b0bcc5d64db2a3f00c277e2f871f1359_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b0bcc5d64db2a3f00c277e2f871f1359_JaffaCakes118
Size

701KB
MD5

b0bcc5d64db2a3f00c277e2f871f1359
SHA1

78857e72b257ae473d40aca7dd00f378c3485480
SHA256

94b0445cd9d6053e471584f159a8b23b9a57e7dc55c59d83bf1ddd1d995fa178
SHA512

02556178e936499eb8d4d2416864e1a668ba29270006e3a21185f4d31c6755a10481d17fd86d9bfca43eb6c58ecc34844a04c002a68f862b77c24bcc65d46fe5
SSDEEP

12288:v3IOigqJXOytVmLBdZ4lH+Sb7mcH+Gz7fKuNz7hAPzbTDyOgYPXkgU+A1ODCW7UC:wOilJeytVmLCl9exuNJqb3yOgwXkgU+T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0bcc5d64db2a3f00c277e2f871f1359_JaffaCakes118

Files

b0bcc5d64db2a3f00c277e2f871f1359_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_021B4999_0603_4CA4_9C9E_34F38F64D803
fn_0262AB64_C761_4F6F_9FA9_A41CD0B1E6C4
fn_028F9FA7_F5EF_421A_B6A1_C08DA5DA017C
fn_03D42E40_15C0_4666_9850_40F4CCA7FC5B
fn_047B0124_F906_4B01_B623_AA9C905CA99B
fn_04F1D868_D6E4_47DF_B411_F2868B0AA016
fn_06193FDD_55E1_4846_973A_118AB587D69B
fn_0894B2F3_7EC5_4051_9095_BF7FACC5A48B
fn_0991C03E_A205_4B07_898C_BBDEFF5A6EAB
fn_0B5B365F_6900_483A_B343_7469A7EFB5CE
fn_0BFE8680_9A52_4EA8_9659_92AAF4367659
fn_0C1C2C77_E83D_40AA_B8CD_2B16503C9CDF
fn_0CAD85F4_1190_4CF0_B7BC_10A74AC04A1A
fn_0CB47F0C_40F6_4BB2_9C48_FDF73DA3B1B8
fn_0CF46BD4_81A9_40C2_A1B4_D76BEABDAA4D
fn_0E00DE89_CA7A_4659_B7CD_42C2E1C0783D
fn_0F018F61_E486_4A9B_873D_4961762BC367
fn_10A2A686_25D5_44F5_996E_B0A20A7825CC
fn_120039DB_BEF5_430E_9514_F220C987CEF7
fn_122CB42F_0C73_4F49_8D58_64EB4598D4AA
fn_145B4289_B37A_4260_BB4D_DE9169F34E9A
fn_17DD85D0_7317_4ACB_BF25_AD799C20A840
fn_18119D8D_4BA8_48AE_8BDE_22879CC16A9D
fn_181DCF5C_FEE6_48A1_966E_1457823B4863
fn_189037D4_8CBB_4E9D_9E28_5E773AF85843
fn_1A31AB2F_6134_44E4_93A5_44345346C7BB
fn_1BA18916_4C6C_4A5A_A48B_7E10EDE11210
fn_1BE5CEB5_EAF5_41A3_82F4_6C831958A0AA
fn_1C6C01D0_348A_49B4_A379_883B82B26B8B
fn_1E8280E8_F5FF_45C0_A354_3CB10B66A0D0
fn_201ECC88_F30B_435E_AF11_F991F40DCC8D
fn_20230257_97F8_455E_866E_3528185E0CBC
fn_202DFC80_C1B5_4099_9B42_C467A5191B11
fn_214BBEF2_8FAD_4AFB_A74E_F91B8CDE9038
fn_21DD4441_5E8F_4996_B212_989E3E7EB4D6
fn_222B9A08_C749_4C35_857F_27596FE7FA44
