a3bd5ad743c0ae67900d94243ffd1284_JaffaCakes118

resource	yara_rule
static1/unpack001/EXE Packer/bin/upx.exe	upx

resource	yara_rule
static1/unpack001/123.exe	autoit_exe

resource
unpack001/123.exe
unpack001/EXE Packer/ExePacker.exe
unpack001/EXE Packer/UnInstCleanup.exe
unpack001/EXE Packer/bin/upx.exe
unpack001/EXE Packer/unins000.exe

SHA256 0cc7c07d738b1bda874d00025221723e70d57327834708a8a3b59841fa0750e9
MD5 a3bd5ad743c0ae67900d94243ffd1284
SHA1 f505c157245f39f2da765858b0edc0032fe75cbc
SHA512 5a4adb552abb67f308c58cd4c03b08ba1842f9e061ea1fe2632829f8cad7f8118c7a0845145384af0ab2bea4ef686f5a46426450be65625cdfa13d99b4a3d300
SSDEEP 49152:BxYO/fSw+GEIwHxDOhju2MKk+V5EswG4Wy:BxYKSw+CwHxD+xkYEs14z
MD5 SHA1 SHA512 SSDEEP

123.exe

IMPHASH eb97e4fc5518ac300a92a11673825e0b
SHA256 91684247afee1e61f2cbaf80bbcb3a4fc9474bd3f61e2fac5a4d8270489bf311
MD5 c7ec0a4325030a4525625622e33c99a8
SHA1 760306cdf30e411735563c0ac3653139f3403bb9
SHA512 3ed3fc84e86a17537940908389a97c98de7cdf82d066d834c34be9808121704272953c1635b5a0cec72174eb5c17a3207072543d99b562944aed18741bb4a0c6
SSDEEP 12288:VCdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBgalT+9Q:VCdxte/80jYLT3U1jfsWaR+9Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

AutoIT Executable

AutoIT scripts compiled to PE executables.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

163658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

WSACleanup socket inet_ntoa setsockopt ntohs recvfrom ioctlsocket htons WSAStartup __WSAFDIsSet select accept listen bind closesocket WSAGetLastError recv sendto send inet_addr gethostbyname gethostname connect

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

winmm

timeGetTime waveOutSetVolume mciSendStringW

comctl32

ImageList_ReplaceIcon ImageList_Destroy ImageList_Remove ImageList_SetDragCursorImage ImageList_BeginDrag ImageList_DragEnter ImageList_DragLeave ImageList_EndDrag ImageList_DragMove InitCommonControlsEx ImageList_Create

mpr

WNetUseConnectionW WNetCancelConnection2W WNetGetConnectionW WNetAddConnection2W

wininet

InternetQueryDataAvailable InternetCloseHandle InternetOpenW InternetSetOptionW InternetCrackUrlW HttpQueryInfoW InternetQueryOptionW HttpOpenRequestW HttpSendRequestW FtpOpenFileW FtpGetFileSize InternetOpenUrlW InternetReadFile InternetConnectW

psapi

GetProcessMemoryInfo

iphlpapi

IcmpCreateFile IcmpCloseHandle IcmpSendEcho

userenv

DestroyEnvironmentBlock UnloadUserProfile CreateEnvironmentBlock LoadUserProfileW

