7f28250f4e3d8fff753cb2869e5bd1ec_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7f28250f4e3d8fff753cb2869e5bd1ec_JaffaCakes118
Size

701KB
MD5

7f28250f4e3d8fff753cb2869e5bd1ec
SHA1

1164e8264a6460eb05669ecd3456fd0de54ece2d
SHA256

57a096f09021f023db2a89c2d40a03597fd8eeb8051937f83aa8f428ad1da310
SHA512

583cb99da85fcc93b6b66a25017ebe34864d03aa0c407b0d897845592809f6552f90e20d7bdced4035385eaa10aff87e86e21e2e9c685a893e7b833ba1997e5d
SSDEEP

12288:c6u0FgqAm+ihEe7Ttupl/+i7L28H+Gz7fKuNz7CAPzbADyOgYPrWzSxGQi+WZ2hF:s0FlA/ihEe7alFexuNKqb4yOgwrWzSxf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f28250f4e3d8fff753cb2869e5bd1ec_JaffaCakes118

Files

7f28250f4e3d8fff753cb2869e5bd1ec_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_00C6EF2D_01F5_49F5_9C32_E8CFA90CC5FE
fn_011439EC_8AF0_40ED_9075_676D42E4A92B
fn_01531509_5274_4A90_A590_4128DF4BE7B2
fn_01879A54_26E2_4EBB_9C98_9FFB6C6900A4
fn_03B28332_367F_4721_AAEB_058230D2EBE5
fn_03ECA6E0_2C9B_4DC1_94BA_73001B52EFE7
fn_042E1BD6_0AC5_419D_B4D9_1225F85F2B7C
fn_04841551_DDCE_42F3_8615_C929C0BFE18F
fn_04878996_50CC_4144_A8BE_0F2A9F5A9F2D
fn_060D7B6F_F999_45B5_B4F6_02A2414E8EED
fn_060E0E0C_8625_4013_881A_C050E3B68769
fn_066EE7D0_F21D_4C1B_A89B_2B4CD77E4C8E
fn_0707EC76_8D12_42C7_AD6B_DA93866A5CE2
fn_075FFF12_E187_4B16_B461_0FD225636673
fn_07650674_9356_4BA0_A5EC_47A0C80C2FA2
fn_0808F3BD_98D8_4FB7_AB13_6CFE641650C9
fn_0B4C78B9_4DC1_4DFB_972F_E3CDD31A5F39
fn_0BBB4FD4_02D0_43D4_B1A3_F4287CE43D4B
fn_0CBCEAD7_FB56_47DF_A2E5_3F4AF33E4D9F
fn_0DF295CB_CDD0_4D11_860C_FEF7CAC8D7A8
fn_0E1F7313_DCB3_450E_B89C_707DBC457C53
fn_0EA3D191_1161_4F6A_B179_0BF486E1EF5C
fn_0EC8C609_9BA7_4E48_9F67_EC735A92C8E7
fn_0EDC7896_A67E_4FDD_B42F_B66C1FB67358
fn_0FFA41DD_550B_4F4E_8430_A41D7A7B3E45
fn_104165E8_6568_4413_A556_28259F02C1A4
fn_143533B8_0606_4457_AF49_F8529513592A
fn_151A1199_8E2B_4A95_8C1C_67DF9448DDAF
fn_182D209B_D7E5_4A1E_9614_AD864DB2104B
fn_18BB567E_6238_4930_8394_4235D13BFA6C
fn_1CD70D49_B0A1_4EEB_A754_1B7641498C99
fn_1D037742_288D_4266_ABF5_49401D5EBFCF
fn_1D44A38C_7C34_4490_9803_523AD56FB6AD
fn_1D9EF06E_D216_482F_A977_AC9652573700
fn_1DDCAD74_33C0_4E27_9643_5445C7C219F8
fn_1DE1E5D9_17A9_4E98_8BD6_8760096D070E
