0b3dcd6dfded3b0407482dbc5a604403_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b3dcd6dfded3b0407482dbc5a604403_JaffaCakes118
Size

4.4MB
MD5

0b3dcd6dfded3b0407482dbc5a604403
SHA1

0d3ca9b0152a17ac26ae378e8328f4b582c88fc2
SHA256

eaa3a2559beb1da2965d13569b15844b69af6ba68fbd32aaf8005a4239cb411a
SHA512

efb42e6afda1d7dbc20693461bbdedbaf600d093d7f26b4ee61cec36b7262e44510cac6d0edfa1a946240999b73708b9ffec8a0b2e49bdc51a061883e7bd32ef
SSDEEP

49152:bSMZI7YfeOiQATfq9nb57JrnFVJ4OYm3jAjDTdmYj3OO+8KwvmRr+oGha+oGh5+B:l2QATfq9nbjRVtMa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b3dcd6dfded3b0407482dbc5a604403_JaffaCakes118

Files

0b3dcd6dfded3b0407482dbc5a604403_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cad0839de65962ce5957fdad1d724842

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

StartServiceCtrlDispatcherA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExW
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
RegQueryValueExW
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
SetServiceStatus
RegisterServiceCtrlHandlerA

comctl32

ord17
InitCommonControlsEx

gdi32

DeleteObject
CreateCompatibleDC
SelectObject
BitBlt
SetStretchBltMode
StretchBlt
DeleteDC
CreateDIBSection
StretchDIBits
GetObjectA
GetStockObject
CreateDCA
CreateCompatibleBitmap
SetTextAlign
SelectPalette
RealizePalette
CreateBrushIndirect
CreateSolidBrush
SetBkMode
EnumFontsW
EnumFontsA
CreateRectRgn
CombineRgn
SelectClipRgn
GetEnhMetaFileA
SetMapMode
GetDeviceCaps
CreateFontA
GetTextExtentPoint32W
GetTextExtentPoint32A
GetPixel
SetPixelV
CreatePalette
GetEnhMetaFileHeader
EnumEnhMetaFile
DeleteEnhMetaFile
GetMetaFileA
DeleteMetaFile
SetTextColor
CreatePen
RoundRect
Ellipse
Polygon
CreateBitmap
CreatePatternBrush
MoveToEx
LineTo
ExtTextOutW
TextOutW
ExtTextOutA
TextOutA
GetClipRgn
Rectangle
GetTextMetricsA
GetTextExtentPointW
GetTextExtentPointA
SetViewportOrgEx
SetDIBitsToDevice
CreateDIBitmap
GetDIBits
GetSystemPaletteEntries
CreateMetaFileW
CreateMetaFileA
CreateEnhMetaFileW
CreateEnhMetaFileA
CloseMetaFile
CloseEnhMetaFile
StartPage
SetWindowExtEx
SetViewportExtEx
StartDocA
SetAbortProc
CreateICA
EndPage
EndDoc

