b3c01aefb479899a5beb1faf7695ab46_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b3c01aefb479899a5beb1faf7695ab46_JaffaCakes118
Size

702KB
MD5

b3c01aefb479899a5beb1faf7695ab46
SHA1

8a06b587286ed00827b28f4612b68619600e1216
SHA256

a61c9b55bc0d9c5c68a4b1875d7a6dc04ac60611f56a3e7bb34802617ee535e8
SHA512

346375db201a3b8605390205382c48e9f5a02e84068c99c40df620dc2d9a6388ae3bdadea06a83b607a3dec060fd3412e0287f6a98d4f6e8e05aaf7e7697e969
SSDEEP

12288:wu9tCqbRRXZ3z2s4TjHjkFH7U1M17fVBN1SBbd7I5Ic7OaXzsme+rlrpoGJP4KiY:FtnbfXZ3ujiIcBN89I2c7OaXzsme+rl7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3c01aefb479899a5beb1faf7695ab46_JaffaCakes118

Files

b3c01aefb479899a5beb1faf7695ab46_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_00A2D83F_4796_41D9_B8E3_B898C40D61AF
fn_00F16212_0E73_44C2_90D3_9E47B5E60CDE
fn_0109DCD9_0491_444A_A46D_CC721050AD39
fn_0156FB83_16C4_4D50_B64D_9BBC7B94F5B9
fn_02A7CB25_665C_4A06_A6AC_CDF7714EB454
fn_03637AB2_A4C4_4D68_9BF1_A767709AE29C
fn_03CDA6F6_373C_4265_B2C4_258599F3272B
fn_040B9282_701B_4471_8A6F_85C7410F79CC
fn_044F282D_2791_4D28_8992_D37A9C14A286
fn_0552590B_D3B6_414C_8D73_7F768F6C7304
fn_06695755_0928_45D6_B2FF_CFFDCC0239DE
fn_0748D925_08EA_4B3E_B680_733887D16392
fn_07678701_9C88_4C3B_AF2D_1B65964E77CB
fn_0782437E_0740_419B_93CD_CE2D7A3FFF68
fn_07BE3C95_F373_401A_B865_D1742DD2B48E
fn_0990CF8A_A00B_4950_BA30_B426BA995977
fn_0AB5A890_4908_44EA_ADD6_97C06EDE6801
fn_0D9AA81E_1399_4C3A_98FF_41BA3A861C01
fn_0DA02323_DB82_4A82_BB60_2E3C8D2D9C57
fn_0F1B89B7_273C_480C_A289_BDA28777DF11
fn_102B84B5_A136_4252_B6AB_18358E4351F7
fn_151A6FE4_7EED_462B_9E72_F35A795B9D00
fn_15587DA2_9FE1_49E9_812E_EFB20BE6A79D
fn_16472648_424F_4093_95C3_F1D61487A9BE
fn_165DCD43_1DE4_45B5_BB17_761DF0C6329F
fn_1A4499AF_0DFD_4677_9549_F096EADD4B71
fn_1BDB1F01_7FD0_4949_8B87_BEC0953B1A32
fn_1BE07108_94E4_4B53_90B1_7B790DB5846E
fn_1C3A545E_6594_4736_81E2_6DE1117151F6
fn_1D9B4C0F_45FD_4B30_9533_B0AE1D25E820
fn_1E9592F7_E049_49B0_A2AE_ABE2C944BDB1
fn_20DBE546_CDF9_48A5_BA2E_2CA6F3BEDF3D
fn_2289C172_31B5_4FF9_A081_AB815E6DE9C4
fn_22B63AE9_F8CD_4291_82EC_F71D2CEEE096
fn_25BE2DFA_B36C_4C45_A54E_9DA2BAE6FB9A
fn_25FD268F_A553_40D7_822B_C97DF748C0AB