fn_1DF34100_AB85_4656_B542_4E8DC207AB8D
fn_1FE2C095_0950_4E50_946D_7790636534F9
fn_1FF8F993_FAB3_41B3_B82B_4DA9E0112C32
fn_20F9BA0C_3DAD_4EBC_9AC2_DFEB791261DD
fn_21D999E2_401D_4691_8149_2C38228B3369
fn_22E0A195_85EA_4A55_84A5_7E391391DB49
fn_291E3394_2F22_411D_81DF_C75145048140
fn_297C10DB_DEF0_4BCF_93D0_5ED9CA335C48
fn_2A264709_2515_44FA_A5F1_0155A1BE7A4F
fn_2AA300F5_1FD9_4774_B44F_8F681F29DD74
fn_2AB442A0_6295_4F75_888B_BE9F7A89875E
fn_2D148DBA_2B51_4258_98A6_E4D1C6A8CFBC
fn_30D3D209_BC8E_41B5_8420_F71B44B7EF42
fn_319BD3E5_15D1_40F5_8F48_B91B8A305702
fn_32589DB0_01B2_4D94_98C8_2AF91103307E
fn_330C2AEC_0957_4F76_BA0E_1F4A891D1FC5
fn_33C2A5CC_D1A4_4D19_B617_38EF3AAEC8C6
fn_35B8B1AB_837B_4284_98EB_EC5DC3B37045
fn_35D1CB69_F0F3_41A6_8EBF_A63F23997E0D
fn_3686B5DD_C1BF_4F66_91A9_E9A15C0B1A89
fn_36FDE728_0AFB_461F_A97E_FE571A386F51
fn_37A3586C_14DF_4D9E_A21A_E045137CAEF3
fn_389C0E01_DC54_4027_BDE0_6F3FD2D2317A
fn_39952337_DDF4_4E75_B1AB_86ABD211579F
fn_3A3A2E3B_D367_421A_B2FB_022EE1A7FDBA
fn_3A897C9B_B522_4FED_9D9D_D3AD012DD45F
fn_3B88BC1B_610D_44AE_AE8E_24B08D588498
fn_3BE54CDB_9FF3_44FB_B54F_91D7D7B08184
fn_3BF96A0D_5C47_4AFD_96BE_76AA2827315C
fn_3C246ABA_2584_4E58_A0E3_34384A992FE2
fn_40676637_8DD9_432E_B9D2_7AA397119D34
fn_41AA14FD_AC5A_4439_9956_52C2565754AA
fn_4340B482_971E_494F_929A_C9E6B3CCBD05
fn_4502491D_8144_4AD9_A234_9C0FAD81039B
fn_47C802C4_E7B4_40A9_BA63_20CCA82F772C
fn_49B52941_B3B1_4EDD_B77E_B285B7BB52CC
fn_4C2462C9_1728_4CBB_84D2_0B9C6628BD40
fn_4C9EEFD3_A08B_4215_B0E4_CF3629CB3E4D
fn_4F404A3B_B837_429B_B549_6B87D5EF0A74
fn_4F5121AA_2360_4E7F_8EE0_C9BF53D407CA
fn_4FA30CD9_3295_425D_B359_E2671244DEBD
fn_50BF2271_C784_4146_AA73_E44BF0D61912
fn_51DB80AF_A8CE_4A1B_9D68_ABC189C289A4
fn_520B610C_653C_4F8D_B40A_CF4211DCA33F
fn_5231024E_7A7E_4938_981D_F6C2B2B919FE
fn_52F6060B_FD6D_483D_A9AF_F32125BBEA7F
fn_52FAC2B0_33B2_42A3_8C1F_9959BDF95A19
fn_557957D5_433F_444C_B187_C7C37B8606AD
fn_55809337_B508_425D_AD3F_7132527F69CA
fn_559D7D88_1DDE_45FC_9888_CC504A40F126
fn_5748DCB0_40DD_48AB_811B_54712A4D397A
fn_58161D7D_0C2C_4AC8_A3A7_0EF24A619F56
fn_5A3CF886_4DDC_43A3_9273_BD368A7AAA1B
fn_5BAD6006_2B75_4295_AFDD_A3F22D144095
fn_5BF11499_83D4_4357_AFD7_D8545F74AD86