fn_231AC88A_A773_4B48_8877_72693D3B051C
fn_235EAF12_2057_4D77_9A03_A1C3351C3D5B
fn_23A44F52_0913_4A3F_845F_7F15F5D03E88
fn_244375E4_1AA7_47E6_BFFC_4F22DBDED400
fn_249B4A6C_69C0_4D8B_AECF_E534395F4019
fn_24D1BB49_AC68_4B92_9BEF_0394CB60CC8B
fn_24DC8ED7_D508_4ED2_9272_812A274E88F4
fn_2541289B_3EBD_4C38_879B_15034DC936A1
fn_26A4C256_8DA1_4B57_9386_B76EBCBC827A
fn_27320D62_F42A_4962_8BF5_7B8A7BD27972
fn_2BA006B2_2364_4EEF_A7BB_55B222C67797
fn_2BC67D8A_FFC2_4CAE_A8EB_A905EC5E5ED9
fn_2C306F95_1AA5_4927_9E6C_6328ABA63E2D
fn_2CBF1937_23AB_4C19_B44A_1F1338ECA8CD
fn_2D8531AF_00D6_4653_9235_F57C95911A1B
fn_300A44B6_4C20_41F0_8D1D_2FF3A2CCE060
fn_31045847_A6A5_4970_BFEB_DBB47D81B785
fn_31C5B82F_E168_41EF_A252_6275C79DCFB8
fn_324B7C64_4D19_4DF2_9444_CAE434AA5DD0
fn_336576F9_0647_4174_8C0A_38991F8D367B
fn_338CAF17_1914_4618_843F_DE3D692DBF2F
fn_33E0598A_F5D6_448B_A392_9101521B980A
fn_355A3919_6844_4442_9B25_CF807BD95CE4
fn_35E7F684_7B17_482A_A139_9D443351E664
fn_36590BD9_A086_4369_9A62_4BBDD7E2C11A
fn_372D3C7D_F5E3_4389_A987_DBE2FDB3D339
fn_37D93D1F_E0C6_4FF0_B9B6_60F19BFEA97B
fn_3909BE17_5DB0_48F8_814E_FF89C8FB3496
fn_39FC63EB_ABA3_4ADA_94C2_EB59F808A703
fn_3B7B955A_4A08_46E7_BEFE_9949CCBF7485
fn_3BFA3E58_567E_4C3C_862E_1D9B498C3A88
fn_3DEE0757_33BF_43C4_97EA_A3E23D55D1B5
fn_3F269CD2_C7A2_4666_B148_F478E6AC28FE
fn_41F6D916_77B6_4422_B16F_E94AF73DD233
fn_4218233B_84CC_4269_9804_A05ED04F884A
fn_42BB31BB_9E82_4B7C_AEEF_8701E7C54E28
fn_432E5889_A20E_4BD8_93FC_9B4061536ED4
fn_446727E2_ABCC_46A2_B814_393B8A06E5D2
fn_449578F0_95F5_4D57_945B_AFBEC2B58CBA
fn_4499B858_F67A_4C91_AC19_AA84B7F2EF72
fn_46700DFB_1FDC_42AD_AEB4_98E0445766C9
fn_46D7ECFC_BF40_4D46_AB5A_5457D679D196
fn_4842D89F_874A_4BD8_9D2B_61637F4F95EB
fn_48BFC0FB_A8F3_48C4_946B_8498394CF3A9
fn_493D9D52_C013_4A93_B570_CB3DF296F93B
fn_494FA27F_A609_40C1_B1A3_5F137FFF918A
fn_4982660D_7B4B_4A3B_AD86_CDB578D85F70
fn_4B5D11DE_355A_4A06_8E80_85AC66985FFD
fn_4BB000CB_DBA6_4BCE_B300_A663751C5D43
fn_4BF85391_6240_4D70_9425_4480EB9F239B
fn_4C32BF4D_BC57_43C1_BB55_464298BBB27F
fn_4C4F6396_051F_4B7E_9FEB_808F787F26FB
fn_4F5EB830_FFB6_4EA6_8A6D_E9E9743617BC
fn_50382E52_C5DD_43CD_9E44_E5D986DEE83E
fn_509D752F_8C9B_40C7_9DCB_861BB790F51D