kernel32

GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GlobalSize
LoadLibraryA
GetProcAddress
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
_llseek
_lread
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
GetModuleFileNameW
GetModuleFileNameA
GetModuleHandleW
GetModuleHandleA
GetTickCount
GetLocaleInfoA
GetSystemTime
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
SystemTimeToFileTime
CompareFileTime
GetVersion
ReadFile
WriteFile
CreateFileW
CreateFileA
SetFilePointer
CloseHandle
MulDiv
GetCommProperties
CreateEventA
GetLastError
SetCommTimeouts
GetCommState
SetCommState
EscapeCommFunction
ResetEvent
WaitForSingleObject
GetOverlappedResult
GetCommModemStatus
SetCommBreak
ClearCommBreak
_lopen
_lclose
FindResourceA
LoadResource
LockResource
VirtualAlloc
OutputDebugStringA
GetUserDefaultLangID
CompareStringA
IsDBCSLeadByteEx
GetStringTypeExA
CompareStringW
GetTempPathW
GetTempFileNameW
GetTempPathA
GetTempFileNameA
LoadLibraryW
DeleteFileW
DeleteFileA
CreateMutexA
ReleaseMutex
FreeLibrary
FatalAppExitA
GlobalReAlloc
GetVersionExA
GetCurrentDirectoryA
GetLocaleInfoW
FindFirstFileW
FindNextFileW
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesW
GetFileAttributesA
GetLogicalDriveStringsA
MoveFileW
MoveFileA
SetFileAttributesW
SetFileAttributesA
SetFileTime
GetWindowsDirectoryW
GetWindowsDirectoryA
GetSystemDirectoryW
GetSystemDirectoryA
RemoveDirectoryW
RemoveDirectoryA
SetCurrentDirectoryA
CopyFileW
CopyFileA
CreateDirectoryW
CreateDirectoryA
GetShortPathNameW
GetShortPathNameA
GetLogicalDrives
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
IsBadReadPtr
Sleep
IsValidCodePage
GetACP
GetCommandLineW
GetCommandLineA
GetEnvironmentVariableA
GetEnvironmentVariableW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetFileSize
SetEndOfFile
FlushFileBuffers
GetLocalTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetCurrentProcessId
OpenFileMappingA
MapViewOfFile
CreateFileMappingA
SetEvent
UnmapViewOfFile
GetStartupInfoA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetCurrentProcess
DuplicateHandle
GetStdHandle
RtlUnwind
GetEnvironmentStrings
FreeEnvironmentStringsA

oleaut32

OleLoadPicturePath
OleCreatePictureIndirect
SysAllocString
SysFreeString

shell32

DragQueryFileA
DragQueryFileW
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder

user32

GetAsyncKeyState
WindowFromDC
GetSysColor
GetDC
ReleaseDC
SetRect
FillRect
DrawFocusRect
InvalidateRect
SetFocus
OffsetRect
DestroyCursor
LoadCursorA
LoadImageA
CreateCursor
SetCursor
wsprintfA
AdjustWindowRect
CreateWindowExW
CreateWindowExA
GetSystemMenu
EnableMenuItem
SetMenu
GetParent
SendMessageA
DestroyWindow
GetWindowRect
ScreenToClient
MoveWindow
IsWindowVisible
ShowWindow
GetTopWindow
GetWindow
GetForegroundWindow
GetActiveWindow
IsZoomed
BringWindowToTop
BeginPaint
EndPaint
GetClientRect
ClientToScreen
SetWindowTextW
SetWindowTextA
IsIconic
SystemParametersInfoA
EnumWindows
EnumChildWindows
GetMessageTime
GetMessagePos
GetClassNameA
GetKeyState
GetCursorPos
LoadIconA
RegisterClassW
RegisterClassA
MessageBeep
SetForegroundWindow
TrackPopupMenu
GetSystemMetrics
DrawFrameControl
OpenClipboard
EmptyClipboard
GetClipboardData
IsClipboardFormatAvailable
SetClipboardData
RegisterClipboardFormatA
GetSubMenu
GetMenuItemInfoA
GetMenuStringW
GetMenuStringA
SetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
EnableWindow
GetPropA
UpdateWindow
FrameRect
ValidateRect
SendMessageW
DefWindowProcA
GetWindowLongA
SetWindowLongA
RedrawWindow
GetSysColorBrush
GetScrollInfo
GetScrollPos
GetScrollRange
SetScrollPos
SetScrollRange
SetScrollInfo
KillTimer
SetTimer
PeekMessageA
TranslateMessage
DispatchMessageA
TranslateMDISysAccel
CreateMDIWindowW
CreateMDIWindowA
FindWindowW
FindWindowA
PostMessageA
GetMenu
DrawMenuBar
GetMenuState
WindowFromPoint
GetMessageA
SetCapture
ReleaseCapture
CharUpperBuffA
CharLowerBuffA
MessageBoxA
MessageBoxW
DrawTextW
DrawTextA
DrawIcon
ScrollWindow
DragDetect
SetParent
SetWindowPos
VkKeyScanA
GetMenuItemCount
CreateMenu
DestroyMenu
GetMenuItemInfoW
SetMenuItemInfoW
SetMenuItemInfoA
GetMenuItemID
DeleteMenu
CreatePopupMenu
InsertMenuW
InsertMenuA
CheckMenuItem
GetDoubleClickTime
GetWindowLongW
SetWindowLongW
CallWindowProcW
CallWindowProcA
DefFrameProcW
DefFrameProcA
DefMDIChildProcW
DefMDIChildProcA
DefWindowProcW
CloseClipboard
MapVirtualKeyA
GetKeyNameTextW
GetKeyNameTextA