uxtheme

IsThemeActive

kernel32

DuplicateHandle CreateThread WaitForSingleObject HeapAlloc GetProcessHeap HeapFree Sleep GetCurrentThreadId MultiByteToWideChar MulDiv GetVersionExW IsWow64Process GetSystemInfo FreeLibrary LoadLibraryA GetProcAddress SetErrorMode GetModuleFileNameW WideCharToMultiByte lstrcpyW lstrlenW GetModuleHandleW QueryPerformanceCounter VirtualFreeEx OpenProcess VirtualAllocEx WriteProcessMemory ReadProcessMemory CreateFileW SetFilePointerEx SetEndOfFile ReadFile WriteFile FlushFileBuffers TerminateProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW SetFileTime GetFileAttributesW FindFirstFileW SetCurrentDirectoryW GetLongPathNameW GetShortPathNameW DeleteFileW FindNextFileW CopyFileExW MoveFileW CreateDirectoryW RemoveDirectoryW SetSystemPowerState QueryPerformanceFrequency FindResourceW LoadResource LockResource SizeofResource EnumResourceNamesW OutputDebugStringW GetTempPathW GetTempFileNameW DeviceIoControl GetLocalTime CompareStringW GetCurrentProcess EnterCriticalSection LeaveCriticalSection GetStdHandle CreatePipe InterlockedExchange TerminateThread LoadLibraryExW FindResourceExW CopyFileW VirtualFree FormatMessageW GetExitCodeProcess GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileSectionW WritePrivateProfileSectionW GetPrivateProfileSectionNamesW FileTimeToLocalFileTime FileTimeToSystemTime SystemTimeToFileTime LocalFileTimeToFileTime GetDriveTypeW GetDiskFreeSpaceExW GetDiskFreeSpaceW GetVolumeInformationW SetVolumeLabelW CreateHardLinkW SetFileAttributesW CreateEventW SetEvent GetEnvironmentVariableW SetEnvironmentVariableW GlobalLock GlobalUnlock GlobalAlloc GetFileSize GlobalFree GlobalMemoryStatusEx Beep GetSystemDirectoryW HeapReAlloc HeapSize GetComputerNameW GetWindowsDirectoryW GetCurrentProcessId GetProcessIoCounters CreateProcessW GetProcessId SetPriorityClass LoadLibraryW VirtualAlloc IsDebuggerPresent GetCurrentDirectoryW lstrcmpiW DecodePointer GetLastError RaiseException InitializeCriticalSectionAndSpinCount DeleteCriticalSection InterlockedDecrement InterlockedIncrement GetCurrentThread CloseHandle GetFullPathNameW EncodePointer ExitProcess GetModuleHandleExW ExitThread GetSystemTimeAsFileTime ResumeThread GetCommandLineW IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetStringTypeW SetStdHandle GetFileType GetConsoleCP GetConsoleMode RtlUnwind ReadConsoleW GetTimeZoneInformation GetDateFormatW GetTimeFormatW LCMapStringW GetEnvironmentStringsW FreeEnvironmentStringsW WriteConsoleW FindClose SetEnvironmentVariableA

user32

AdjustWindowRectEx CopyImage SetWindowPos GetCursorInfo RegisterHotKey ClientToScreen GetKeyboardLayoutNameW IsCharAlphaW IsCharAlphaNumericW IsCharLowerW IsCharUpperW GetMenuStringW GetSubMenu GetCaretPos IsZoomed MonitorFromPoint GetMonitorInfoW SetWindowLongW SetLayeredWindowAttributes FlashWindow GetClassLongW TranslateAcceleratorW IsDialogMessageW GetSysColor InflateRect DrawFocusRect DrawTextW FrameRect DrawFrameControl FillRect PtInRect DestroyAcceleratorTable CreateAcceleratorTableW SetCursor GetWindowDC GetSystemMetrics GetActiveWindow CharNextW wsprintfW RedrawWindow DrawMenuBar DestroyMenu SetMenu GetWindowTextLengthW CreateMenu IsDlgButtonChecked DefDlgProcW CallWindowProcW ReleaseCapture SetCapture CreateIconFromResourceEx mouse_event ExitWindowsEx SetActiveWindow FindWindowExW EnumThreadWindows SetMenuDefaultItem InsertMenuItemW IsMenu TrackPopupMenuEx GetCursorPos DeleteMenu SetRect GetMenuItemID GetMenuItemCount SetMenuItemInfoW GetMenuItemInfoW SetForegroundWindow IsIconic FindWindowW MonitorFromRect keybd_event SendInput GetAsyncKeyState SetKeyboardState GetKeyboardState GetKeyState VkKeyScanW LoadStringW DialogBoxParamW MessageBeep EndDialog SendDlgItemMessageW GetDlgItem SetWindowTextW CopyRect ReleaseDC GetDC EndPaint BeginPaint GetClientRect GetMenu DestroyWindow EnumWindows GetDesktopWindow IsWindow IsWindowEnabled IsWindowVisible EnableWindow InvalidateRect GetWindowLongW GetWindowThreadProcessId AttachThreadInput GetFocus GetWindowTextW ScreenToClient SendMessageTimeoutW EnumChildWindows CharUpperBuffW GetParent GetDlgCtrlID SendMessageW MapVirtualKeyW PostMessageW GetWindowRect SetUserObjectSecurity CloseDesktop CloseWindowStation OpenDesktopW SetProcessWindowStation GetProcessWindowStation OpenWindowStationW GetUserObjectSecurity MessageBoxW DefWindowProcW SetClipboardData EmptyClipboard CountClipboardFormats CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard BlockInput GetMessageW LockWindowUpdate DispatchMessageW TranslateMessage PeekMessageW UnregisterHotKey CheckMenuRadioItem CharLowerBuffW MoveWindow SetFocus PostQuitMessage KillTimer CreatePopupMenu RegisterWindowMessageW SetTimer ShowWindow CreateWindowExW RegisterClassExW LoadIconW LoadCursorW GetSysColorBrush GetForegroundWindow MessageBoxA DestroyIcon SystemParametersInfoW LoadImageW GetClassNameW

