7e1011694b310a4741abdb56bacb6a4a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7e1011694b310a4741abdb56bacb6a4a_JaffaCakes118
Size

701KB
MD5

7e1011694b310a4741abdb56bacb6a4a
SHA1

b47d34277fb79747092cb29058c5381bf321ffe8
SHA256

069868e69e68720192a84a935be1a82c1a91a24ceef322776748d1ec90e57a4d
SHA512

c0bff6469fc2a8abffb7b7ab7516b79dc0a364f487d018cd9c757e9918cde2cdae30edeb5ee755268d9b5d8ee15c5b763f25cbbbd85988c0b4d331f4841c2820
SSDEEP

12288:x9CLRgqQKuSRERrg9OglR+ybbGcH+Gz7fKuNz7Q5APzbwDyOgYPKnOy5J7WfxKPu:2LRlQjSRERrOlfexuNY5qboyOgwKnOys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e1011694b310a4741abdb56bacb6a4a_JaffaCakes118

Files

7e1011694b310a4741abdb56bacb6a4a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_0093CFF7_47D5_49E1_9DD1_18D0ECFCE8C9
fn_00A1D2D7_47F3_429A_8452_364FBD79EF36
fn_0250E07A_5EA7_4562_9633_193A51CE3742
fn_04509C02_C596_4758_B979_1579CA26C983
fn_048F9CF0_1AE4_4285_8415_84A8C93301B9
fn_064652E3_8FFA_40A9_8676_34CCF555E50D
fn_07F0A9F8_710F_4335_9DB3_C2EEF3926D89
fn_0A6A240E_EE1B_4B0D_8DC8_60DB6146D029
fn_0A756800_5246_413F_8B9E_156E5FC3746E
fn_0AD8DDE9_DE9F_4944_A1A2_3FD5553E8850
fn_0CF4A23A_A57D_46E4_934F_C8667C6137ED
fn_0E4DBAFD_5914_48DC_A659_0A7B685D9440
fn_0E92DB7A_BBE3_4888_87F8_D46CC279E0CA
fn_0F58181B_4E25_4D0A_B002_1992634F3152
fn_1036B872_B2B9_470C_A478_26378BE598F1
fn_11340C01_D339_497D_B206_0A958B472301
fn_121A48AD_6C3B_4292_81CC_282FA0FDD06C
fn_141F8018_E032_468C_9641_AAA2FA17DAF5
fn_14DCB0E0_0021_4552_BAC8_807B38316E6E
fn_14F6D68D_78A1_415B_B4CF_A8ACD426A701
fn_1A27EF9D_5426_4748_AF75_83B600332988
fn_1E86E529_CC74_48E9_ABD6_94D92153B2FC
fn_1F6330A1_0D16_4092_9779_DFDAC92CA33D
fn_1FFF5EB6_54F0_448C_8BB5_ADBD811C96A7
fn_20D24D14_DD33_4AB8_B2AE_CD8D793C360A
fn_2285726E_5E1B_4EBF_94A4_4E1F44125B81
fn_235A4C80_8D6A_44BC_B510_D27750B9699F
fn_23D35A96_A742_4057_8AF7_FDF6812CB569
fn_24530EE5_FAAF_4B54_B47A_5CA95AF75D38
fn_25D75CC7_5BA4_4584_8AA5_73E143ACB95D
fn_261E354E_F38B_473C_8809_FED111580C12
fn_29D80BFD_5684_41FF_A50A_D95356841878
fn_29F0F53B_5C2F_4358_A6A5_138FC62264C4
fn_2A4E776C_D5E1_4DFA_B50B_91AED3838B23
fn_2BCD4D03_B468_4D0F_8173_09DE8073EC59
fn_2C0D05C9_4EF1_4C31_A245_52EC99B5C200
