a12a6703b3e4f90b28591f663687a5c1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a12a6703b3e4f90b28591f663687a5c1_JaffaCakes118
Size

701KB
MD5

a12a6703b3e4f90b28591f663687a5c1
SHA1

31b25ceac6e43713bb0f5d306d62d99b40dc3f1f
SHA256

d7049a12a49f5903c4aec2d0098f03d6438b09f3d24ce8726a0bb45b7ae858a2
SHA512

a6ab3b94941e5b6c164bdf54be46d485aa3e403a731afdc980068ff31d9d1575be85163917024ac092eb0bef56d7fcdf563596b6150e4efba43894f0cc7c9c4c
SSDEEP

12288:Gaou4gq/IeCX1CL9NpJl3+CErW8H+Gz7fKuNz7RAPzbjDyOgYPwq+tCkgPgUx5bh:Au4l/FCX1CL3ldZxuN5qbHyOgwwq+tC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a12a6703b3e4f90b28591f663687a5c1_JaffaCakes118

Files

a12a6703b3e4f90b28591f663687a5c1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_002465A0_3659_449E_8880_B516FEA6B4D4
fn_007958A1_90C0_4296_920C_0A24AB3605AB
fn_00EBB344_34DF_46D9_97BA_19464ADD841A
fn_0296F2C5_19A0_4C98_A8EE_D8F78EAA7225
fn_0405CC97_BCDE_40EE_9758_6D67F1D78745
fn_051D9F16_D734_4A97_8CBF_9DDB04DB1907
fn_0881CA7E_48E5_439C_9F57_61A209F33367
fn_0954C0AF_092E_422D_92C0_CFB41B4AE0BD
fn_0A1E2E7A_B7BD_46E3_9908_50E73DCED270
fn_0A6A9F92_4990_4E51_A343_4924FD682D57
fn_0A6B5090_1B69_4D00_8DD0_37D2D5961068
fn_0C1B882D_D90B_4696_8A1E_2DB7E6A9A9AF
fn_0D5DDB6A_7258_4D64_9579_591DF6FB3DB6
fn_0EF83C9C_A586_488D_8069_E83CB269CED3
fn_1485575A_AD01_402F_8211_47FC2162935D
fn_16C1683E_1535_4BA5_82BC_84FD019A635B
fn_1718DFC7_2B27_4395_9181_052A6F3EC118
fn_1939D0E8_40DE_438C_B3E6_E05D1FF7CC9E
fn_199DC2C7_D015_49FC_9419_B4D81EFA6620
fn_19EE6DD7_F682_4E90_BA7E_8862BE7B152F
fn_1A3AB663_350A_4BE2_B162_C5AAE81DDF38
fn_1A3FB430_3063_42A9_A286_DB2B9B5684E9
fn_1A9AF6F5_BDE5_45B1_98CB_BA3826496BC3
fn_1B0CC1AE_6FBA_4F85_B8DE_1009F8ECF69F
fn_1B246B0C_43D8_4B88_B458_A73827EFA44D
fn_1C7D6827_CCD1_4F32_96BC_03CD813062C0
fn_1EC077E3_C9C9_4D3A_A5B8_5D78E80B2E93
fn_1ED8C6CF_818B_45F7_9D7B_4CBD1545B544
fn_1F48685C_4A09_4B39_A41F_DCAB7E2FA873
fn_20119C63_D70E_41ED_B6C6_76789CF56BDA
fn_20428B65_BE86_41A9_A558_6585A2D966E9
fn_2181E5F3_DA29_4EB7_BF82_1EDE9A1D21D1
fn_2270E214_CF66_4768_8C52_8FA2009CB4EE
fn_23CB0F48_AD8C_47EF_B3DD_DB4BE49148A3
fn_25BD1BB5_39FD_4DB3_8433_322500558F30
fn_26CD0171_2243_4BD1_A484_171A762616AA