gdi32

StrokePath DeleteObject GetTextExtentPoint32W ExtCreatePen GetDeviceCaps EndPath SetPixel CloseFigure CreateCompatibleBitmap CreateCompatibleDC SelectObject StretchBlt GetDIBits LineTo AngleArc MoveToEx Ellipse DeleteDC GetPixel CreateDCW GetStockObject GetTextFaceW CreateFontW SetTextColor PolyDraw BeginPath Rectangle SetViewportOrgEx GetObjectW SetBkMode RoundRect SetBkColor CreatePen CreateSolidBrush StrokeAndFillPath

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

GetAce RegEnumValueW RegDeleteValueW RegDeleteKeyW RegEnumKeyExW RegSetValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegConnectRegistryW InitializeSecurityDescriptor InitializeAcl AdjustTokenPrivileges OpenThreadToken OpenProcessToken LookupPrivilegeValueW DuplicateTokenEx CreateProcessAsUserW CreateProcessWithLogonW GetLengthSid CopySid LogonUserW AllocateAndInitializeSid CheckTokenMembership RegCreateKeyExW FreeSid GetTokenInformation GetSecurityDescriptorDacl GetAclInformation AddAce SetSecurityDescriptorDacl GetUserNameW InitiateSystemShutdownExW

shell32

DragQueryPoint ShellExecuteExW DragQueryFileW SHEmptyRecycleBinW SHGetPathFromIDListW SHBrowseForFolderW SHCreateShellItem SHGetDesktopFolder SHGetSpecialFolderLocation SHGetFolderPathW SHFileOperationW ExtractIconExW Shell_NotifyIconW ShellExecuteW DragFinish

ole32

CoTaskMemAlloc CoTaskMemFree CLSIDFromString ProgIDFromCLSID CLSIDFromProgID OleSetMenuDescriptor MkParseDisplayName OleSetContainedObject CoCreateInstance IIDFromString StringFromGUID2 CreateStreamOnHGlobal OleInitialize OleUninitialize CoInitialize CoUninitialize GetRunningObjectTable CoGetInstanceFromFile CoGetObject CoSetProxyBlanket CoCreateInstanceEx CoInitializeSecurity

oleaut32

LoadTypeLibEx VariantCopyInd SysReAllocString SysFreeString SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnaccessData SafeArrayAccessData SafeArrayAllocData SafeArrayAllocDescriptorEx SafeArrayCreateVector RegisterTypeLi CreateStdDispatch DispCallFunc VariantChangeType SysStringLen VariantTimeToSystemTime VarR8FromDec SafeArrayGetVartype VariantCopy VariantClear OleLoadPicture QueryPathOfRegTypeLi RegisterTypeLibForUser UnRegisterTypeLibForUser UnRegisterTypeLi CreateDispTypeInfo SysAllocString VariantInit

EXE Packer/Alternate EXE Packer.lnk

SHA256 202884eaead9b559788d265a205126f84d5ecd261d5f1fefcd0ad85a51562952
MD5 2083f9fcb02e7bc2161c80e60d8aed6a
SHA1 00b3c594a4ac35a99355a9aec15ef2a5ec358748
SHA512 0a62e833a909c1ecda7853d2bb3157ec20fe0daf3796e01272e3a6aee28c1e419ee8976f085f7424dcb9188648e517047ac4b504ab0e9427c59ec92bd453c492
MD5 SHA1 SHA512

EXE Packer/ExePacker.exe

IMPHASH 5a761889f8d20a9d1f324e6d660839b0
SHA256 41c23c2c0f8d1890a6c243c46dd95128610ee7a260d533692db7a482404934f0
MD5 cc53c14d2cdc49bfd255a1bae4bb7ca7
SHA1 5c1d429c05327bca2b5ae7dfe5fa44c69d906193
SHA512 77acfe4c7292f528b2d95c14bfefb0d36c6fe1972c1b0f748c11d66fafff3a1785cf10e736346e36c744acde400fd07932287ed7050bba7977e327a43751821c
SSDEEP 12288:gAvPxbqO7WEb7Ye1dqiQWBDxGG4FqQGhAp/5PS4vmL2GAZxSBJ+XxO4gWqow2Qw4:gmkNSbFbQGmbZOL2HxSmi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateEventA CreateFileA CreateThread DeleteCriticalSection DeleteFileA EnterCriticalSection EnumCalendarInfoA ExitProcess FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileA FindNextFileA FindResourceA FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetDiskFreeSpaceA GetDriveTypeA GetEnvironmentStrings GetFileAttributesA GetFileSize GetFileType GetFullPathNameA GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetSystemInfo GetThreadLocale GetTickCount GetUserDefaultLCID GetVersion GetVersionExA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedExchange InterlockedIncrement IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadResource LocalAlloc LocalFree LockResource MulDiv MultiByteToWideChar RaiseException ReadFile RtlUnwind SetConsoleCtrlHandler SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetErrorMode SetEvent SetFilePointer SetHandleCount SetLastError SetThreadLocale SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpA lstrcpyA lstrcpynA lstrlenA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