fn_2D814182_4932_4BD6_B1EF_35356392E60D
fn_2D8ADDC4_CABD_48F9_B24B_266E5C279029
fn_2E20A5F0_8ED3_4694_906E_510E31C5BDF4
fn_2E3128E6_D7BC_4EE8_9C68_43519F03B736
fn_300962C9_55F7_490B_AD81_D302DD0EBAB3
fn_307416DC_B8A0_4DFE_BFB6_8682B3417EDD
fn_30C19900_9D82_4918_A84A_8C9D4DFDF2DD
fn_31621884_26EA_41C3_90C5_4A8B91159FD8
fn_333FD4B8_78CA_42B1_A0B4_2789E18F482C
fn_338C5F0E_CA7D_4627_83F5_865ED0DC2209
fn_35A36A5D_2988_4B71_A333_F5E53BF48883
fn_38446C92_32F7_402E_97ED_48C237A0B797
fn_393279FB_5A6F_48FC_90A1_087A70C78B2F
fn_3943BCF8_7959_4E6F_BF27_BD4E7816A09C
fn_3C202620_F65D_40CE_91B8_8582CD1E1460
fn_3D07C1C9_77BC_4C59_A6F0_83F332E862F4
fn_3DCD2B0B_AEB6_46A8_AF47_C8EF7EAE3D6D
fn_3DFA14E9_BA97_457E_8333_F57A45D8E61A
fn_3E34EF6B_C41D_4B1C_94A0_B663B508D03D
fn_3EA492E7_D281_45FF_B254_110C997FBA77
fn_414E8D15_A5C9_4175_A6EA_8CA2ABF8878F
fn_4191E707_25AA_47B2_8923_C8E76B9A4636
fn_4370EAF8_089C_4CED_816E_67ED253880F0
fn_43CF4290_A20E_4665_94DE_7D316E7DD4CB
fn_44DA9D6C_F1AE_4F40_B380_7ED2F0BB54C7
fn_47CA07C8_5A50_4929_AB4D_FEE9E0D5E1BA
fn_485C5965_90D5_4771_BD7A_81C4AE6DF458
fn_49420709_E120_41D7_9E2C_A26A091514FD
fn_4AE34949_BF92_42F0_853E_6C3E8CF99D80
fn_4BCC87C8_D4A0_40DB_831A_636E8C4A5867
fn_4BEFDB41_EEC6_4C8C_BBAC_A476BAADB925
fn_4C513A85_76A8_4B1A_8CAF_87D36BB43D9E
fn_4DB5B88B_1266_473B_91A2_4206E74C7872
fn_4F6D71A6_DC5F_4093_828C_61A1A9D064A1
fn_4FDD67C0_E4CD_4AA4_B8EA_75760E3AF905
fn_4FFEBB2D_C471_4ABB_8A56_226F4B52CAD9
fn_510CE052_2B48_4079_9EFD_2F972FE54CF2
fn_51DD57C5_7CE2_4D03_A150_7304BD86894C
fn_53A78708_F012_4369_9CB7_42178DBAC6E3
fn_56BB7B1E_FC6A_4DD9_9EB7_D50C27A219AD
fn_57078016_F35C_4B89_BBC0_2D99A7D42BD7
fn_578F7DA3_6BB8_48BD_8B81_EB50FD8892D0
fn_57D90A95_CAF7_4B89_AEE8_8C4B4F25108B
fn_586413A3_06D1_4C9E_8A02_AB63C437C48D
fn_58BCECE1_C08B_4C2B_B30A_8886E6B5699F
fn_59D15949_7C18_4D03_8993_571FB1F4A127
fn_59E7F553_2ABB_47F4_B5A9_00C9714EF6BC
fn_5C5D3211_1512_4F4D_B45F_07700604F3D3
fn_5D4C4524_2EE7_4E3F_BBD3_D417246A8905
fn_5D6CFF15_F93A_4F81_AE30_47B3393B0201
fn_5EA0AEB4_CDD2_45AD_8504_12A0C68AD2CE
fn_5F9AD844_55FD_47B9_A763_6BCFEC82A247
fn_60CECED0_7E28_416C_AD34_FA915D5BBB4C
fn_61050ECB_E5D1_473D_AFC0_989C24C63A1C
fn_6335F8DA_2F33_44AC_8926_9E3C388A6BAA
