84112e2ee8a4c57cd4ac1bc5c6ab04c5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

84112e2ee8a4c57cd4ac1bc5c6ab04c5_JaffaCakes118
Size

16.0MB
MD5

84112e2ee8a4c57cd4ac1bc5c6ab04c5
SHA1

2d60b4b0fc45ceacad0a35ab34f1b19ed3e084f1
SHA256

38af527160ae46fd1030bfb3222158bafe0751bfcc1453ee6e55680be1e10c10
SHA512

ffcda3c769bdbed2a4845c14f9060d2d361437872aac448b8cddf68234df243a7ed6768c0aa01dd152aa86f96a94dc6a82203656466a968e5e3ad1800cd21298
SSDEEP

98304:d0PtUxNZ6EhiqI2wfSrhouTZad2Wm0ujBXshxwxYTxkRGeA4wG97fQodzk1n+:d01UML9fSrB8kBXso97fQodzk1n+

Score

1^/10

Malware Config

Signatures

Files

84112e2ee8a4c57cd4ac1bc5c6ab04c5_JaffaCakes118
.exe windows:5 windows x64 arch:x64

9466999df8d48fda58478709d7b0900a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

17-11-2006 00:00

Not After

16-07-2036 23:59

Subject

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

39:88:0b:e0:1f:e3:71:20:ad:98:69:85:09:66:3f:92
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

29-04-2016 00:00

Not After

29-05-2019 23:59

Subject

CN=Pandora TV Co.\, Ltd.,OU=IT Team,O=Pandora TV Co.\, Ltd.,L=Gangnam-gu,ST=SEOUL,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Ptv_SVN\KMPX\SRC\bin\KMPlayer_x64\KMPlayer64.pdb

Imports

dwmapi

DwmIsCompositionEnabled

gdiplus

GdiplusShutdown
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImageEncoders
GdipGetImageEncodersSize
GdiplusStartup
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipSaveImageToStream
GdipSaveImageToFile
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC

uxtheme

DrawThemeText
GetCurrentThemeName
GetThemeColor
SetWindowTheme
OpenThemeData
IsThemeBackgroundPartiallyTransparent
ord61
GetThemeSysColor
CloseThemeData
DrawThemeBackground
GetWindowTheme
GetThemePartSize
IsAppThemed
DrawThemeParentBackground

winmm

waveOutSetVolume
waveOutGetVolume
timeGetTime
timeSetEvent
timeKillEvent
timeBeginPeriod
timeEndPeriod
PlaySoundW
timeGetDevCaps
mixerSetControlDetails