comctl32

ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetIconSize ImageList_Write ord17 ImageList_DrawEx

comdlg32

GetOpenFileNameA

gdi32

BitBlt CombineRgn CopyEnhMetaFileA CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateDIBitmap CreateFontIndirectA CreateHalftonePalette CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject ExcludeClipRect ExtTextOutA GdiFlush GetBitmapBits GetBrushOrgEx GetClipBox GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetObjectA GetPaletteEntries GetPixel GetRgnBox GetStockObject GetSystemPaletteEntries GetTextExtentPoint32A GetTextMetricsA GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt PlayEnhMetaFile Polyline RealizePalette RectVisible Rectangle RestoreDC SaveDC SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetEnhMetaFileBits SetPixel SetROP2 SetStretchBltMode SetTextColor SetViewportOrgEx SetWinMetaFileBits SetWindowOrgEx StretchBlt UnrealizeObject

shell32

DragAcceptFiles DragQueryFileA SHFileOperationA ShellExecuteA ShellExecuteExA

shfolder

SHGetFolderPathA

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginPaint CallNextHookEx CallWindowProcA CharLowerA CharLowerBuffA CharNextA CheckMenuItem ChildWindowFromPoint ClientToScreen CreateIcon CreateMenu CreatePopupMenu CreateWindowExA DefFrameProcA DefMDIChildProcA DefWindowProcA DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextA EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumThreadWindows EnumWindows EqualRect FillRect FindWindowA FrameRect GetActiveWindow GetCapture GetClassInfoA GetClassNameA GetClientRect GetClipboardData GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgItem GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardState GetKeyboardType GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuState GetMenuStringA GetMessagePos GetParent GetPropA GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowPlacement GetWindowRect GetWindowTextA GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemA IntersectRect InvalidateRect IsChild IsDialogMessageA IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadKeyboardLayoutA LoadStringA MapVirtualKeyA MapWindowPoints MessageBoxA OemToCharA OffsetRect PeekMessageA PostMessageA PostQuitMessage PtInRect RedrawWindow RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow SendMessageA SetActiveWindow SetCapture SetClassLongA SetCursor SetFocus SetForegroundWindow SetMenu SetMenuItemInfoA SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowPlacement SetWindowPos SetWindowTextA SetWindowsHookExA ShowCursor ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassA UpdateWindow WaitMessage WinHelpA WindowFromPoint wsprintfA GetSystemMenu

ole32

IsEqualGUID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen SysStringLen VariantChangeTypeEx VariantClear VariantCopyInd

Name

.text

Size

592KB

Virtual Size

592KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

51KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

515KB

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

35KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

EXE Packer/ExePacker_English.chm

SHA256 20f742d3174690dadbf9e4a5f929a892dda9e6f6a169209038cdf6ad6afb43c2
MD5 f877ccebb506bf97636d2081d0f31d96
SHA1 6b6e7a063a48c4973ba46475fefb315973d5370f
SHA512 b6aa137368613c829dad69a825255357f07980479e6e6e7e3cff9ca1c3b341200977adad9cb4022c298d0e470b5142d5a5cb6b9574d9d914d46c6016c2f4fff0
SSDEEP 384:1tjlYYdU7U2XJ5f1/m92/M2nAhBwmCNVdoNfcig9tufBxZKl6rf34FDa4MvCA/H:1t+b7U2ZW96AMfufnZgUv4Fm4Mvl/H
MD5 SHA1 SHA512 SSDEEP

EXE Packer/ExePacker_German.chm

SHA256 59b4ba429d2aae8c5e8b7e5007429599ca285a80f4c8dbbda7d28d1fa5b95bcf
MD5 d332f8142b3b87fd0e317ba367c57bdf
SHA1 93a2e1fe1fd21e8d0af6eb40ed7f2bde3c37f0a4
SHA512 6d09b61f281d76c95bac26e4b5e0d3e9770540222164c3231b79fa7a462b198285cb52ec92e838a57871dc057a1db588b366c883f85ef7e3178a1e571428f22c
SSDEEP 384:OXPLu3FDgHKJgJcVM+4XbJN00OSDxOaK20AgZ9ydnlGRhEMqK8Bk2LZG7YLx95qO:OXSaKE3160IDvAgCl+hEMHAPZG7MD
MD5 SHA1 SHA512 SSDEEP