fn_27697972_EB04_4750_9520_5F5CD36E4AB0
fn_2857CFAE_75D6_45CB_A2EE_FCEF82AD69F4
fn_29C2C6FF_1072_4C68_83AC_B2238D77ED28
fn_2A7E5EFC_AB80_485C_B315_1F97874745EB
fn_2AFBCD48_EF2C_4F84_A3AE_5AD1CEB7FD88
fn_2B30DC3A_EB50_4098_A25B_04A36D798D25
fn_2B57E64E_7847_4344_9ACE_01D275D7B793
fn_2B9236AC_D6A4_49B8_AC13_E41E4713F30B
fn_2C13D3CD_6DDE_4925_8C35_38B99F94AB93
fn_2C1D4982_63E0_4F0D_A517_89D2A7BF820F
fn_2E114B43_F29D_4C14_83F5_6C2674FCBE65
fn_2E2DBEA4_3EA0_42F8_8BBB_5BE355F1D994
fn_2E3C5FC4_92AB_40D6_BEA3_7AA37BFD5CB9
fn_2F29424D_A6C6_4F3B_A966_B3A27FB1B72F
fn_30AC6EEE_2268_44BE_900F_F817F5CE5C4A
fn_31BE468D_5234_4E5B_B9A9_82AEB4735AD3
fn_32480094_5374_485F_ADB1_154C6FC8C599
fn_32FA126B_7FC2_4EFF_9A36_762CDCE38AFC
fn_331FB1A5_470B_4C35_95B1_B3F282CBFA0F
fn_33DCE52C_C2FD_4F4B_BE4E_1401F7B5A27E
fn_340EA062_8089_4720_A113_3777EDB9EDBF
fn_3499D153_8B59_4483_8DB1_9DE4557AB562
fn_3536E975_253F_4CC2_A64F_1338D29557AD
fn_357BA036_6291_42D3_A4E8_E633C9565241
fn_35AA6B9B_15BA_47BC_9AB1_51D25DBB5DFA
fn_38F8CE91_A239_45DE_BF4A_7D4048AE847B
fn_3982A909_11A0_419B_9BCE_EC086F1B4DC5
fn_39A3BA7F_44FA_455B_A991_D954019E3F74
fn_3BFD9C4C_2717_4BFE_A402_6941AC25BA9E
fn_3C48A0E7_5F4A_4B3A_86E0_75B0CD2DF789
fn_3CD8CB71_BD88_4AFB_9548_2CC26E3E861E
fn_3CE1B5AC_B7CC_412D_B114_8A3969638B0A
fn_3D0FDBCF_7373_4F4C_93BB_9668FEB4B6D8
fn_3D5FB924_2CDA_45F2_9D17_6A93E415A60D
fn_3D64DD5F_3600_459D_A960_68B56B1690A5
fn_3D99BB19_C706_43A2_8CF9_3642A70B4221
fn_3E1D2DB8_042F_45AF_A932_8482070FA8A2
fn_3E230382_3E6C_4E25_B1F2_1E457B1EF6D2
fn_3EB59E69_3241_437A_A67C_0D868812D861
fn_3EC55326_6990_4829_BADA_27F88448304D
fn_3EC5DD07_8791_4ACD_886E_FFDCF2C7F7F7
fn_4045ECF5_E924_48D1_AE01_5546276E8E99
fn_40F08017_3200_4F7E_B2AE_AC5C82A918DD
fn_41E025B0_2ECA_40D1_B012_7AC59C5D56D1
fn_4222E91E_FDDF_4C57_97DB_BBDEC81921F8
fn_4241F156_D12F_4882_9499_A7A8A64D95D4
fn_4362A062_A1A2_424B_A795_DF330AD81ED9
fn_4421298A_7E8E_4A37_965E_99EC7679692E
fn_448C47A5_16B9_4D9A_82C4_BF798FBE7227
fn_44E8CB4E_ED55_4140_BF1E_4648D39BBAD8
fn_4599DD68_4A4F_4F21_A4BB_3FB5245CF4E1
fn_45C47A94_82A0_4E5A_8A7C_A4C3C3316FB6
fn_46450352_5E02_47A3_89A4_48F9F8CE5596
fn_491F3C97_71DA_4A95_8F90_29FE38AFD3A2
fn_4CF93681_5B87_405C_AAC5_55162C0602E0