fn_6141812F_8D29_4117_94E1_68CFCEF443EB
fn_6198BD4F_A5E5_4C25_BA51_2A16CDBF9592
fn_62D76E8C_09C9_488B_8B9A_62C11EB1BAF7
fn_63F3678E_0A0C_4DA8_852C_18B63ED98750
fn_648B1351_AC01_4AB9_A985_5647F664FBC0
fn_69261C8D_98AC_499D_902D_84450B7DA382
fn_6A183660_EC98_4D97_868C_DB60C4906B14
fn_6CBACF66_FF85_45BD_992E_F0244D635EA9
fn_6CBDAF7C_06D5_4EB6_BC64_EBEAF5D051EC
fn_6CF0A014_8F62_4886_8D3D_D4487D219F15
fn_6E2CE684_523C_476C_9650_6046182C7585
fn_6E471C9C_0B92_45D4_A0FB_07800030840A
fn_6E6AAEC0_5313_43CB_A106_AC73A4CC81F5
fn_6EE1ABC2_83C0_4833_B2A4_3B418B19BD13
fn_6F5EFE8C_59D4_426C_9086_1F46B927101D
fn_6FB3E41B_7026_4B44_9D3F_675269AE9333
fn_705114A6_A83F_4693_82F7_DF4570D53125
fn_720FCF47_5AFC_4BEF_94D6_7FC9441C8C09
fn_7468D5EC_9EEA_4157_B8D8_977117F20DCE
fn_75B46571_F0EB_4502_AB4A_B8E31A792F08
fn_75D611C2_0B03_43B8_9DD1_00459E180841
fn_7663026C_22BB_471A_8363_FB00118CD0BE
fn_783C2F70_0ABB_49F5_ADE5_4E5E7DE60A6D
fn_7B335538_ED18_4475_BA22_8B18234FDCBB
fn_7B4F3D59_7456_4B3A_8CFD_2AEB464FE7B1
fn_7C10DCE8_02D5_42F5_9245_3700ED87D8F4
fn_7C4114D7_E1BD_4FF1_A2DD_CD77E269F519
fn_7EF54701_6987_45FC_9D58_40FB26CC9701
fn_8252FE50_70E7_48D8_B0DF_8211B689F09A
fn_8354E5B9_6EE0_4334_BE08_85B45EF13307
fn_846B9430_1240_482E_8D95_1F092737C340
fn_84D883C3_849C_4A9C_B592_242E3521FFD3
fn_85316AB6_24FE_467D_866B_13DB0F013543
fn_86CD4DE6_0583_480D_8ECB_D94FC41DC373
fn_873E9DCB_E143_4008_9DAE_9D6097DACE25
fn_881EF770_A77F_4F7F_88E4_6664B020CBDD
fn_8A66E719_B459_4082_96C3_4A3BCE25B446
fn_8C7D3BDA_D434_4738_9E77_06A675BFA734
fn_8F063E07_2DEF_46C9_B891_BBFBE63CEC1E
fn_8F15280B_F748_4FFF_BF68_0AAD17BD401C
fn_8F2D2FE5_332D_4907_ACDC_E42B26E2602C
fn_8FB3AF9C_0AD5_428A_A20E_A5472E94CCCA
fn_903C3B0B_D3B5_45DA_ABDA_E06FF673DC8B
fn_91B97098_9135_496A_8EE9_819F7B9CBFD5
fn_922067B4_E2FE_4358_B9DB_E93087A0C549
fn_9240D599_5941_40EE_8123_154E48537D9D
fn_92E4FA34_1422_4AC0_B688_65C287752850
fn_932553D7_46E8_4D3C_9AFE_7AB4C3DA4CA3
fn_93A8E4D8_2B71_4166_8F9F_CDFA6130E0FE
fn_94A2BAC2_C56C_4C42_A073_96AE5A6D1479
fn_94FBC3D5_C9D8_4091_9A30_07C1275D1B44
fn_953B39BB_54FF_4FFE_8CC1_08D62077641B
fn_95413831_2B0D_4A62_861D_F4DE6281608E
fn_9618627D_047B_44E6_9E25_C1DDAC420CA6
fn_965223D8_F63B_4B43_96E6_1EABA37F9262