fn_50C6F4B6_3F3C_4C29_B105_22AF6B4DF1E3
fn_526AA5DB_D9D3_46EB_A134_0D20673F9A55
fn_52DE6E43_7F0C_4B64_BB2C_0068DC36DE78
fn_5362D1FD_872F_45A7_8620_EAA12797816D
fn_548D51EA_51E5_4131_B0FF_F9D590B8C21F
fn_568CBF49_2046_44BB_8B13_71869E05453A
fn_5808DCD1_10D4_4DB0_991D_5EB0E1327C1E
fn_5A32FA1F_C78E_4361_B3E2_4C6E38ECC667
fn_5E62B9AD_3533_49A2_B139_4CF64C070D73
fn_5EF40FC6_FD34_4F61_A74C_9A38A7145ABF
fn_5F2B5F4A_FB2B_4F99_A917_122CD2882DE5
fn_5FD08C29_34F4_4F7E_99B3_ED4E07408FF1
fn_61CF2502_7B0C_4989_A74C_D2EDD5BF4EC1
fn_61F498AF_4F89_4F18_81A2_F76F83BA6BA9
fn_62CC1577_1741_40AF_94C1_B0563D282B64
fn_660A44F1_6457_4B4C_A1F9_EDEF32184D92
fn_666D3EF5_CEE6_4229_82A6_DBD75C55F63C
fn_696C7F69_BD36_4944_9F0F_D079BE287558
fn_69FCF64A_4AA7_4FAF_BBB0_4EB1A2890778
fn_6A34B014_EDB1_4BDE_8FCA_A84826EE1557
fn_6A75C8CE_F72F_4386_B729_33EF75D48D7C
fn_6AF517D0_994B_4972_993F_CFB7DD3D6835
fn_6BC7E926_0FBC_480C_9775_1660200263C1
fn_6E9F3FE0_56F6_4FA9_9856_455FA9C67247
fn_6EC7D6E4_EC05_432E_8677_0F6CA6239532
fn_6F3F9738_1939_4106_80C8_598FA02C329D
fn_6F7A7F3E_09A8_49E7_B148_7E897A037A4D
fn_7389F9A6_EE4C_430B_9C8A_6F50AE3902FB
fn_7420565A_7318_46EB_92D8_0AA0E57BF441
fn_76269CE4_B987_4082_8F22_2E8E4322542D
fn_7755257E_04BD_42AB_84E5_C603C2777486
fn_78615D46_3594_4B1C_BBFE_044FBF057606
fn_788F06B6_CBCE_4DD9_983D_4A5064BF1B9E
fn_78CAA8AC_D6FF_43A5_8F69_16B97855E537
fn_79124556_ADAE_4C6C_A683_038858118377
fn_79199F55_A014_4DA0_9350_AAE121811658
fn_799A1F05_2A19_47BA_9884_7706BCB9FBD5
fn_7A35651C_AEAA_42A7_BDF4_B266FFE1935F
fn_7DA868DF_26E9_404E_81C5_007A17B1DE4D
fn_7E5DB211_04CE_43E4_BB28_AFAB6D2A8ADB
fn_7ED9BDA3_ACBC_49B7_A86B_F64115F259F5
fn_80FEC174_02B6_4FBB_8528_DB00BD3F3F5C
fn_81D764F9_C715_48E8_8F29_8F5085455054
fn_81F854B2_3EAD_4D21_97F9_B3776A1DB7AF
fn_8208E6B9_77FB_4016_8607_E0E794A29CE2
fn_82B15A6A_2FB0_44D1_822C_3445A99C807B
fn_838CF645_CCA9_481C_96BB_4CCF67543557
fn_888778DE_2299_4658_8C4E_331D2E464890
fn_89AFA696_EF8C_442F_A536_6ADFC914165C
fn_89B55950_31A5_4D8D_8BAA_38DD0491C2A7
fn_8AD766CD_E785_474E_ABCA_E8042E4EECA2
fn_8D23ECDC_D8D5_4FF9_9C1F_02D00B888773
fn_8E305698_05E4_47AE_9370_89E8303BDAE3
fn_8F9E4CA7_3271_4CB0_9EB6_39D9ED548940
fn_8FAC03B8_D35C_4E40_807B_EC8420A6C7F9