fn_64D17AD1_247E_4230_855D_DA9CC6706954
fn_660B01ED_8DA2_4D8B_8921_70FF6E8340F8
fn_666AE8BD_919D_404C_B3C9_F8B570230E11
fn_67853857_14AF_438B_B015_EA106682E90A
fn_678B298E_D6D8_4F7F_9D6B_8FFF9BBF3790
fn_67DB6368_1E38_46E4_9239_BAF217591E10
fn_67E2C5E2_FEDC_4DA3_88A1_CDAD89ACC8EB
fn_69FEE3CC_A1F9_4D4D_A72F_FD7D5301B409
fn_6A4D1A48_203B_4F9A_B4AF_FEBDC5D3F128
fn_6ABF975A_99E5_4C75_A78E_B6AC11666801
fn_6C174A3C_7EA6_40FE_A7FE_0FFF0108F192
fn_6C194455_D438_4B3C_BE86_8A301FA2B73F
fn_6C25D753_5DC5_46A3_B6B7_AFE544C885B0
fn_6C2FE3E0_12B9_477A_911C_AD3A5862005C
fn_6DDBA9E4_C491_4DF1_994C_B7886664158D
fn_6E7DDD5D_65CA_4FB1_A450_608574382E22
fn_6F15459A_E61A_4DED_B1B2_99A87A0FEA9C
fn_6FE01239_1D72_4E2C_AEE7_7605A76A4E77
fn_716742A7_EE82_4BCC_8BCF_B81A5F7BADFE
fn_720C0FF4_03D7_4575_9C56_1C8E35F5CE8A
fn_72DD32D5_8CFE_4F5B_95CB_CBD75D9472F6
fn_748BBDF4_5A84_4FF8_9F78_21F841F09CB8
fn_7605038A_94CC_4781_A0BB_919939F58B5A
fn_76CD1470_0432_488F_87B1_BC7F43B75DFC
fn_76F37D44_5BAD_4A98_93A5_2A2475392D31
fn_79FBF3D3_01EA_48DF_8FC9_2C17E81BFC3D
fn_7A550633_7E6B_49AC_9D53_50ED4C3DE810
fn_7CD44914_041A_4765_8DA6_3FECBD11DC05
fn_7CDB2324_C178_4166_9A6E_CDFBC7462F86
fn_7D2CD837_293B_456A_AA68_5F180966F64E
fn_7DEE5249_A28D_40EB_B545_2C27C16734B7
fn_80C16556_B8F2_4EB5_8540_4C2DBD796BFA
fn_82363C19_3645_421C_9349_B19D44D0AF0A
fn_825138FE_5DB6_40C0_A399_66F5D08FB57D
fn_84048247_12D9_4A00_99FD_4A7AECEF98DB
fn_84094341_61DB_4840_B765_025E8B89D000
fn_88437C83_D8BE_4D56_9D98_AEDAC049373B
fn_895D0E1B_8C09_4A2C_87AB_5AA0A367667E
fn_896D1553_A60A_44A4_8635_6378A03D4D41
fn_8C56C5D7_FDCE_43F8_A47C_56A0B3D7CCE4
fn_8CD8138D_0453_43E0_9645_F0B20DF70567
fn_906D1A90_A4A9_4136_B101_8BB15788A648
fn_90EE3870_FEA2_45A0_A8E9_93502569A23C
fn_95D61030_6ACA_472A_982D_3451FBBD6B77
fn_960F072A_3AEC_4CE1_A6EC_FD17A623BA33
fn_9715A0DC_2925_4B47_9DEC_72AF163C20DE
fn_974209B9_9E8B_4B6A_BF82_C2F464BBA7B7
fn_974A8D84_A8F3_44E5_98BA_28890CB58242
fn_97E47DE1_EF38_431B_8F2A_054929E8A929
fn_980CF654_044F_4FF0_8F5E_F2CDD96C2A23
fn_986F5CE4_A450_41A4_B385_32DBCA9FB478
fn_98F8347A_DD49_4E3E_A59C_A5515E8B20EA
fn_998EEDB9_4003_493C_8C7D_564CF99EBC25
fn_9A20AA8D_E5B8_4EC7_A379_B6640A992AC2
fn_9A59AE7F_76D8_481F_9A8D_77513F7850E1
fn_9DB3AF76_6232_4153_90DB_0B55F30CF15B
fn_9E71FD01_232C_4850_9F4D_B091F9E4CB05
fn_9EA309C9_4C1D_4E20_826B_221F3D85D421
fn_9EC069E0_3275_4C13_8756_09748102AA96
fn_A092A4ED_197D_4EF8_9512_A2B59F9E82C4
fn_A2D77267_236A_4DA7_A3CA_A938374E5E8B
fn_A34E26B2_8F2F_44AA_8C22_5D1A81FC6C61
fn_A4F1040F_BF3C_47C8_A1E4_A69C5F95A591
fn_A684F451_D848_4096_87D6_4892C513AFD0
fn_A7B14793_7E06_4B49_B5F9_1489EB05BAFD
fn_AA2AC459_4FD2_440B_91E6_5590D9518FA3
fn_AAB522DC_CDEB_4068_985A_FBF0F8BAF3D2
fn_AB333BB7_3753_4DAD_A819_5E4F7680D4FE
fn_ABF35C99_ECA6_41B0_A66E_F355718E85EE
fn_AC6108EC_1D5E_4AAC_B7B9_4C205C9A2690
fn_ACAE4C98_BE8A_4C3C_8CF5_BA811368D141
fn_ADCF43E7_3E5E_48CA_87E2_223EF56B5592
fn_AF8BBA52_86EF_4264_B8DB_32057069665F
fn_AFC89853_A159_4462_BBEC_C0D7030F9AE6
fn_AFF18E94_270B_4CBF_B505_35EB7E0B3973
fn_B01A78BC_A1FB_4478_BBCE_1B4DE070EEDF
fn_B028E883_4D78_4362_9CF2_6AB3E19AABD0
fn_B2DE7E14_2217_4264_8A6B_C8043C07DA6B
fn_B3829F8A_BBD8_44AC_A4AE_AC25EC157A98
fn_B3994EC2_23B8_48A4_BD29_1E60FF016634
fn_B5730026_B7C0_499F_B071_B5B7FCE991F7
fn_B69D092F_2C9A_405B_9FE9_5859BA2E09DC
fn_B6FD2D50_26A3_4BD9_8EA9_F1CCE3B44BFF
fn_B70AF390_6795_41E9_B229_ABBE21D4969D
fn_B7195520_C086_443D_AF59_A9ABA3B3A334
fn_B7754C44_187D_418F_83B3_8862C6AAEB9A
fn_B79C3DFF_CE2B_4D35_8A5F_D3C9A9DDB40E
fn_B7D16D5B_6C06_428B_A6AF_9898A70892B2
fn_B8DE8916_03C8_4760_BCA7_65A5F69C05A2
fn_B9997D1F_8CF3_46EC_8C0F_D23382524397
fn_B9E32871_04ED_40D1_8EAB_FC97F539221B
fn_BBB26798_3735_4AE0_88AA_2D37A1F8A799
fn_BBFAA19F_EBA1_406E_AAFA_22F57F468CCE
fn_BC9C5A0D_B3DE_47E0_97E7_178FF9F68B4D
fn_BE7FEE07_2EDB_47F0_989C_6FEE2B369D4B
fn_BEF3BC7B_7A6E_4741_9239_CA7EF01EC4DE
fn_C0AD61B4_41A8_4ECB_8489_151FEB544A23
fn_C166B7A2_7D40_43C4_A36E_CB476BF031C1
fn_C2457015_E1B6_4E4E_9A14_8D9B9981B3D8
fn_C3360F7F_3525_4F73_B1AB_37B219B1F71A
fn_C3C7A43C_9B08_47CD_9FFA_38E037CE595D
fn_C7928A21_E308_4B34_ADA7_B70487C34FB1
fn_C89EFA60_23AB_44D8_9273_B4D02D0CC28F
fn_C971BBA3_050E_4C52_8C50_165EC12E58CE
fn_C9C72E44_7177_440B_86BC_6DE6092A9724
fn_C9DACDF2_DA79_46FB_9669_8C0AC9DA395E
fn_CA4B2D84_E805_4C37_BC6B_6D8F9423B3CC
fn_CA52D1DA_7A93_4237_B0FB_2A321749B4CE
fn_CB25A108_EF0E_4764_829D_DB90E600B505