fn_96959A26_FF75_416E_85AA_AFEFC3899522
fn_96A3E60B_5974_4313_A1E5_9CA9837E7153
fn_970A1D70_1FBE_4548_AB11_9D34B0BCE2D3
fn_97F48C1C_E10C_40C8_A7F8_43A9F07DF211
fn_98A394FD_E8FC_4505_AD07_D3E2FEF567CA
fn_993B0527_C61C_4A1C_9AE4_7A14C6C415CC
fn_99935EF4_0277_4F76_8D35_1B4185311D01
fn_9A17C54D_7836_492E_93BB_2D1B66EB4980
fn_9A4A51CE_B2AE_4F02_A250_35313933989F
fn_9A5308C2_316B_4B7E_BF68_0CD57B509F93
fn_9C77C027_DDB0_446D_8528_1853328064C6
fn_9CB3575F_DC1A_4679_84A7_74E733F3FBC0
fn_9D0E0078_5403_4F95_AD16_7264D98DCC72
fn_9DA3B0D2_5A91_4928_A5AC_290C6BAEC553
fn_9E3976C8_5863_476B_B84A_0723D74D836F
fn_9E62265A_D6C6_490C_AE55_5174A108090F
fn_9EA356E9_37AF_4A1A_8C6A_F0AECD92077D
fn_A2FB2A16_ECDA_479A_96BC_2E00C9E1B166
fn_A4A546E8_4012_46B4_8B23_EF864B29C0BB
fn_A5F9F4D5_937E_45CA_8E85_7CE7B74B18C0
fn_A68F3AC5_049F_44A0_BA7D_74E92253D84A
fn_A6DEC840_34B2_4790_884F_709B3F5893A2
fn_A792E436_7ABB_48D0_AC6E_526457081E2B
fn_A7ACA2FE_C70B_4F91_AD12_8E699EB8A778
fn_A8AE56AE_405A_48E8_9FFE_61C7DE61EFB3
fn_ABA149BC_CE22_4085_B34A_FF5635D9D5F7
fn_ACD82BB6_F668_4E9E_828C_D1D81966D755
fn_AD0AF8C9_4ACE_48E1_8F83_F9DF15F44651
fn_AD93B8DB_0395_4F89_BD81_EC9999A68815
fn_AF49B059_A57F_4EEE_A509_D36ECDDD89E4
fn_AFBC411B_509E_4E25_97A7_222473F79B5E
fn_B386163D_551B_457E_843B_66878207CA2E
fn_B500100B_0206_4B4D_B5C3_71501E86302B
fn_B5357954_B3B9_41F8_9E0E_8C2175C99FBB
fn_B61E52BC_6831_4419_8DB2_54056BA35A03
fn_B6F085B6_9F2E_4E99_BBAA_3C4CE03D8598
fn_B7C6CE1D_5EE0_43B7_88F8_D10DFB21CA40
fn_B8634828_4668_455C_ABBE_1EAC0AAE23BD
fn_B86F7E9F_A844_40C7_AF77_DA89863CF0DD
fn_B985F26B_8E78_4244_A4FB_C0DAD6079234
fn_BC8083B5_B07C_4F05_AC65_3DA881BD7010
fn_C0E423DD_A7CA_4006_B373_A347732282CA
fn_C2AC2615_13A4_4368_9151_AFABEA669854
fn_C3693003_43C0_4187_AA0D_DB0367D8653C
fn_C4F88E5E_E584_4BA6_BFF4_06367049F96F
fn_C6CB5A12_8D8C_4763_9A53_9C97322D7F97
fn_C7243FCA_BFA3_4A35_AB81_1F835F56D23B
fn_C8619A75_7C79_4B9C_AFED_3B3F425234D7
fn_C95E1BA9_0185_4276_AA27_C6726C03E760
fn_CAEA3C3B_57E2_420E_B2CA_ABBA1FB72AEE
fn_CC1BD189_B38A_400A_B205_E7C6B91F409C
fn_CCAA17F3_5912_49B3_83BE_E3C700153FC1
fn_CF31BE24_18BE_492B_8711_CCA9E8DA2F29
fn_CF83DFA2_F98E_4B74_8360_6DE8B4807D29