fn_4D9432DE_03DB_4FA0_BE3E_4AAEB9A231F9
fn_4DC926D7_F8EB_45E2_8A6A_7F9EEB70AE03
fn_4E80C2E6_2F08_450B_A1BB_C60789E8499C
fn_4E866143_E7B2_4216_947D_C021D2B24BB9
fn_4F0007BC_CE60_4588_8E66_EF3C77C02692
fn_4F468459_3CCD_49BB_A079_613C959C2CCE
fn_501203E6_0935_4D70_9E46_2CD4ED8D8FF8
fn_50CE7D72_45FA_46F9_8C7C_1267730B484F
fn_5211A8DC_1C11_4E4F_9784_1F0EE08CDFA2
fn_52939A0B_DEE1_4732_B653_64CECF6A1EA3
fn_53679AF1_2933_4C05_B5A3_46C71970BD17
fn_5517731E_F709_4D81_B52E_7EE32918FF86
fn_5560C2EB_8AC8_42AA_AECE_CB621FC69E68
fn_5723800B_291F_4C71_A96B_EB2249CE5F93
fn_5765676C_0B7B_4668_BAC8_2F168511E957
fn_57BA0306_E426_4E50_8F4F_A4C42B6842F7
fn_599C1208_E49F_43F7_B258_C76E857C44FA
fn_5A630147_FB2D_4875_9E34_0DD7CC028AF4
fn_5A6DB136_BB13_42B1_9F7F_0E3C10601658
fn_5C6515FF_08D2_41C8_BA92_EAEA2634B71B
fn_5E02EC68_61E1_40FB_9AD6_5AB371E76517
fn_5E4C65A1_96A2_4597_ABDD_00EDD4709DEF
fn_5E75C784_E61C_46A4_A842_C6814880A853
fn_5F1B20BA_F064_4A04_A176_F476CB029D6C
fn_5FE773BC_8481_450C_8A15_6003F4A38C96
fn_61214D3C_9E22_46E5_A9B2_4A6EDC1EF06C
fn_62B47B86_5F0F_456E_AAA6_228B61F95B1F
fn_62FCAAD9_A303_45F6_8BE9_521E86B4868C
fn_63298933_8313_442F_83A4_C0BA14651FCF
fn_6358E93C_0AA1_439A_B074_016EFBC006A5
fn_642C183E_D654_46BC_B43C_D4F4BD9303F7
fn_6497156F_477A_4E2B_ACE5_E053E02FF9B7
fn_657928BF_954B_4B42_AB0C_0CA780E0803D
fn_6597C53C_A961_4209_A4C5_5800EC0A2D95
fn_66CDFEF8_BBEC_410D_AE22_81393F56B8DC
fn_69238FE2_3557_4F82_A018_FFCC0F2677C7
fn_6B397E3B_ED49_46EF_BC12_BDB5CE93A193
fn_6CB40A31_1966_4A47_B66C_23C280A5166D
fn_6D7E199A_77CA_4D73_814A_EFC70B526421
fn_6E3C048D_8241_4504_A8AA_1C857CDB8CFA
fn_6F6A58CD_CCAF_4501_A896_AC39365DAB1B
fn_70BBBD0B_CDF1_426B_A158_4DC9C822F209
fn_71F08787_A458_482C_A09C_BDF8DEE2A6C5
fn_72A9A048_E970_45A1_B18E_6A819235EA85
fn_72BFEBCC_E970_4B4F_85EE_A2C8C9CA2970
fn_72EA68BA_0456_4C1D_B4CC_7A266D652E92
fn_7358B8FF_6256_4C09_AC94_669A809E45C7
fn_7467E54C_9197_4D2B_8358_B76046D28F61
fn_75CF7FCE_0827_4A8E_A3FC_48F5EFBB41A2
fn_765028D5_CCEC_45F3_A24E_AD5CE76CEF00
fn_773EE2C5_F1E1_49F6_9CDF_C69220A82B45
fn_7B315015_37C6_40C6_8768_541D2ADC72A0
fn_7B81D9F6_0A88_436B_BF5C_9FD9E70E5322
fn_7D65830D_3D25_413C_9C99_5116F25B3397
fn_7F28DEE8_5766_4247_A0A6_1F3103049CB8