kernel32

UnlockFile
lstrcmpiW
GetStringTypeExW
GetThreadLocale
lstrcmpA
GetProfileIntW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
VerSetConditionMask
VerifyVersionInfoW
FindResourceExW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetSystemDefaultUILanguage
GlobalFlags
SetErrorMode
GetWindowsDirectoryW
SearchPathW
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
UnregisterWaitEx
LockFile
InterlockedPopEntrySList
GetModuleHandleA
GetThreadTimes
UnregisterWait
DeactivateActCtx
RegisterWaitForSingleObject
SetThreadAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
SetEnvironmentVariableA
FindFirstFileExW
GetConsoleCP
GetOEMCP
IsValidCodePage
ReadConsoleW
EnumSystemLocalesW
IsValidLocale
HeapQueryInformation
SetStdHandle
ExitProcess
GetCommandLineW
GetCommandLineA
GetTimeZoneInformation
FreeLibraryAndExitThread
ExitThread
RtlUnwindEx
InterlockedFlushSList
InterlockedPushEntrySList
LCMapStringW
SizeofResource
LockResource
GetFileSize
QueryActCtxW
QueryDepthSList
FindActCtxSectionStringW
ActivateActCtx
CreateActCtxW
GlobalFindAtomW
GetModuleHandleExW
EncodePointer
OutputDebugStringA
GlobalSize
OpenThread
OutputDebugStringW
GetStringTypeW
TryEnterCriticalSection
SetThreadContext
GetThreadContext
CreateToolhelp32Snapshot
SuspendThread
Thread32First
Thread32Next
HeapCreate
LoadLibraryA
GetProcessAffinityMask
GetShortPathNameW
GetLongPathNameW
RemoveDirectoryW
CreateHardLinkW
MoveFileW
SetFileAttributesW
GetSystemDirectoryW
GetConsoleMode
GetSystemTime
TzSpecificLocalTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToLocalFileTime
GetFileType
GetFileTime
SetFileTime
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetStdHandle
IsDBCSLeadByte
GetCPInfo
CompareStringW
FoldStringW
AreFileApisANSI
DebugBreak
IsDBCSLeadByteEx
LocalAlloc
IsBadWritePtr
IsBadReadPtr
GlobalGetAtomNameW
FormatMessageW
FlushInstructionCache
QueryPerformanceCounter
QueryPerformanceFrequency
lstrlenW
SetThreadPriority
GetCurrentThread
GetThreadPriority
VirtualFree
VirtualAlloc
ReleaseSemaphore
CreateSemaphoreW
WaitForMultipleObjects
lstrcmpW
GetNumberFormatW
SetLastError
GetVersionExW
GetFileAttributesW
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
FormatMessageA
CreateProcessW
FreeEnvironmentStringsW
RtlPcToFileHeader
QueueUserWorkItem
GetExitCodeThread
LoadResource
FindResourceW
GetProcAddress
GetEnvironmentStringsW
DuplicateHandle
CreatePipe
TerminateProcess
CreateThread
GetVolumeInformationW
GetModuleFileNameW
GetTempFileNameW
DecodePointer
RaiseException
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetUserDefaultUILanguage
ReadDirectoryChangesW
GetOverlappedResult
CancelIo
GetACP
GetTimeFormatW
GetDateFormatW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileAttributesExW
GlobalDeleteAtom
GlobalAddAtomW
ResumeThread
ReleaseMutex
CreateMutexW
SetCurrentDirectoryW
HeapSetInformation
SetDllDirectoryW
DeviceIoControl
CreateFileA
WriteProcessMemory
ReadProcessMemory
IsDebuggerPresent
GetModuleHandleW
CopyFileW
SleepEx
FreeResource
ResetEvent
GetDriveTypeW
LocalFree
GetLocaleInfoA
GetCurrentDirectoryW
FindNextFileW
GetDiskFreeSpaceExW
FindClose
FindFirstFileW
SetSystemPowerState
SetThreadExecutionState
GetLocaleInfoW
TerminateThread
WaitForSingleObject
WriteFile
GetTickCount
MulDiv
SetEvent
CreateEventW
CreateDirectoryW
GetLocalTime
GetCurrentProcessId
CreateFileW
ReadFile
SetFilePointerEx
GetFileSizeEx
InitializeCriticalSection
CloseHandle
LoadLibraryExW
GetCurrentThreadId
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
Sleep
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
WideCharToMultiByte
GetUserDefaultLCID
DeleteFileW
GetTempPathW
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
lstrcpyW
LoadLibraryW
FreeLibrary
GetLastError
GetFullPathNameW
GetCurrentProcess
SetPriorityClass
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar

user32

IsDialogMessageW
SetWindowTextW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
IsWindowEnabled
GetNextDlgTabItem
WinHelpW
SetScrollInfo
GetLastActivePopup
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetMenu
SetFocus
IsChild
GetClassInfoExW
GetClassInfoW
GetMenuState
GetMenuStringW
GetIconInfo
GetDCEx
GetScrollInfo
GetClassLongPtrW
GetWindowRgn
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
InvertRect
CreateDialogIndirectParamW
EndDialog
DialogBoxParamW
CharUpperW
CharLowerW
CharToOemBuffW
OemToCharA
CharToOemA
OemToCharBuffA
CharLowerBuffW
DestroyWindow
RegisterClassW
GetAsyncKeyState
GetQueueStatus
DestroyMenu
TrackPopupMenu
GetMessageW
GetMessagePos
UnregisterClassW
SetProcessDefaultLayout
SendNotifyMessageW
LoadBitmapW
EnumDisplayDevicesW
GetMenu
SetLayeredWindowAttributes
RedrawWindow
SetPropW
GetDlgCtrlID
TranslateMessage
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetDlgItemTextW
SetWindowLongPtrW
SetMenuItemBitmaps
FindWindowExW
CreateWindowExW
CallWindowProcW
IntersectRect
UnregisterHotKey
RegisterHotKey
RegisterRawInputDevices
GetRawInputDeviceInfoW
GetRawInputDeviceList
GetRawInputData
SetWindowPlacement
GetWindowPlacement
ShowWindow
AllowSetForegroundWindow
DefWindowProcW
LockWindowUpdate
ChangeDisplaySettingsExA
MsgWaitForMultipleObjectsEx
SetClassLongPtrW
GetDoubleClickTime
TrackMouseEvent
GetClassNameW
EnumDisplayMonitors
CallNextHookEx
DispatchMessageW
GetMessageTime
GetWindowThreadProcessId
SetWindowsHookExW
UnhookWindowsHookEx
EndPaint
BeginPaint
GetWindowLongPtrW
SetWindowRgn
GetClipboardData
GetPriorityClipboardFormat
SetParent
wsprintfW
GetWindowDC
MonitorFromRect
DestroyIcon
FindWindowW
MsgWaitForMultipleObjects
CheckMenuItem
AppendMenuW
RemoveMenu
CreatePopupMenu
ChangeDisplaySettingsExW
EnumDisplaySettingsW
IsMenu
MessageBeep
CheckMenuRadioItem
SetWindowLongW
SetRectEmpty
InsertMenuW
DeleteMenu
EnableMenuItem
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
LockWorkStation
GetMenuCheckMarkDimensions
SendDlgItemMessageA
WaitMessage
MapDialogRect
CharNextW
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
IsClipboardFormatAvailable
GetSystemMenu
SetWindowContextHelpId
ShowOwnedPopups
CopyImage
RealChildWindowFromPoint
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
DrawStateW
ExitWindowsEx
SystemParametersInfoW
GetActiveWindow
GetTopWindow
GetForegroundWindow
MonitorFromPoint
GetMonitorInfoW
GetWindowLongW
AdjustWindowRectEx
GetMenuItemRect
GetSubMenu
SetForegroundWindow
IsIconic
PostThreadMessageW
ChangeWindowMessageFilter
EqualRect
LoadMenuW
RegisterWindowMessageW
PostQuitMessage
DrawFocusRect
DrawIconEx
ToUnicodeEx
GetKeyboardState
NotifyWinEvent
SetCursorPos
GetMenuDefaultItem
EnableScrollBar
HideCaret
CopyIcon
DrawIcon
SetMenuDefaultItem
ModifyMenuW
CharUpperBuffW
UpdateLayeredWindow
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetUpdateRect
SubtractRect
CreateMenu
GetComboBoxInfo
DestroyCursor
MoveWindow
GetFocus
GetAncestor
IsZoomed
IsCharLowerW
GetKeyboardLayout
MapVirtualKeyExW
GetKeyNameTextW
MapVirtualKeyW
RegisterClipboardFormatW
GetKeyState
GetSysColorBrush
GetCursorPos
DrawFrameControl
OffsetRect
WindowFromPoint
FrameRect
FillRect
CopyRect
MonitorFromWindow
SetTimer
KillTimer
PeekMessageW
UpdateWindow
SetActiveWindow
GetDesktopWindow
SetRect
UnionRect
GetSysColor
GetDlgItem
LoadIconW
GetSystemMetrics
InflateRect
GetWindowRect
SetWindowPos
IsRectEmpty
DrawEdge
ReleaseCapture
SetCapture
GetCapture
ScreenToClient
ClientToScreen
SetCursor
ReleaseDC
GetDC
InvalidateRect
MessageBoxW
PtInRect
IsWindow
PostMessageW
MapWindowPoints
GetClientRect
IsWindowVisible
GetWindow
LoadCursorW
CreateAcceleratorTableW
DestroyAcceleratorTable
CloseClipboard
SetClipboardData
EmptyClipboard
GetParent
OpenClipboard
LoadImageW
SendMessageW
EnableWindow