fn_27057904_963A_4145_9E11_84FB081D9AC1
fn_270D8EEC_4A6C_45D1_A59E_AB5657D11C16
fn_2771096E_8C02_4515_A657_785EAEBAE9CC
fn_2C4458A0_CDFA_4663_B947_28C343AE2A1A
fn_2D03E8F5_70CE_4442_A8DB_8FB433695A6D
fn_2EADFF0C_025C_424B_AC49_1B241E173644
fn_2EC5CA95_3D30_4152_87C7_B1E33E7EEA3D
fn_2F9B07E3_661B_4B09_94E4_9EE4F77F59D9
fn_2FDD7BAF_79A9_459A_977A_39B3D33F3C8F
fn_33F63872_E2E6_4251_B45E_4CADD9A13D9A
fn_34F86B40_B6FF_4978_82FC_D217EA1BE424
fn_35294AFD_A518_44F1_A681_A8C9DC7A8302
fn_35B8BE81_1304_4F02_B78F_7C7C00FAA79A
fn_35D90BE2_17CD_4FDD_BBBB_174BCA90E350
fn_365C7549_88EF_40DA_A611_667C86ECC897
fn_36A0DC40_B93F_4393_AABB_4F675AF65D77
fn_37157E13_FD98_407D_BADF_E2042D579801
fn_37471F67_2AE4_4F89_97AC_6F6F6C7B6301
fn_37B2F094_3170_45EE_BBA8_CFABF0AA5C15
fn_39013AD9_EFD5_49C5_8F26_293B853B91B6
fn_3A35872E_90CF_4487_A80B_0DB8EB7C52EC
fn_3ABDE237_B15A_4A0F_9E41_CC7367AEC339
fn_3E3151AB_583F_44D0_91BB_3014CB04D987
fn_3F1F49C8_E9A9_4488_AD9C_DD13408E1EC1
fn_40829C38_321D_4B1A_8295_1DD59D4EC63D
fn_40BE9B78_DF63_4D32_A998_96992B7FA674
fn_41D1BAAB_DC66_41BE_9FA4_584D492F9E92
fn_4235AFA4_FCC3_47CE_A7EF_2863E9480E7D
fn_4290DF69_1552_4161_B921_758021459106
fn_4366FEFC_49E5_4170_BCFF_A52E1CF632B8
fn_43F40985_EC11_4B59_B38E_654344742EAB
fn_44913766_FB53_4C7F_BE25_3116A1EFF0C8
fn_44D0177B_A88C_4532_8860_6001C14F7591
fn_45102E33_00B0_466E_966B_6AFC24257396
fn_451FBB30_0010_489F_B9B4_264365941B50
fn_46A4988A_10FA_4F43_817A_BA1BA0DC3297
fn_481A3949_90AF_4139_89F6_060C6421C28B
fn_4BA917A5_9F30_473C_851B_8EDAFDD5D060
fn_4C095891_EF18_4942_919D_81CF468BB63D
fn_4C0CE676_CA5A_49BA_8F25_57EBB96CB5DF
fn_4C387D22_167A_4D8D_A896_E5C708488E18
fn_4C5FCBBB_8B22_402E_9F1F_0F2101CC8295
fn_4CEAD4F3_DD58_4532_8251_CC46BACB90E8
fn_4E180CED_A3B6_4EFB_8ED5_A6ABACC6C404
fn_5012807C_4A1A_4DB1_A40D_CF8792AF39E8
fn_5092062D_1756_4260_A9E6_3CA230464876
fn_50D871E1_47B0_405B_B5EF_40E022FCA8E4
fn_5131D037_F79D_41B5_A645_100532DB970C
fn_5334D3C3_D573_4AE7_A9AA_705AD51AE664
fn_545768D0_81F8_4A4C_87E7_EE2DE4909112
fn_566DC0BC_B1C8_4CA8_97FE_04758EFC772A
fn_5842E379_9502_466A_86BF_53677D41CA0F
fn_58C8F3CF_455B_4F9A_8CF6_184653177CA5
fn_58E43933_8C21_44E9_8B24_2AA8DCBBEE3C
fn_591D3DA2_1706_4467_9499_8FC98341158B