fn_81058020_73E1_4DED_91F5_EDC5127FB572
fn_837FD32E_8BE8_43B2_BCDA_E442CF33E7A0
fn_85823A8A_6C8E_4646_BB0D_435518CBC6E3
fn_88658445_F693_4D40_8FFB_CC7EAF5E3599
fn_8AF7D645_A765_4528_A755_098DC3499A76
fn_8B6A6AA8_DE22_4AEE_AF8B_C9438C7D745C
fn_8E1B1347_8504_49E7_B489_16C43674F3CA
fn_8E3F4C95_56F8_407D_B7FC_5161EDED83B2
fn_8E72A734_AA7A_466E_9A16_2736CA942F8F
fn_8F4FA7EE_E98C_4B0F_B535_4936693D1FB0
fn_93A1F9C0_F6B2_4DFC_A1D5_8AFAD915AE05
fn_93B8FBC1_6BC6_4496_845C_227FF156BB70
fn_958DEBBC_1AD0_4A6D_87B2_8301EA5E1796
fn_9594E035_5A3E_4057_B622_01033963D287
fn_95CFD7C2_F619_4788_BF35_499AE66C41DE
fn_96D95A26_7120_4404_8D87_3E55D5B277A7
fn_99393E2B_E4B1_4890_A7ED_9B581A904C05
fn_99AD5D25_0858_4D85_A6B2_A6E2F68353C0
fn_99BB16B0_0CF9_4602_845E_83D9FB46BCC3
fn_99BE2783_5A90_4BDF_AA2D_58D190E0B4FC
fn_9C26EA94_05F9_487B_97EF_1AA20AE5050D
fn_9DDFBAF2_4B20_4068_A2C0_F5B5518DDBB3
fn_A080BEEC_5195_4019_90DC_374B0318F3C0
fn_A168035D_F8B8_4B85_914A_D027F6CCC752
fn_A1F8377F_9487_4740_8ACD_AEE2B023977F
fn_A23AC250_A807_489C_8DAB_ED0811AA1836
fn_A268C663_094B_485A_9454_CEBFCD250908
fn_A40E3DA2_75E6_4D09_ADB9_30DB23D9DA6C
fn_A5BE569C_8111_4F77_AE9C_0317C426A3B6
fn_A707AF4A_D65B_44AF_A0AD_40CD317B4004
fn_ABA84D51_F745_4A06_AE2E_C9FD3B2E6838
fn_ABFE6AA2_498C_4D7C_B6B6_719BE187136E
fn_ACBA57D8_DDC5_4382_AA30_D9C05EE1F359
fn_ADF7FB7D_9E72_45C1_803C_9B9DAEE8C099
fn_AEC49D31_A91C_47DA_9EC9_CDE7A932253E
fn_B03E4CD9_1EB1_4490_AEBE_0D50397B9889
fn_B1641831_CD2B_4C64_A6E0_A77F3A8C7573
fn_B1FDDCD0_C76D_4773_86C3_00BAE9339AB7
fn_B2446EA3_7A68_47DB_B073_B54C829AFCE5
fn_B4251180_6DF7_436F_B8FA_260565A448D9
fn_B571177C_A88E_4EF8_8E46_29CDD901ED54
fn_B5942C2A_B678_4195_B9EC_377F67BAEF63
fn_B6EB924A_3163_4F16_A11E_704B77EEB27F
fn_B71AD73C_4BD1_49E2_BDA1_387FCCD3BB85
fn_B78C1BD6_6AEB_46C9_9668_072A0B5E54E8
fn_B7AFFD7B_CE0F_4257_BDDB_A6782FEB854E
fn_B8E1F981_F5BB_4D3E_A52A_EE29421033DB
fn_B92FB92B_A7AE_4537_94AE_19B1999E8B4A
fn_BAB10334_6632_4CAF_AF89_93B33F239BE6
fn_BE57F3A2_4FB7_422D_9110_EA2DAD0CA0E4
fn_BFAD6DD0_6E76_4C85_AB2C_2CBC555F39C4
fn_BFB04F0C_0B63_403A_8105_7D55A4F7CB01
fn_C0C4D8DE_E886_4DAA_847A_DB6FC2B0A963
fn_C1B58B86_0A01_4EC3_8A88_6C9FD23B0DFD