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueW
VerQueryValueA

winmm

midiOutOpen
midiOutClose
midiOutShortMsg
mciSendStringA

comdlg32

ChooseColorA
GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameW
GetSaveFileNameA
PageSetupDlgA
PrintDlgA

ole32

RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleInitialize
OleUninitialize
CoInitialize
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoTaskMemFree

Exports

Exports

AppAutoCloseGetter
AppAutoCloseSetter
AppBalloonHelpVisibleGetter
AppBalloonHelpVisibleSetter
AppDockItemGetter
AppFolderItemGetter
AppIntegerVersionStuffGetter
AppMenuBarGetter
AppMenuBarSetter
AppStringVersionStuffGetter
AppendStyledTextRun
ApplicationAddMenuHandler
ApplicationNewDocument
ApplicationOpenDocument
ApplicationQuit
ArcStartAngleSetter
BinaryStreamClose
BinaryStreamEOF
BinaryStreamFlush
BinaryStreamGetLength
BinaryStreamGetPosition
BinaryStreamLastErrorGetter
BinaryStreamRead
BinaryStreamReadBoolean
BinaryStreamReadByte
BinaryStreamReadDouble
BinaryStreamReadFloat
BinaryStreamReadLong
BinaryStreamReadPString
BinaryStreamReadShort
BinaryStreamSetLength
BinaryStreamSetPosition
BinaryStreamWrite
BinaryStreamWriteBoolean
BinaryStreamWriteByte
BinaryStreamWriteDouble
BinaryStreamWriteFloat
BinaryStreamWriteLong
BinaryStreamWritePString
BinaryStreamWriteShort
BitwiseAnd
BitwiseOr
BitwiseXor
CheckBoxDataFieldSetter
CheckBoxDataSourceGetter
CheckBoxDataSourceSetter
ControlAddMenuHandler
ControlClose
ControlInitialParentSetter
ControlParentGetter
ControlParentSetter
ControlTabPanelIndexSetter
ControlVisibleSetter
ConvertObjectToBoolean
ConvertObjectToColor
ConvertObjectToDate
ConvertObjectToDouble
ConvertObjectToInt
ConvertObjectToString
ConvertPtrToMemoryBlock
ConvertToWin32KeyCode
CreateApplicationClass
CreateArray
CreateControlClasses
CreateInstance
CursorFieldBooleanValueGetter
CursorFieldBooleanValueSetter
CursorFieldValueGetter
CursorFieldValueSetter
CursorMoveFirst
CursorMoveLast
CursorMovePrev
CurveGetControlX
CurveGetControlY
CurveOrderSetter
CurveSetControlX
CurveSetControlY
DaemonizeApp
DataControlActionDestructor
DataControlActionPerformAction
DataControlAddNewRecord
DataControlAlignSetter
DataControlAttributeSetter
DataControlCaptionSetter
DataControlClearBoundControls
DataControlColorSetter
DataControlControlBindSetter
DataControlDBGetter
DataControlDBSetter
DataControlDeleteRecord
DataControlEncodingGetter
DataControlEncodingSetter
DataControlFieldCount
DataControlFontSetter
DataControlGetBoundPart
DataControlGetConstant
DataControlGetCursor
DataControlGetField
DataControlMoveFirst
DataControlMoveLast
DataControlMoveNext
DataControlMovePrev
DataControlMoveTo
DataControlNewRecord
DataControlQuerySetter
DataControlReadOnlySetter
DataControlRecordLockedGetter
DataControlRepopulateData
DataControlRow
DataControlRowCount
DataControlRunQuery
DataControlSizeSetter
DataControlTableNameSetter
DataControlUpdateRecord
DatabaseConnect
DateCompare
DateToVariant
DebugBreakASAP
DebugRuntimeInit
DecodeBackslashEscape
DesignAddDataSource
DisableAutoWaitCursor