gdi32

ExcludeClipRect
GetClipBox
GetObjectType
IntersectClipRect
RestoreDC
SaveDC
SelectPalette
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
SetWindowExtEx
SetWindowOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetMapMode
GetTextCharsetInfo
GetRgnBox
CreateEllipticRgn
Ellipse
Polyline
CreateRoundRectRgn
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
SetPixel
RoundRect
ExtFloodFill
SetPaletteEntries
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
CreatePatternBrush
SetPixelV
GetTextFaceW
AddFontResourceW
GetICMProfileW
SetTextColor
SetBkColor
GetCurrentObject
TranslateCharsetInfo
EnumFontFamiliesExW
AddFontMemResourceEx
CreateFontW
RemoveFontMemResourceEx
CombineRgn
EnumFontFamiliesW
GetTextMetricsW
GetTextColor
Polygon
ExtSelectClipRgn
CreateRectRgnIndirect
CreateBitmapIndirect
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetBkColor
DPtoLP
GetViewportExtEx
GetWindowExtEx
GetMapMode
LPtoDP
SetBkMode
SetViewportExtEx
SetViewportOrgEx
CreateDCW
SetDIBColorTable
CreateRectRgn
CreateCompatibleBitmap
CreateBitmap
GetObjectW
CreateCompatibleDC
StretchBlt
BitBlt
DeleteObject
GetStockObject
CreateFontIndirectW
SelectObject
CreatePen
CreateDIBSection
CreateHatchBrush
CopyMetaFileW
PatBlt
CreatePolygonRgn
GetPixel
GetWindowOrgEx
FillRgn
SetRectRgn
OffsetRgn
GdiFlush
OffsetViewportOrgEx
SelectClipRgn
AbortPath
GetPath
EndPath
CloseFigure
BeginPath
DeleteDC
SetStretchBltMode
Rectangle
LineTo
GetTextExtentPoint32W
CreateSolidBrush
CreateDIBitmap
GetDeviceCaps
MoveToEx

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegSetValueA
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegEnumKeyW
SetFileSecurityW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CryptDecrypt
CryptDestroyKey
CryptEncrypt
CryptDeriveKey
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegCloseKey
RegSetValueW
RegQueryValueW
RegQueryValueA
RegOpenKeyW
RegOpenKeyA
RegCreateKeyW
RegCreateKeyA
RegFlushKey
RegSetValueExW
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueW
RegEnumValueA
RegEnumKeyExW
RegEnumKeyExA
RegDeleteValueW
RegDeleteValueA

shell32

ShellExecuteW
SHChangeNotify
DragQueryFileW
DragFinish
DragAcceptFiles
Shell_NotifyIconW
SHBrowseForFolderW
SHGetPathFromIDListW
SHAddToRecentDocs
ExtractIconExW
SHGetFolderPathW
ShellExecuteExW
SHParseDisplayName
SHOpenFolderAndSelectItems
SHFileOperationW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHGetDesktopFolder
SHAppBarMessage
ExtractIconW

comctl32

ImageList_Remove
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_GetIcon
FlatSB_ShowScrollBar
FlatSB_EnableScrollBar
InitializeFlatSB
ImageList_AddMasked
ImageList_Draw
ImageList_Add
ImageList_EndDrag
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragEnter
ImageList_BeginDrag
_TrackMouseEvent
ImageList_GetImageInfo