EXE Packer/ExePacker_Greek.chm

SHA256 67aad777b314156d1a177910abd4f171b13f042d649419d8bce8c3c992cf6464
MD5 6d5c49395a79091b1ef1f5a6a65b33ee
SHA1 53f32b62d3bf706ec975fe768e23429fce857b15
SHA512 4a06b1c4777aad31d868c3e205f95d4115d9e78123eeedf0f11e370b903ad00c0927a60080cb755139d4ad669aaf5437f4073c45eee750dde24ce4684c6631cd
SSDEEP 768:Sc32L1083EHRJJbiWNeFTW5spqQhdD0PWIA:Sc32283EH5i3FCsBhdD3IA
MD5 SHA1 SHA512 SSDEEP

EXE Packer/ExePacker_Japanese.chm

SHA256 4ba30a6e9063ebee811e9273c91a4ec66640f268ffc386a13d8cf748256f6bf1
MD5 3e9cfb9e17f647b6bc0eaf4fbee53639
SHA1 f5ea1d10dc5d9005d5cc51c75a2933dc7f5bbed7
SHA512 173720a6023fde8eefd39e372f8ae16594864f7d34b2b36e8962f4d79c4b8562b822cd21e94f539fc4e8d57f8e49bb5d452ee81ccb9562c909133c61ec571326
SSDEEP 384:sgUsf7QtGzxWf+6JJZON3B767F/69iaDZLNghZgZAQSf4oI725ioc:sghf74OWf+UKTc6YQBNghZgMhIie
MD5 SHA1 SHA512 SSDEEP

EXE Packer/ExePacker_Languages.ini

SHA256 852c919c98d3145f35b196787578d45315ef74129abd76e6c68806f73931af30
MD5 ec56bd2f2ff161b6ec865f55da9a99da
SHA1 ec7f3909dabded45bd416aa57b09fcd1ee162a25
SHA512 dd83009be344ada347d9f12a0216377525059ab33cfeab5e2a0a3298865ae1983f8b63200c2c6821dbafa7402b9c25ab8b3da13a89a196afe2245016f5c50b35
MD5 SHA1 SHA512

EXE Packer/ExePacker_License.txt

SHA256 2dc9c337f66b850e92cdd1f2b2d068481970dba5f8f1d2e1c26b64d0740e3449
MD5 66295a73addd6eb273d1465bb2edb16b
SHA1 03dd6076268aae9b40d499e9ce8d746e64e12807
SHA512 043f2645a1221a0701b8e57246b8a5e72b747c2208707cf1bebc00b0434b5bb87cb7cd3d6c03d301a2b854bc33a7a70cd8ece77d5c9eaf85d395069b261382ff
MD5 SHA1 SHA512

EXE Packer/ExePacker_ReadMe.txt

SHA256 f0a13f1d99ea7686d7ac04388a8ed513c7df37d97eed2baf3ee82dc43ea35d14
MD5 0a8b3288282e8f466562a553a7a0c5bc
SHA1 41b51d59ee25b30128c5efb9a26ea0e271093248
SHA512 ee2d3c6406e9d6e06878fbf518959252b1e40bba6006840b2e8dc807724abe2477d86822b6550c1877976b688211e09a2c5f73f0d4dcb716bf88b46c7bf9304f
MD5 SHA1 SHA512

EXE Packer/ExePacker_Russian.chm

SHA256 562531cede4df9c3826c2c2229a5fe391605a59389561d45d18af9d7c63200c3
MD5 12b7945c57fa078417f2ba70c3cf6676
SHA1 391e1c48a831ceaf540d0ba7f7f36e4e6ecd7b0d
SHA512 c0e917a9183ac3d97e94f8743acd9a4e1772fbbc7f4b969a40f7190dab84824a4157e29edb61cdb77adbf5679776523d6eab2de6d6d4cb838bd4934a7945c152
SSDEEP 768:Pctx1nfC2hMHuRsVk6Ba4X3pkLSmAqGTrgZ5dQmL:PcDRKcMOSks3i+mAbQZ5bL
MD5 SHA1 SHA512 SSDEEP