DockItemIconGraphicsGetter
DockItemIconUpdate
DockItemResetIcon
DragItemAddItem
DragItemFolderItemAvailable
DragItemGetMacData
DragItemMacDataAvailable
DragItemNextItem
DragItemPictureAvailable
DragItemSetMacData
DragItemSetPrivateMacData
DragItemTextAvailable
EditAlignmentSetter
EditDataFieldSetter
EditDataSourceGetter
EditDataSourceSetter
EditMaskSetter
EditScrollPositionXGetter
EditScrollPositionXSetter
EditSelAlignmentGetter
EditSelAlignmentSetter
EnableAutoWaitCursor
EnableCoreGraphicsTextOnOSX
EncodeBackslashEscape
EncodingsGetFromCode
EncodingsGetter
FPToInt
FigureShapeAddCubic
FigureShapeAddLine
FigureShapeAddQuad
FileDisplayNameGetter
FileExtensionVisibleGetter
FileExtensionVisibleSetter
FileShellPathGetter
FillSpawnTypeTable
FireSerialError
FolderChild
FolderItemAppendTextFile
FolderItemCopyCtor
FolderItemCopyFileTo
FolderItemCreateAsFolder
FolderItemCreateBinaryFile
FolderItemCreateTextFile
FolderItemCreateVirtualVolume
FolderItemDelete
FolderItemDialogShowModal
FolderItemDialogShowWithin
FolderItemFromPath
FolderItemGetImp
FolderItemGetLastError
FolderItemGetRelative
FolderItemGetSaveInfo
FolderItemGroupGetter
FolderItemGroupSetter
FolderItemImpMakeFileExecutable
FolderItemIsCurrentlyReadable
FolderItemIsCurrentlyWriteable
FolderItemItem
FolderItemLaunch
FolderItemMoveFileTo
FolderItemOpenAsVirtualVolume
FolderItemOpenBinaryFile
FolderItemOpenImage
FolderItemOpenJPEG
FolderItemOpenMovie
FolderItemOpenResourceMovie
FolderItemOpenSound
FolderItemOpenStyledEditField
FolderItemOpenTextFile
FolderItemOpenVectorImage
FolderItemOwnerGetter
FolderItemOwnerSetter
FolderItemPathCtor
FolderItemPathCtorNoParams
FolderItemSaveAsJPEG
FolderItemSaveAsPicture
FolderItemSaveStyledEditField
FolderItemSetLastError
FolderItemTrueItem
FolderTrueChild
GetControlHWND
GetControlVisible
GetDatabaseRecordBlobColumn
GetDatabaseRecordBooleanColumn
GetDocumentsFolder
GetEncodingFromTEObject
GetEncodingObjectFromCode
GetEncodingsObject
GetEventInstance
GetIDERegistryKey
GetInterfaceRoutine
GetMacInputDriverRef
GetMacOutputDriverRef
GetNetworkInterfaceObject
GetPosixDescriptor
GetSpecialFolder
GetSpecialFolderFromCode
GetTabPanelVisible
GetWin32DriverHandle
GlobalShowURL
Group2DAppend
Group2DCount
Group2DGetItem
Group2DInsert
Group2DRemoveByIndex
Group2DRemoveByObject
Group2DSetItem
IPCSocketClose
IPCSocketConnect
IPCSocketEOF
IPCSocketFlush
IPCSocketHadError
IPCSocketIsConnected
IPCSocketLastErrorGetter
IPCSocketListen
IPCSocketLookahead
IPCSocketPoll
IPCSocketRead
IPCSocketReadAll
IPCSocketWrite
InitMessageDialogClasses
InsertStyledTextRun
IntToFP
IsCMMClick
IsNull
KeyChainAddPassword
KeyChainConstructor
KeyChainFindPassword
KeyChainItemAttributeGetter
KeyChainItemAttributeSetter
KeyChainItemDelete
KeyChainLock
KeyChainUnlock
LineStateGetter
LineStateSetter
ListEnableDragReorderSetter
ListboxCreatePane
ListboxDataFieldSetter
ListboxDataSourceGetter
ListboxDataSourceSetter
LoadPlugins
LookupObjectDefinition
MDBBooleanGetter
MDBBooleanSetter
MDBCaptionGetter
MDBCaptionSetter
MDButtonGetter
MDIWindowHandleGetter
MDIWindowMaximize
MDIWindowMinimize