fn_C1D2D755_F595_46E0_90F7_A0870685BA96
fn_C233F55A_218A_4B8E_858F_29A1A2D6ACA0
fn_C2F26667_8B64_4C8A_B6A4_0EC748C93DB9
fn_C3911CE9_5881_45E1_BDC9_387B27748AFE
fn_C40523D1_4EB6_4791_9137_DC7ADBDFCB68
fn_C4D2914A_C40D_42CF_9788_595C12C9BE43
fn_C97222F6_C058_4C28_AA3F_9C6B6DCCBBDA
fn_C9D6D6C1_A1CB_4E5C_870F_F238F99C0242
fn_CB5028CB_78ED_4734_B37B_F0755D90796F
fn_CC35D9E3_3DD4_4C06_B011_69E752BC3E81
fn_CC87F88C_ABEE_46F9_B128_F0B1CDE4D995
fn_CD9DAAE9_79AA_4B63_90F3_A618349C7C45
fn_D05F7DC1_9644_46BA_A5FA_05733C19DBC2
fn_D2AD41E8_8A40_4AF8_ADBA_9154DF3D44C5
fn_D5F17113_CC58_462A_A45C_804D82CAC030
fn_D89E4F5F_3082_4127_8DBC_CA995E69437F
fn_D8E36C5F_72A7_48AB_9CF6_06650806E04C
fn_D8EDFB80_B4EF_4553_AD4E_F1176934B7BE
fn_DDB3A777_DE75_4F7B_9465_85AA7DA8001B
fn_DED997BC_BF2A_472E_9A01_B17B8EC30C6B
fn_E1457FFC_F5DB_441B_91F4_4B58516939D7
fn_E1C8E76C_9051_4AB9_9717_0409CC55298C
fn_E1DBA741_BE6D_4804_B69C_BBE8CF8BF330
fn_E1EBB6F2_437B_4366_8557_A77C626E0853
fn_E2F0827F_51BF_4777_BAE0_5DE98681B341
fn_E432CEFE_CA4F_46E6_9A8A_5EB8336D1CE4
fn_E4EA86E8_F915_4E3F_9FA2_98C128C0689D
fn_E60C4051_C4A9_48D8_85D3_669493553198
fn_E8FDD5E4_227A_41F1_A8A1_9F14BF29B6D9
fn_EADBBF8E_F661_44C7_A50F_F9727C4899D3
fn_EB66007E_F900_435E_9CE2_2E3B5B79F356
fn_ED54BD12_789D_4E83_A060_AB86F9A44C57
fn_EDD8D314_B3F7_4856_87D7_6AFA71C140D3
fn_EE638AA1_AEB7_4754_96B9_CF2C9073018C
fn_EE8B4E81_8CB9_4742_9500_4C259035E93C
fn_EE9F762C_7181_427E_A2ED_C207FB7C56DE
fn_EFFEA463_1072_4BEF_A473_8C01106046B0
fn_F25D2FEC_3D43_4B5A_99BB_F8453E47495A
fn_F2EAF988_61F3_4CC5_AA38_546CFC74171A
fn_F32CAE2C_EA20_4526_B36C_2FD2237FC061
fn_F4236A18_6717_406D_A1D0_CA050EEEE69F
fn_F4580560_3831_4409_A868_65BA733ECBB6
fn_F4F2A9A1_EA27_4E71_9D36_D291337A311D
fn_F5D33A5A_9A26_42AF_8A1E_7123430AEFC8
fn_F5EA3A12_4EC7_46F9_88FD_987A09685CF1
fn_F7CD023A_1A98_4434_BC7A_C69F344A9999
fn_F7F62D56_AB99_4B77_AA62_EC44240069EE
fn_F8CEB4D6_B755_4911_8F49_129F98678878
fn_FAEBBE7F_3A39_4DFA_A699_E61E64F49377
fn_FCB9CF4E_E6C4_4BED_88FB_0B56C293EAB9
fn_FD1C3446_52A3_45D5_BE07_2F20A7388E46
fn_FE0B6359_0679_432E_84E0_08C97AE41381
fn_FEC239B5_B89C_44FB_9E53_1142A414BFBD

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 33KB - Virtual size: 33KB