fn_90081ED7_937B_440F_AAC2_2522BAA1AACA
fn_918CAEF2_25CC_4D90_9CD7_4B712A5FF92E
fn_92CF898C_172E_40C9_B708_452FCCB18947
fn_9516C7C3_C166_477C_9518_A84C66B882E8
fn_95D9DC5B_EBB7_42FC_9810_B356048E536B
fn_96D66FCF_5C92_46B7_92C7_93F5566D8346
fn_97613ADC_DE07_4E79_80CA_2C544476F9C0
fn_97F87C22_9F04_4620_AB4D_CF86A45061E9
fn_990A6B46_9EB2_4F80_BF10_D5B2F6ACEA41
fn_9A3A48F0_49CA_469E_84B6_C5F2B61DD78B
fn_9BD4618A_0109_4E38_AAC1_BD123A7F521A
fn_9BDC2F72_F0FD_4199_908C_E1A16E23CFB5
fn_9BF9C270_3F70_414B_96C0_1801113830D1
fn_9CD27002_5286_40BF_91B1_C3E238AF4314
fn_9F95C18A_2AE7_4EBF_A9C9_66AF3B461ABB
fn_A0654BB7_2CDA_4947_8B46_A427374546F1
fn_A06F0AE6_8FCA_4602_87D5_8B326B484C10
fn_A09EA8E6_BAB5_45F5_9E2C_2A8A6EA2E32C
fn_A0E08FFA_05D9_48B0_A04A_15D5F7CF5D6B
fn_A131A89B_4C7F_4F52_9192_B608CB508355
fn_A24E94EE_68E8_4D00_9219_7F6590576182
fn_A33FF07D_F442_4CD0_BAEA_3788A2F56932
fn_A35305E7_EF6F_4980_B32D_E0DB92FA6487
fn_A372FCE1_2DDD_4355_A9E4_87B6DD0B536B
fn_A5361E88_5B98_4516_B7AE_760CB4F794CF
fn_A7332D7F_3D8B_4ACA_9FF4_E1AE728FA6FB
fn_A7355D3F_4111_4700_A855_89B21A936FBF
fn_A8A0E255_21E0_4A37_B131_82B9CAE4E12C
fn_A994E23F_6D40_4C52_B0BD_9D9944EF4EF0
fn_AA0BE6FD_89BD_468F_9360_30AF8A3E4F7A
fn_AAD686ED_25EA_4C87_810B_9D25B99B4E08
fn_AE29D152_C2EF_424E_BDD3_0DF162E9305A
fn_AF07374C_A1F4_4DA0_99D3_388282B32549
fn_B132005B_BD89_4604_A988_83E9C45C6801
fn_B198449B_698D_451D_96D2_27508465BA14
fn_B24F410B_C866_4642_AE91_59ACF9CE14AF
fn_B4B1F693_A792_4C98_99BC_12CEECA6A5CB
fn_B8D05DC2_B275_4567_AD47_6654951A53A8
fn_B99B13F0_206F_4D91_88F3_9C9FBD822B92
fn_BABACB0B_D153_4FC1_AD21_A9F0AE882CC4
fn_BBC0262E_51A4_48D9_A5D7_34912218B5B7
fn_BD2CC26C_6573_4E88_9F80_59948006B425
fn_BD33CAB2_BD42_4FAD_AE77_FCE9863B4F85
fn_C115E202_C95B_4C3C_89E9_FB6F654752D3
fn_C195DAFC_D5DA_4AA0_85AE_7F1CA6A2E656
fn_C1A33CB7_3391_4778_9343_A540C8BCC3D7
fn_C266972E_0C02_4197_B228_77F3D2F1C574
fn_C2B6482A_088D_4F57_86F2_133799A9A5DB
fn_C9410689_3E4C_48E9_A1E2_20D76E317068
fn_C984B4BE_AC96_4285_A278_30A5A252E44C
fn_CA25399E_CF75_4469_ACBD_6B60C07F32D4
fn_CAA1EA99_5352_4D03_AE94_A24356D84EC0
fn_CAD27368_1761_4552_874E_B035828C5299
fn_CE681113_64AF_4BD7_966D_5ACD1AF5ECB9