fn_59583EC8_B626_4AF2_871F_F15A60055714
fn_5982E015_D300_4955_9732_F0EED819B2DF
fn_5B8C4379_86B7_4B32_897E_7C1CE86AA28C
fn_5D6BDB2A_445D_4416_A359_8494C0009310
fn_5D6E31E9_6FDA_4EF6_8009_05A2A87E405E
fn_606B88D5_1E91_4AA6_9634_1C16FCE13049
fn_60AFC260_A4F5_4E4E_B80D_F96D3FBC10F7
fn_61774DAF_F33F_44D1_AB63_0CE9BAD21F78
fn_6304F957_A67E_4C64_86A6_83FA9905041F
fn_638D33E3_CDF1_4A54_9F96_CB64C3112BC4
fn_63DA1B20_BF4A_4C0B_9AFF_74E07A1EBEFE
fn_64149EFE_D4A1_452F_ACC3_98A167B78773
fn_6656368E_AEAD_4D1F_ADBB_AA01269AB4C8
fn_66A8E1E7_438B_4603_BFD9_85FCE1C8DA86
fn_683E648C_358F_49F6_8F4F_0CD695CD12BB
fn_69801E8B_D5DD_4A42_AFF3_01ED5E63A00F
fn_69E1E117_30F0_4876_A079_474497949F01
fn_6A73A630_E332_4CA7_BB90_E169255B8FBC
fn_6B386114_8858_4424_BA80_EBD7E0E3619D
fn_6C28C0FA_FE06_4E46_BAAF_FBFAF78215ED
fn_6F1759EA_0AA5_4B30_BD29_1C96330015D1
fn_6F2C8CF9_C67D_409D_BF48_B5A2741C48AF
fn_7112107D_04CD_4DDD_AD5C_F62D3C36C59A
fn_733C8E73_4E0E_4244_8287_6C98C70D65A8
fn_7458B2D1_34E9_47D0_91DE_F0CF1B45B997
fn_74DA9CB5_EDCD_4AA5_B72F_F08FD2D7BC7E
fn_7920BC3C_95DB_48C9_A037_98B21CBB45C6
fn_7A55ACA5_5248_4AAE_9E46_53B518F4F9EB
fn_7BEF88B6_106A_4F05_871F_7CD205678200
fn_7BF6EE23_D070_4973_986C_CD7DAF7C487A
fn_7C8A63CA_6D22_49F2_B335_7E7872F10DB0
fn_7F48A444_E131_41BC_AC8B_0574EB061003
fn_7F71C8B5_AF64_423A_BE09_18E085890F42
fn_7F78B1B1_2E77_41E2_9498_F8E708C14722
fn_7F8C8158_86DA_41CD_9644_11BD36402981
fn_8053F261_5AC1_44D3_B148_F0904003933F
fn_80A2DC44_7FD3_4317_9428_34AF75430A12
fn_836B4817_C0A1_4EF3_9978_A2D7EBA9B967
fn_8371ABE5_A209_4CC8_8AB2_10BB2607D5DC
fn_85278F78_8DA1_413C_94F4_3B092135B55A
fn_85AD09F5_C4FE_4D47_B77B_8F34760B48DB
fn_86A70B09_9786_4E03_A09C_CD1318FE7816
fn_8A2745BC_0EAC_4BA7_A92D_5C7BED7D08E2
fn_8A85EED4_159D_494E_BDF8_C54EC342BF12
fn_8CAD087A_F1ED_4B21_8F62_1086822B45D0
fn_8E0EDAC8_987C_4DBA_8ACA_DFDEBCFE7910
fn_8EBFF11B_3A85_4F82_B89C_EB071E9EF81D
fn_9028B8B3_739E_4ABD_9732_219F7664D90E
fn_90D34E5B_09B8_4F4F_A975_E98566DF0A03
fn_9190C689_8D71_4665_A293_A78EFA21D267
fn_91B76770_62CF_4980_94AE_0F55B7F2F2A5
fn_925CD95F_E9C8_43F0_A407_3A33CBA6A960
fn_95C796DD_2563_448D_9E7A_F4F954FD349A
fn_977ABE42_4BB9_415A_BE5C_846CAA3D88F5
fn_97981D81_8FE0_4274_9FF7_3062FC7B5A95
fn_9980D1AF_6B5B_4397_8726_C17A26BCEEC4
fn_9A6F0EEA_2C8E_4AEF_BBC9_9D717F5FB5BE
fn_9BBF8B28_3348_41EC_9A11_A4033F9A8C05
fn_9C979208_0AC8_4827_9282_62953CC306C5
fn_9DE131D5_F716_4582_B5B3_C3266235ED8C
fn_9EEB1EDC_B9AC_4882_9084_DE9778957053
fn_9F554AC3_CE95_44D8_8F1C_9E87351CB1F5
fn_9FA098F1_3878_4A4E_949B_AB48274432B0
fn_A05FE97B_B00A_4FA7_B3E2_27ACF88BCB02
fn_A1315F74_FE72_404D_875F_F4B85FD841D3
fn_A1C443F1_25B7_46C0_980A_BC45FEDE7BCF
fn_A36C0510_A294_4340_BF62_15A677A4B1A0
fn_A6DD90D6_C744_4537_8185_5440417ACCD6
fn_AA0C33FA_14B2_43A3_ADCC_D49EE1D36A25
fn_ABFAF14E_840E_4B98_B60E_AF8E95744B7B
fn_ADC16C0F_1585_481E_A71D_9B5ABAD79FF2
fn_AE597EFB_728B_4661_844C_C438525FE7DD
fn_AEBF729D_3641_40FB_A6BA_E7823DFF583E
fn_AF868CB6_D772_49F7_90CC_12CE1EE88D82
fn_B222FA7A_4292_49BB_AFEB_62859119E4B9
fn_B245C4B1_0C9B_4C1B_99C2_588082926EE5
fn_B2AD00D0_4104_4737_8FC6_A0F103E4AE98
fn_B2D5D4C0_8EFA_40B6_9E19_9FA263B6E860
fn_B49A4788_9882_49E8_9AE9_DF75170499EE
fn_B5BF7A95_FDE5_43E7_9034_4C359A5E1903
fn_B5BF8DC1_4A61_4535_BCAE_B1916CAD0280
fn_B60BA2E3_194F_43B8_8532_C170392B9D28
fn_B6AF50E2_1E26_4B39_B2D0_4BA159CB5928
fn_B6C4BC8E_DDDB_4DE6_B923_FAB07A05A8FE
fn_B748AB93_1724_4948_A894_8FEAA4690C5E
fn_B80ED2DD_8CF6_466F_B011_C9ADD7C66B6E
fn_B8D6039B_DE69_40CD_8DC5_2BDC68B0506B
fn_B8E6E5FB_65E6_4646_8982_5F977BE700C2
fn_B97732CA_9642_4B1A_B54B_4AC96B1CCBD3
fn_BA437B28_D0F9_439C_B9A4_63E941527132
fn_BC37F39B_FBA2_4FCD_A852_8F42A197FDF7
fn_BC8F7EAE_AF86_4A39_9B40_451118857A13
fn_BCAFDF0C_260B_4395_A975_8D4215A241F7
fn_BD108D6A_6EA3_4A7C_8990_BF282E05A1D7
fn_BDE0C3CF_7928_4CD2_968C_14F574E5724A
fn_BE02FD6F_6F88_4AD4_9FD0_1220EC248F57
fn_C0C9C3B5_1205_41A3_83BF_49788A92416C
fn_C0EC4580_F747_4755_996B_1810D825D598
fn_C1CD99BE_2067_45C9_A513_962D29E34966
fn_C3157721_9183_4B38_8D47_A06824B141EA
fn_C55E9760_BDE2_48BD_8B3A_7841CE31F31D
fn_C65687E1_ED2A_4B8D_BBC2_08D548836D35
fn_C7213D87_338E_41C9_B10B_951835E99552
fn_C85BD94B_B4D8_4AE7_8629_B8D0C1C9AA96
fn_C8C71BD7_A773_416A_95DB_57946958DD7D
fn_C9C0A21F_81CA_4955_9E08_2E72868E9947
fn_CA03490C_14AA_4E91_AA0D_8DFD88874950
fn_CACFF87F_7A3C_4C5E_BE03_BDD277AF2969
fn_CAD89F6A_DBBE_4EF2_8A9B_D174969FF573
fn_CC2E64A3_603C_4E6B_8E97_F474B6112995
fn_CE060FEC_3C31_4AC5_8D3B_C16C6518C0FF
fn_CE74304E_D968_4B53_9D7A_4058C7CE040F
fn_CE86FED1_8D83_49CC_8A0A_ECE3E4D1279E
fn_CEF36C1A_1833_4A22_AE05_77668561E705
fn_CFB8F28E_3058_4836_AC42_3035B570E26E
fn_D02666C8_4D70_4D40_A56E_549B95CFA0D7
fn_D1FB9E1C_A992_4A5D_BC10_FA0FBEC30F20
fn_D2A6044A_7671_4907_9B15_98D0CA0BC8A5
fn_D4046CF3_BC86_4EE9_8FB8_4C67AFCF8A69
fn_D5485F15_3D3C_4132_AC6E_0CE2ECD57391
fn_D54D24A0_183D_49E2_90F6_49157EF9C7E7
fn_D56A8BCD_011D_46AB_80BA_85C3E30D0AE8
fn_D688E9E3_B0F5_43C1_89FF_0A2AE3F05B63
fn_D8439EAD_12C0_4F4A_84BE_E0F3D994B018
fn_D90D37A6_E489_4439_873F_F9EFDFB5EEC4
fn_D959FE79_31FF_4FCC_A500_EB5A96ACB2C9
fn_DB424DCC_88D1_4E0B_A629_EFCCDD98888E
fn_DBC790A4_D86F_4013_8B26_0B1DB7E4A8CB
fn_E083A198_5B96_44B1_A2AC_7D0933E92893
fn_E136686B_CA24_45C1_BCC9_9D5E3F9D6196
fn_E3B6CB49_FFE7_4553_8BF0_ECB72517E5DA
fn_E46410BA_08BD_45A4_B966_A561B8D2C751
fn_E66994E4_06F1_4153_A889_FEACDA028EF5
fn_E8DF2D1F_99BB_4294_8D3D_ABE7E58AA911
fn_EAA6446E_B2C9_455C_ABCA_04B45E0B6241
fn_EB72C91A_64F0_45FC_9481_EE43164FA9FA
fn_EB96F733_6BBC_4CC2_8E87_2C4E76FF96A3
fn_EE4080D1_AB62_4999_BC02_B01D65D042E8
fn_F021334E_EFB8_4611_8D6C_D70B97DF3858
fn_F06D6F44_20DE_403D_ACD4_7DB50C08E6CA
fn_F28C912D_5F20_4237_B608_06AEF14CFA42
fn_F3338170_8A9A_472A_BD70_E3E8A19317FC
fn_F3799AB3_BFE9_45B4_9B86_E0DC07006721
fn_F49A21C0_6D0F_4FB7_888C_7757C7B032FD
fn_F5718E62_9A83_43A6_813D_474AA4C97D45
fn_F5FD2D55_F120_4FEC_80B5_B9F1ACE4B7E4
fn_F6517B66_242A_40A8_8B17_7F0685F40877
fn_F66AB55B_EB43_4A86_BE7A_B1DDB1F9F677
fn_F6F009BA_ABF5_4AF6_BC4A_4CE4F72DA90E
fn_F72AB2DF_524C_434F_93A2_78562557E7F6
fn_F7ADD956_9CDF_4639_B201_A2F35D80A8A5
fn_F7B49832_7447_4605_A223_9977A2B1D965
fn_F9AAEFB7_B4C8_4B68_9EBA_2930448F76A5
fn_FA08F63A_6D34_4205_8F5F_6A5D05199069
fn_FA6C6B0E_4836_4664_B783_514CADF3A6E8
fn_FACF618D_0A1B_4836_85E4_5FD5FA70F8D3
fn_FBDC2269_5E24_4D93_BBB6_77DD7CAE8281
fn_FD352F96_FC9D_4D16_B739_3577912D62C2
fn_FE8FCE6A_CFFA_4A3D_A951_0194CC018CF3
fn_FF3A1FBB_1C39_4152_8CC6_1A0B55736B02
fn_FFB4081F_B8B0_452D_B662_AA73717591F9
fn_FFF094F7_4DFB_40DB_8D73_4004DE12EEAE

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 34KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 34KB - Virtual size: 33KB