EXE Packer/LangExePacker_Arabic.ini

SHA256 a3d4988720297d919038c58e312f716f8da452219aa2177cef7c26bae9e8efc1
MD5 a239dc65c09a0241ff0ef8b765e56fe5
SHA1 6446603a2457ea8b57c6666ee3b6a06e5a7a7ffc
SHA512 6316ce9c8e96ad1757e634db2bfc11ae3da5bcda1afe5d14e1dbd3b439bfd78a56c26d0cc49b80b434ba97bd0962be776626d7bb72fa8efd3cb9214614802449
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Chinese.ini

SHA256 62d7606881fed8e1083a734f9ed5ecda83af6570c6d59dbf0721b9394f7ed805
MD5 997b9528079f7f4d24474fc82e0de268
SHA1 cbf630bd874dba38ae08dceff92edf124b56f45e
SHA512 a2d32708d9f3201c9e5c227ced7fc4b4c61bf1fa49670f0bf1c94279666716b01302683f4174ce767b447d23293cfe02618bb8577453d0a36fd689dca63a2659
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Danish.ini

SHA256 da8c0f6f1d33f2f54cca0758b8270b5cdabc12c1084f28d53eb832d2dd22c470
MD5 137e82b0fd7cf516ade6c6bab75355cf
SHA1 77270b73599a33fc2579557d641eb34d51b3c21e
SHA512 ee593e2bb33e51bb1e97a8ed7f71c0f95becec0b95b43e6f30596fb9130f8489fa324cb56e0a418ce3c402b7ff36b0eab5c81a68cdf8f819bc383f4f82d7cbb9
MD5 SHA1 SHA512

EXE Packer/LangExePacker_English.ini

SHA256 7aa87a59b821769e21fe9d27c173b9668078c00657e53007d7050890ee6b7192
MD5 d7f5e9f1a855a22915db77ab915afc51
SHA1 c9df3ba260c911d41ba13f4492b1a52ea4a0a429
SHA512 4cb2e72319782cd60ede425ef5ba238836a05544cfbfa5f8b3c878f7021bd140d4c84ccee9c315ca13d816f6861fe4974b260671f1a425f7acf1ec61e86d46cc
MD5 SHA1 SHA512

EXE Packer/LangExePacker_French.ini

SHA256 fb1b87b741fa6df4a229694d80925cd15d2b72726d75e7ca3c793c1fbf5864c1
MD5 13f4248e9acdd624c500ed69284b0395
SHA1 c4f484038d0b756c977b402b200134495e14a4de
SHA512 37739297418f2f1222f9e26b4d8d4eba870eeaf77db74368ce24a644758c63997a07a0d0a12e6d0db358deef83eb7041dd976f37c4986d0136ecc9044c766278
MD5 SHA1 SHA512

EXE Packer/LangExePacker_German.ini

SHA256 5fa92fa585e0b3be25baf41af84d5c2a4288be9996ce0f610cc50fcb3041a28f
MD5 98ebd4a8f6c8a0618c39a781d15a627c
SHA1 c8aec0c60ee994c03793c75f0e2c32345b20ca21
SHA512 54a83bb961f6ccabf632b3ff50d7c088ea72183a038ebdfddb33a1df8a53da4cdc7ecb7b262d14900e5617a0ca92878f75287ffe873a3eebf589c95ed2fbe927
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Greek.ini

SHA256 d5969d20287333f3154075f300a22b44f8b6f276f057f4bd5cbae7c1fb8e1510
MD5 16f7a9844d1542b5fa797189f8191772
SHA1 d6aef26aae437fb55d51e3feb76536cfa755595a
SHA512 71122602e036d79f221d3c19ebdeab90c8239812920012c3767b421b5b36f01b882c4729ca8c9d11c362778f3b4e6c4be22c2ed017d96726f3411c0391621aee
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Hungarian.ini

SHA256 5a4b535089c63a9eab027e1b2bdfe4a65e8d569a22071ede2b534f311bec3164
MD5 240479385d9db4fd0d1a8f23762b8be0
SHA1 b614f9ba1f3b9a1a4ebe8ba8ef57fd6724c670de
SHA512 bb151c0ae19f37554b78c1267f722b8700daba052a6de2177903d7b2d1cb2e01c89ab5ba7a6649f845d8f6a16008a0dc34b2b7ba2a22e5f026f8237a4ced4e80
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Italian.ini

SHA256 33a24a4dfbf4817b9f8188068d6d6288589f9bce92f342a45fa9fd611ea61f8b
MD5 36c3411742ff15d4a78fa7d75a0b44b5
SHA1 ef1245a09b582925af524a7742f162bfa8b55bc4
SHA512 adba0e0e6b8ff99ead4766d4aca70664baf7e58f83fe336509969e8cf769450e27993f1ef46fcd4e3c1ff5bdf42b07d19adfa271bfd2823cc7fb1ebca3583aa9
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Japanese.ini