MDIWindowPosGetter
MDIWindowPosSetter
MDIWindowRestore
MDIWindowTitleGetter
MDIWindowTitleSetter
MDIWindowVisibleGetter
MDIWindowVisibleSetter
MDIconSetter
MacNonIDEIntVer
MacNonIDEStringVer
MemoryBlockAddOperator
MemoryBlockCompareOperator
MemoryBlockFromStringOperator
MemoryBlockLeftB
MemoryBlockMidB2
MemoryBlockMidB3
MemoryBlockRightB
MemoryBlockToStringOperator
MenuBarInstallClone
MessageDialogShowModal
MessageDialogShowModalWithin
NetworkLookupDNSAddress
NetworkLookupIPAddress
NetworkSafeToConnect
OLEContainerContentGetter
OLEContainerCreateObject
OLEContainerDestroyObject
OLEContainerShowPropertyPages
OLEObjectInvoke
OLEObjectInvokeNoReturnValue
OLEObjectInvokeWithParams
OLEObjectInvokeWithParamsNoReturnValue
OLEObjectNewInstanceConstructor
OLEObjectNoReturnOperatorLookup
OLEObjectOperatorAdd
OLEObjectOperatorAddRight
OLEObjectOperatorCompare
OLEObjectOperatorConvert
OLEObjectOperatorDivide
OLEObjectOperatorDivideRight
OLEObjectOperatorIntegerDivide
OLEObjectOperatorIntegerDivideRight
OLEObjectOperatorLookup
OLEObjectOperatorLookupSetter
OLEObjectOperatorModulo
OLEObjectOperatorModuloRight
OLEObjectOperatorMultiply
OLEObjectOperatorMultiplyRight
OLEObjectOperatorNegate
OLEObjectOperatorSubtract
OLEObjectOperatorSubtractRight
OLEObjectProgramIDConstructor
OLEObjectPropertyGetter
OLEObjectPropertySetter
OLEObjectPropertySetterWithValue
OLEParameterValueArraySetter
OLEParameterValueGetter
OLEParameterValueSetter
Object2DDoubleSetter
PacketsAvailableGetter
PagePanelValueGetter
PagePanelValueSetter
PictureConstructor
PictureDepthGetter
PictureHResGetter
PictureHResSetter
PictureVResGetter
PictureVResSetter
PixmapShapeConstructor
PixmapShapeImageCtor
PluginDefaultControlCaption
PluginDefaultControlFont
PluginDefaultControlFontSize
PluginGetControlBounds
PluginInterpretConstantValue
PluginMarkSocketUsage
PluginNewInstance
PluginNewOfSameClass
PluginRegisterClass
PluginRegisterClassExtension
PluginRegisterControl
PluginRegisterDBCursor
PluginRegisterDBEngine
PluginRegisterInterface
PluginRegisterMethod
PluginRegisterModule
PopupDataFieldSetter
PopupDataSourceGetter
PopupDataSourceSetter
PtrToMemoryBlock
QTInstalledGetter
RB_ApplicationQuit
REALBuildPictureFromBuffer
REALBuildPictureFromDIB
REALBuildPictureFromGWorld
REALBuildPictureFromPictureDescription
REALBuildString
REALConstructDBDatabase
REALConvertString
REALCountClassMethods
REALCountClassProperties
REALDBConnectionDialogAddField
REALDBConnectionDialogCreate
REALDBConnectionDialogDelete
REALDBConnectionDialogShow
REALDatabaseConnect
REALDatabaseCreateDatabaseFile
REALDatabaseFolderItemGetter
REALDatabaseFolderItemSetter
REALDatabaseSetError
REALGetClassMethod
REALGetClassProperty
REALGetCommandLineForUnix
REALGetControlEnabled
REALGetControlFocus
REALGetControlGraphics
REALGetControlGraphicsWithDC
REALGetControlHandle
REALGetControlName
REALGetControlParent
REALGetCursorFromREALdbCursor
REALGetDBDatabaseName
REALGetDBFromREALdbDatabase
REALGetDBHost
REALGetDBPassword
REALGetDBUserName
REALGetFontEncoding
REALGetGraphicsFontStyle
REALGetPictureMask