fn_CEC0079F_1B1D_4DE4_B041_DBD8C3746F5D
fn_CF5C324C_91C1_4548_8347_AB21BD223B01
fn_D0E1FDD5_A2D7_47FB_B4BA_8C56BB668D97
fn_D0ED5ECE_A96D_4F12_B960_E23FC7B1F722
fn_D2499FA1_1ABE_47A8_A3C1_A0C9E8EB518B
fn_D28CC3EB_86F3_4DBB_BC22_983FA53BB3D9
fn_D5733B17_CAA3_463E_B7A8_273A62ED6E37
fn_D83B6F9C_3C4C_4ACC_9023_39BC317B5502
fn_D849C7F4_88C2_40E1_89AC_1C59FD0F74AF
fn_D86155EE_24A5_4BA9_B40E_73BA785CECE1
fn_D8A27D12_FB0F_4E90_92FC_43073941AB9F
fn_DB69895D_F2FE_460E_BAEB_3AD21947B26F
fn_DC4F0FED_DD5F_4020_8326_0493233F907D
fn_DCDA3F92_1CA3_4109_B168_66802E325B11
fn_DDBE0D07_DDF6_4AC4_8785_AF1CA9237A95
fn_DE1B46F3_BC20_42C2_A107_A5459A7A1F7E
fn_DEEE0C3C_D894_4AAF_9004_D6ACA49120A3
fn_DF245612_D081_4D9E_A38F_89E4DA8EAA91
fn_DF2A397B_1B0B_479A_BE16_D4CB6B1EA5DC
fn_E155C309_CB80_4825_9F14_0235F52CE0CD
fn_E3B326B6_F5E8_4C40_99B0_827437596001
fn_E488518C_F56C_41F0_91CD_706DF65373AD
fn_E5020B9B_5D4B_40F1_B8E7_BA38093A12F2
fn_E536DF42_03D6_46A2_9CFA_97461910FE4A
fn_E6BD3610_078C_486E_94D2_87C7C1838E67
fn_E8D47CDB_80D9_4140_9CC5_1C485AEA544B
fn_E9F6F6A5_835B_4A77_9897_D22D94CEF029
fn_EAA917F7_9155_46F9_9E7D_24497CBF4BD8
fn_EAAE9D5E_712D_4941_9AE3_9A297139FD59
fn_EB5AC972_8F8C_41EA_B79C_0A9830BE71A9
fn_EBD56E46_1EF8_4543_A2A0_7F58880C0D60
fn_EC1B458D_5531_4CC2_B4D0_71B5793BE529
fn_EC1E7DAF_A74A_4BF4_A8F2_5E365F7E43E6
fn_EC7ACB40_1056_47AF_9672_626D7CE7E0A9
fn_EDEA15D9_9BB4_4BDC_926E_13800613406F
fn_EE9B180F_2997_4EFC_9969_608CD44053D6
fn_EF92B5F2_0CAC_4421_85BF_75D3DF3222C2
fn_F0246802_F23C_4B7B_B7C6_C3530C4E225B
fn_F04664E6_4C2D_4469_8F64_020E2948F36E
fn_F0CCB0A7_4271_4A59_AEA4_592CE73B4B07
fn_F11C2418_A95B_4941_B33C_3F223C374718
fn_F1BEC935_98F0_4B75_B4C4_CED5D374BE92
fn_F229ACC0_26C7_4FC8_89DD_44F0E033E0D9
fn_F2F0E558_1453_40F5_AF38_C118C3079160
fn_F3C161D7_11CB_4060_9F33_08CE6B219A4B
fn_F53AF259_6535_46B5_BD50_8A25DA26BCE5
fn_F600654C_65F2_47D9_9DDE_3E9EF902BDBA
fn_F84B332F_F5B2_4848_9296_0BC47C78F000
fn_FA75F41D_A7F3_471E_A072_24C4A0BF84D6
fn_FA762DF1_FADB_41C4_87AF_82502F2E4F20
fn_FC943FC5_EFBB_42CC_AE81_CA21364BFB1D
fn_FE459A62_D591_4772_927A_C7B0ADD11533
fn_FF0F7645_02AD_4536_A667_C76009C810F6

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 33KB - Virtual size: 33KB