SHA256 e32e48b52e15aa760b0f287dbfbf8282678503b79645cc3f29027355d368e759
MD5 0ec54b62c56d1eb4cfd4180c07c63850
SHA1 66f6fff41e3df75dac613d8fcdba1abdd1a07fe5
SHA512 1a1c9feec3d88e006e00423d1467487b1baeb495f29374212b4a72e396a5cc09805b5a21e4e79a0434c10b72267c04b8a7d44451f903338b682c769892ce421e
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Russian.ini

SHA256 0475eb67e446bef2e3b78378e6e4de19a50b850c17312fbf035134ae6e0cc413
MD5 f5496b103711e173afa78a86a9365512
SHA1 b13d9f12f02274265609692d4c8d5c797b105061
SHA512 65682cd92b14c584ac56109ba90f82accd0d3e1a1b04ff34ccfa03231698ce29eda5e53c03b0893b2d7253fe7606c6823a8dc86da7164744c31805c96e552717
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Slovenian.ini

SHA256 f6597df573d95cdb5f5673a0cbbf6c5421d58110dc374b3d6301670756be9cb3
MD5 c8c31f904327bb7dce06b5d9f77829b1
SHA1 6e3e6cabb143e16b9437b4824cffc19e88b85a8e
SHA512 1581b82fd2938bca4866c57eb779d8ab1db3cdf33169dde5ad94692a696e4c631f9fc32a0f703f05a127ae333d91df6035e8f2ca07a5fb2c1dab202ebe7eeac7
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Spanish.ini

SHA256 75ff5c9c88624590d3717914f7e12c021249003779895d9f3cbe6c041f21eabe
MD5 ee9a177170873d7f2d9e841f0b95035d
SHA1 83495c8b6570bf7bf99515ce392b9523443b5932
SHA512 2acc96530ff30a4082c3330f7408ed37da1570ce2781f6c97a88fc3599a9083030de1b58064b29c010e3081d64a5f82c4fd1c5161f7f6f5ed7e5963a422f63a1
MD5 SHA1 SHA512

EXE Packer/LangExePacker_Swedish.ini

SHA256 5e6f107f1dfed42df57a2eec145560b789623e86bb7a2f9394765f9fc4618c01
MD5 dd0935aea4f7ac6f27b835e0f9876519
SHA1 070b2079483dfa17cf1f7d9fb13b6b61f2e2fee6
SHA512 2ae06b5b6438f2a439d4d9d5994c931d32948c5ccaa7be2eaffe07787a21d8b9a12f18475f9e565a10e33883f8d8d4fb63646faf30140c175fddce57e97d435a
MD5 SHA1 SHA512

EXE Packer/SavePath.ini

SHA256 76672fa1e9d0fb767cb55131e3ca72f3f62526b94f192c9a5c81a1d08b9362ad
MD5 d7ecc3c982c024c66f1fc00e7b24aa8f
SHA1 addc325b192a6b140b7df77a2224b384fe67037f
SHA512 e9a5e999e9a476d0f6d743e048b5d9c13a486a96ded1259af721f3dbadfd9682db84b6ad9e13f6d9b19c55dc291c3f2abfe42095a6d7ca2a734e661cc56979d2
MD5 SHA1 SHA512

EXE Packer/UnInstCleanup.exe

IMPHASH 2aa72ef6bc692d7c14f948800d79ab2e
SHA256 a736fa61ff1e1f893e95a24cc93c1b4dd8d39f187cfac2067306ab555f52ee41
MD5 a84818799bc93ac0fdffc8241f39449b
SHA1 c53f5dd611bd583919564d4d987ae15f2bbd5d35
SHA512 648ec61f0180d028e5a928909595c5bafc132e25be0e4b2281a41b256d6c46839e76417ec4d339533f040b8619a2dd144526cdc5de4f36b89a830f838f83cb08
SSDEEP 3072:Gf+Vy/BgXM6TMIiQy4Zjijw0t4bXWOul4jkLtjXKpiOH503Pd0u1tKDKNfVhrzai:GTBgXM6fiQyuGc64mhXKpiSWmbKNfJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