fn_CFB84053_21A0_4312_91F2_51EDEAC64DCC
fn_CFEF1EF6_89C7_4FC4_8BD3_0DD3C84BB53E
fn_D03A31F8_ECB6_4DBC_8D0B_2D16AD977F9D
fn_D0565B03_3E62_4B4A_B9C9_8FD268A0DEAF
fn_D0BE5536_77D9_45C2_9F49_2843ABDE9904
fn_D1E10858_D564_417E_BA23_998F9C6710A9
fn_D3B74077_7075_4B55_AA4A_DA03F954263F
fn_D44DA7A9_F34B_4599_A3D7_1B8A02AB4796
fn_D608038D_94CB_43A7_A72D_FEF48F877D55
fn_D7F56A51_DD1D_4CFA_BE5A_E80F6A01F691
fn_D872D5BE_52E7_49DE_A4BE_9111B1666382
fn_D9D9322B_0EDF_452F_BCC0_F7B8261BC7DF
fn_DA6FB5C2_6BF3_4CF1_80D3_3D99D338DB9F
fn_DB5FB330_8E62_49E6_8304_B3EC9B3BABF5
fn_DCC9EF23_A593_43BF_8200_AE6CFB87DA6A
fn_DDD2C47E_C5E7_4AB6_B389_246220E8DD00
fn_DE750E83_A818_4778_A00A_279D6D836331
fn_DF84C0C3_8BC9_4485_8833_BA63C47F0F54
fn_DFAFF108_1287_488C_9490_6C20DD2889C5
fn_E099CB46_78DC_491E_BADE_53C4ABB6F160
fn_E0C7E80C_54B2_4511_8968_9DB25ABAE49D
fn_E17F86BC_A85E_451D_9E1E_F9064FD84711
fn_E1F8FDA6_AB06_4385_BD27_7FEEF82103EA
fn_E21FCA2F_DD84_434A_A9B4_41FC56C0BE1F
fn_E2E60024_F57A_41D1_BE6E_60D512EC81ED
fn_E3A2B322_719B_4044_BFF1_747761565FF9
fn_E3C7C3EE_A74D_4E7E_B098_216656C93D0F
fn_E497D8AB_EA0A_4278_97BC_9D1FCB3E26B7
fn_E61F5675_E1CE_44EC_8FF0_2EBF68302474
fn_E65BA48F_2A7D_4865_9EC9_C60CADE527DF
fn_E715FCF8_8C96_427D_8754_8A8F855953A6
fn_EA657A0E_1364_4A86_A5AD_7EFF18E7FB05
fn_EAE28D1A_DC0C_44E1_8488_9C83DCE7F8DE
fn_EAFEF428_81E8_401A_8CC9_FB14400F05A3
fn_ED0B7E75_F055_4349_9596_A147A23A5AB6
fn_ED5CEAD7_0477_4938_BD15_65D4458E425F
fn_EEA66D9C_7B0C_450C_BE79_266703EBE887
fn_EF59B0B1_E874_4B40_AEBC_C8B5A771ADCF
fn_F029B9BA_C22B_4F85_B1C0_FB4861D84F0B
fn_F3189408_FDF0_4C73_B375_61FCF94CE200
fn_F365821F_A36E_42FA_9408_8D0BA87B33F8
fn_F530FAE4_01A8_4EE1_840C_F39EB39FD601
fn_F6F20662_B832_44E1_8267_23EDBD7F672A
fn_F7746A57_16DA_4F9A_A89B_EE9538D3C092
fn_F7A80345_C5E9_448E_90BE_3522BA0DAE02
fn_F84929AA_DDAA_44C1_ADA8_F8CFFC1CDA71
fn_F88A5446_A4EA_479E_AD85_5E996DD7246F
fn_FA40D61D_C313_4691_A4F7_ED235B82A547
fn_FA49DBE8_C4CF_49CC_ACA2_F11ECAD40C50
fn_FA69CD95_FD32_442D_939C_9F61FE4B4244
fn_FD0EC33F_EEC7_4D92_84F6_A60EE9CB3AFF
fn_FDDEE8DB_8E82_47C4_BD6D_5F6C44BB0046
fn_FF18D8C4_F3C6_4782_B22B_49A37C99E90F

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 33KB - Virtual size: 33KB