fn_CC0D9A0A_B8B5_4D91_BB14_79144EFE252A
fn_CC4BE973_D0AA_4F39_A18F_C13F3D157A81
fn_CCA0E795_B2A4_4AA5_BF70_59FEE798FD29
fn_CD5DCDAD_437F_4875_891C_3846DC9461A6
fn_CEF888CF_C9C9_4953_BE7D_FBCC0F737249
fn_D09E40CC_210C_437E_83B6_209203C4000F
fn_D1EBD90A_B668_4254_A891_CE395ED2BF7E
fn_D241FC47_5539_41F1_9BD1_7ECC89D8E876
fn_D246E0A7_AC2D_4830_A099_01F1FCDBAAC7
fn_D25A6584_1F67_4CFA_8D5C_36EE150F08C2
fn_D2B1D279_F56F_4BC2_B91E_FC7A7390B6F1
fn_D35682DB_CD51_4FB6_A8B6_89C92EB18371
fn_D68E2634_9289_4CA4_820F_C9C783D0AE85
fn_D8356798_C69C_44A1_A57D_6D07646F40B5
fn_DA1531BB_6D33_4CCB_B5C9_6845DFDC094B
fn_DAE3B2B5_D5AE_4417_B1C1_A416A1B772E4
fn_DC2F4F4B_E30F_4452_B680_F86C2C708785
fn_DD03A654_DEB9_4409_9E74_D4F702C126A3
fn_DDB33F09_D9E0_4123_A613_1ECAB9FB1B66
fn_E056AE6C_F29A_4709_8431_1B34BC1B57C6
fn_E0CAE6B0_602B_48C8_ACFD_CB2633B34F43
fn_E118C53E_0F90_4E95_BCE0_DB919D7099A3
fn_E2FB85D9_59DE_436A_ABD7_9E4ED0BB1A95
fn_E41FB66C_10FE_458D_80D6_B1998F9FD5A0
fn_E4E37A71_7736_4D8D_BF41_D4E7705E2091
fn_E5B0CDE4_AF13_455D_9FB4_1CBC16229C79
fn_E67F1B49_B01C_4B56_BD31_EFCA59F175D0
fn_E7E6CFAD_522C_4A06_9B08_3C2D8D1024AC
fn_EB0D3221_1DAD_4773_B469_57A81683C07E
fn_EB7A60E3_354F_48A2_8D86_D91145E5197B
fn_EC1C28F9_C64A_46DA_AF12_F4EE0A39BD1D
fn_ECC2AB80_BAE4_4788_9C23_9E1CFB8A4E1F
fn_ECE0516F_60EB_4784_9C01_CD144F6145AA
fn_EDF6C480_02EE_430D_8F0C_960A1D90B346
fn_EE3C7EFC_0577_40CC_BAFD_9828B3BF9AE1
fn_EE9DF0A6_B467_44E2_B7A0_FB8F15E4DA22
fn_EF942740_6C35_4F68_9D6F_692F8B24E694
fn_F2374192_CD8D_4DAF_A6F1_E2509F8456AB
fn_F2DE6F7E_43C6_436D_8F55_BFABCFA4BF22
fn_F3B0CC2F_B34B_46C9_8C92_C5D7D9F12B30
fn_F3B142F2_1A31_43DC_AE0F_AB9EF92B6F5D
fn_F4344806_6141_426E_8C1E_FA8CB6B5D2B4
fn_F46B65A8_0A05_4D03_B15A_ECEB0D8F25F9
fn_F47E24D2_45F1_4E6E_9583_E16986A39FBF
fn_F53261F7_5580_4FED_9D0F_BBB3A801BBDC
fn_F5EF0D51_7E47_4BBE_955A_21B1437D9975
fn_F70EC866_3E24_4592_A307_6CC07A341FAA
fn_F819320D_D1A6_41AD_9CE7_7E34E9637787
fn_F84FBAAF_3D06_4FEA_88B1_5648D7A35995
fn_F8F4B727_088C_4759_952B_F31AF0136CCD
fn_FA2A9C38_CF0D_4CEA_BE13_4F3AD50D72C4
fn_FAF084F1_56B2_4FA8_9399_F41F8CE25E97
fn_FBD23AD3_CC3B_4DFA_B0AA_E4A980C66871

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 33KB - Virtual size: 33KB