98694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindClose FindFirstFileA CreateFileA FileTimeToSystemTime SetErrorMode FileTimeToLocalFileTime GetSystemTimeAsFileTime RaiseException RtlUnwind FindNextFileA HeapFree GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc VirtualAlloc ExitProcess GetCommandLineA GetProcessHeap GetStartupInfoA SetStdHandle GetFileType SetHandleCount GetStdHandle GetTimeZoneInformation HeapDestroy HeapCreate VirtualFree Sleep WriteConsoleA GetConsoleOutputCP WriteConsoleW GetACP IsValidCodePage LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetStringTypeA GetStringTypeW SetEnvironmentVariableA SetEndOfFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale WritePrivateProfileStringA GetOEMCP GetCPInfo InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement GetModuleFileNameW GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalFree GlobalAlloc FormatMessageA LocalFree FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary LoadLibraryA lstrcmpW GetVersionExA FindResourceA LoadResource LockResource SizeofResource GlobalLock GlobalUnlock MulDiv GetModuleHandleA GetProcAddress SetLastError lstrlenA CompareStringW CompareStringA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar InterlockedExchange SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess RemoveDirectoryA GetFileAttributesA HeapSize

user32

ShowWindow MoveWindow SetWindowTextA IsDialogMessageA GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetWindowThreadProcessId IsWindowEnabled SetCursor GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem PostQuitMessage GetMenuState RegisterWindowMessageA SendDlgItemMessageA WinHelpA GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus IsWindow GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount SendMessageA SystemParametersInfoA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx GetParent CopyRect PtInRect UnregisterClassA LoadCursorA GetSysColorBrush DestroyMenu SetFocus DrawIcon IsIconic GetWindowRect GetClientRect EnableWindow LoadIconA GetSystemMetrics TabbedTextOutA DrawTextA DrawTextExA GrayStringA ScreenToClient ClientToScreen GetDC ReleaseDC BeginPaint GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos GetWindowPlacement GetWindow GetSysColor EndPaint GetDlgItem

gdi32

DeleteDC RectVisible CreateBitmap GetStockObject GetDeviceCaps ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA CreateFontIndirectA PtVisible DeleteObject GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC CreateSolidBrush GetObjectA TextOutA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHGetSpecialFolderPathA SHFileOperationA

shlwapi

PathFindFileNameA PathFindExtensionA

oleaut32

VariantClear VariantChangeType VariantInit

EXE Packer/UnInstCleanup.ini

SHA256 82f81ef7fc3a2b0f9c468a47699983df7f87150899c85d8390456659b14816d4
MD5 27ace400590faf045e491656c9c28761
SHA1 57988d5b342feb57e8469656c7f4612d408de92f
SHA512 f62244bc0cc362cc8d59887f01c84a6f059c1a0088493fc9d92fe0003b1bf2aad0562e3837752b5aac1bb5e271d2f25a7ef17095a9060881dfb49399df5a686c
MD5 SHA1 SHA512

EXE Packer/bin/upx.exe

SHA256 27ca3d2cdd1f6ccb4e3975f5a385639a1de06e444dbf14ed6ac4483cc5743835
MD5 0e383a14413a950bdcd8a31545287e91
SHA1 73ac17c4301274342e69a32e25c2ca2fb84d985b
SHA512 bd35383882a5f1bfa0feb1e454f1f0285ca0eb2b78041e5d3b6208b1d59da0a511842a9253091a44023969630f35678a80985c386b3358c26f822282013714da
SSDEEP 6144:EgN6bhi375QoTjrk9BPSkP8UxPAAXr7S58flc70frCx1bLb3o23y1XCsDOWGoS:lNmkL5p/khxI8veQ+LL0Iy9CnZoS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1861952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

EXE Packer/unins000.dat

SHA256 9944877e1deb1bfbb7e34ef0d215894169949fc44268e6e2d5664c4ca44ec710
MD5 e04f221d0fba8785b08c08ee5017afaf
SHA1 580138e8e313412053d328b95bebe4bdc8ad2de0
SHA512 e597889a0f4b23536edf674bcf88a3434c2d0dc02b5fde7b56886f6a4d255723488e2ad063308a08e63f8368806f0a34acad66a87411959e1d0fcb81d416464a
MD5 SHA1 SHA512

EXE Packer/unins000.exe

SHA256 fcec6eb27108ab6ea00b424bae8711b4b8354532ba2878800c42d81a7cd98c9d
MD5 dbc3fd26aeefe4fe02f0df4a564c1708
SHA1 bb3a41072ccdb25cc3dab6a7676d5f4066a23aaf
SHA512 2ccd81287bd1d95bca78a3f3095a28835197895a5d09cf594e7afe44f30938f615319d5feded87aa78970aa04e78d2772a183bcbb9f760dabeade41671653cca
SSDEEP 12288:QRObekMtkfohrPUs37uzHnA6zg5cIsalHERjUrNN/RQ9wgUT5EDExyc1:6ObekYkfohrP337uzHnA6cHswHE/6gUl
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

618984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

601KB

Virtual Size

601KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

8B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer