcosh
_CIatan2
_libm_sse2_atan_precise
modf
_libm_sse2_asin_precise
floor
ceil
_libm_sse2_exp_precise
ldexp
_libm_sse2_tan_precise
_libm_sse2_log10_precise
_except1
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sqrt_precise
_libm_sse2_cos_precise
_libm_sse2_sin_precise
frexp

api-ms-win-crt-utility-l1-1-0

srand
rand

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_time64
_gmtime64
_difftime64
clock
_mktime64
_localtime64
strftime

api-ms-win-crt-filesystem-l1-1-0

remove
rename
_lock_file
_unlock_file

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RedBoy 4.0.2/Teen.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\users\one eyed inspiration\documents\visual studio 2017\Projects\Teen\Teen\obj\Debug\Teen.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RedBoy 4.0.2/debug.log

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 234KB - Virtual size: 233KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 53KB - Virtual size: 52KB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 14KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 654KB - Virtual size: 653KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 342KB - Virtual size: 342KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 992KB - Virtual size: 991KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 512B - Virtual size: 12B

8xn6pK63 Size: 77KB - Virtual size: 77KB

6fd3a7ceec62ed25f4ff7cef48189f14

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

ws2_32

vcruntime140

.text
Size: 234KB - Virtual size: 233KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 53KB - Virtual size: 52KB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 654KB - Virtual size: 653KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 342KB - Virtual size: 342KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 992KB - Virtual size: 991KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 512B - Virtual size: 12B

8xn6pK63
Size: 77KB - Virtual size: 77KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 8KB - Virtual size: 8KB

.text
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 512B - Virtual size: 12B