REALGetProjectFolder
REALGetPropValueBool
REALGetPropValueDouble
REALGetPropValueInt
REALGetPropValueObject
REALGetPropValueString
REALGetRBVersion
REALGetStringEncoding
REALGetWin32Charset
REALGetWindowHandle
REALGraphicsDC
REALInDebugMode
REALInvalidateControl
REALInvalidateControlRect
REALIsHIViewWindow
REALLoadGlobalMethod
REALLoadObjectMethod
REALLockObject
REALLockPictureDescription
REALLockString
REALPictureClearCache
REALSetAccelerator
REALSetControlFocus
REALSetDBIsConnected
REALSetGraphicsStyle
REALSetMovieMovie
REALSetPropValueBoolean
REALSetPropValueDouble
REALSetPropValueInt
REALSetPropValueObject
REALSetPropValueString
REALSetSpecialBackground
REALSetStringEncoding
REALStripAmpersands
REALUnlockObject
REALUnlockString
REALYieldToRB
REALdbDatabaseFromDBDatabase
REALenterMovies
REALinRuntime
REALpathFromFolderItem
RaiseExceptionClass
RaiseIllegalCastException
RaiseNilObjectException
RaiseOutOfBoundsException
RandomConstructor
RandomNumber
RandomNumberInRangeMinMax
RandomNumberLessThan
RandomSeedSetter
RandomizeSeed
RangeEndPosGetter
RecordSetColumnType
RecordSetRecordCount
RectControlDefaultConstructor
RectShapeContains
RegisterDataSource
RegisterDataSourceInterface
RegisterPluginVersion
RegistryItemAddFolder
RegistryItemChild
RegistryItemCopyCtor
RegistryItemDefaultValueGetter
RegistryItemDefaultValueSetter
RegistryItemDelete
RegistryItemFolderCountGetter
RegistryItemItem
RegistryItemKeyCountGetter
RegistryItemKeyTypeGetter
RegistryItemNameGetter
RegistryItemNumValueGetter
RegistryItemNumValueSetter
RegistryItemPathCtor
RegistryItemPathGetter
RegistryItemValueGetter
RegistryItemValueSetter
RegistryParentGetter
RemoteDebuggerStartup
RemoveCachedScreenInfo
RemoveStyledTextRun
RunFireSerial
RuntimeACos
RuntimeASin
RuntimeATan
RuntimeATan2
RuntimeAbs
RuntimeAddIntegerScriptParam
RuntimeAddString
RuntimeAddStringScriptParam
RuntimeAllocatePluginEntrypointsTable
RuntimeBackgroundTask
RuntimeBeep
RuntimeBin
RuntimeBitwiseAnd
RuntimeBitwiseOr
RuntimeBitwiseShiftLeft
RuntimeBitwiseShiftRight
RuntimeBitwiseXor
RuntimeCMY

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 83KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cad0839de65962ce5957fdad1d724842

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

oleaut32

shell32

user32

version

winmm

comdlg32

ole32

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 14KB - Virtual size: 13KB

.exc Size: 512B - Virtual size: 340B

.data Size: 309KB - Virtual size: 309KB

.CRT Size: 512B - Virtual size: 112B

.rsrc Size: 7KB - Virtual size: 7KB

.idata Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 83KB

.edata Size: 56KB - Virtual size: 56KB

.reloc Size: 84KB - Virtual size: 83KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 14KB - Virtual size: 13KB

.exc
Size: 512B - Virtual size: 340B

.data
Size: 309KB - Virtual size: 309KB

.CRT
Size: 512B - Virtual size: 112B

.rsrc
Size: 7KB - Virtual size: 7KB

.idata
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 83KB

.edata
Size: 56KB - Virtual size: 56KB

.reloc
Size: 84KB - Virtual size: 83KB