shlwapi

PathStripPathW
PathStripToRootW
StrFormatByteSizeW
PathRenameExtensionW
PathCombineW
PathFindExtensionW
PathRemoveFileSpecW
PathRemoveExtensionW
PathMakePrettyW
PathIsDirectoryW
PathAddExtensionW
PathAddBackslashW
StrCmpLogicalW
SHCopyKeyW
PathFileExistsW
StrRetToStrW
PathRelativePathToW
PathCanonicalizeW
PathAppendW
PathRemoveBackslashW
PathIsRelativeW
PathIsPrefixW
PathIsUNCW
PathFindFileNameW
UrlUnescapeW
PathSkipRootW
StrFormatKBSizeW

ole32

OleLoadFromStream
OleSaveToStream
CreateILockBytesOnHGlobal
OleFlushClipboard
CoCreateGuid
CreateStreamOnHGlobal
OleInitialize
OleIsCurrentClipboard
DoDragDrop
OleLockRunning
CoUninitialize
CoInitialize
CoWaitForMultipleHandles
CreateItemMoniker
GetRunningObjectTable
CLSIDFromString
MkParseDisplayName
CreateBindCtx
OleUninitialize
OleCreateMenuDescriptor
CoCreateInstance
CoTaskMemFree
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoRevokeClassObject
CoRegisterMessageFilter
StringFromGUID2
PropVariantClear
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
OleGetClipboard
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
ReleaseStgMedium
OleDuplicateData
CoFreeUnusedLibraries
CoInitializeEx
StringFromCLSID
CoTaskMemAlloc

oleaut32

SysFreeString
VarBstrFromDate
VariantCopy
SafeArrayDestroy
LoadTypeLi
OleCreateFontIndirect
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringByteLen
OleCreatePropertyFrame
VariantChangeType
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
VariantClear
VariantInit
SysAllocString
VarBstrCmp
SysAllocStringByteLen

oledlg

OleUIBusyW

ws2_32

WSAStartup
WSACleanup
WSASetLastError
WSAGetLastError
recvfrom
gethostbyname
accept
listen
shutdown
recv
ntohs
socket
sendto
send
select
inet_ntoa
inet_addr
htons
htonl
getsockname
getpeername
connect
closesocket
WSAAsyncSelect
bind

wininet

HttpQueryInfoW
InternetSetOptionA
InternetSetStatusCallbackW
HttpOpenRequestA
InternetQueryDataAvailable
InternetGetConnectedState
InternetReadFile
InternetCloseHandle
InternetOpenUrlW
InternetOpenA
HttpSendRequestA
InternetConnectA
InternetConnectW
HttpOpenRequestW
InternetCrackUrlW
HttpAddRequestHeadersA
InternetSetFilePointer
HttpEndRequestW
HttpSendRequestExW
HttpAddRequestHeadersW
InternetGetLastResponseInfoW
InternetWriteFile
InternetOpenW
InternetSetOptionW
InternetQueryOptionW
InternetCanonicalizeUrlW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9466999df8d48fda58478709d7b0900a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6dCertificate

Key Usages

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

39:88:0b:e0:1f:e3:71:20:ad:98:69:85:09:66:3f:92Certificate

Extended Key Usages

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dwmapi

gdiplus

uxtheme

winmm

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

ws2_32

wininet

oleacc

imm32

version

Sections

.text Size: 5.5MB - Virtual size: 5.5MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 107KB - Virtual size: 462KB

.pdata Size: 254KB - Virtual size: 253KB

.gfids Size: 112KB - Virtual size: 112KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 5KB - Virtual size: 4KB

.rsrc Size: 7.9MB - Virtual size: 7.9MB

.reloc Size: 117KB - Virtual size: 117KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
Certificate

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

39:88:0b:e0:1f:e3:71:20:ad:98:69:85:09:66:3f:92
Certificate

.text
Size: 5.5MB - Virtual size: 5.5MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 107KB - Virtual size: 462KB

.pdata
Size: 254KB - Virtual size: 253KB

.gfids
Size: 112KB - Virtual size: 112KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 7.9MB - Virtual size: 7.9MB

.reloc
Size: 117KB - Virtual size: 117KB