0d82fa30f43613736e31c457ffe07a22_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d82fa30f43613736e31c457ffe07a22_JaffaCakes118
Size

152KB
MD5

0d82fa30f43613736e31c457ffe07a22
SHA1

6977307df3e69759a9ab0559fdceb2e4b5281987
SHA256

4c061dd21e48448f2185bf0d3550173d3467cb99a982dbd51b46997f640df718
SHA512

503a2b9a529863e6f87d9dc2d3882de0d66b333d4c39e37787c20118a6d719702ebe6537631063d4445e8703c3758e4a85e844e0f744a11ad21c5452bdb36886
SSDEEP

3072:T22222btHqJhokwM9uKr6aymYdNz1+UxZOg/RZnGDJ:oQJhLdymCzw2OgLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d82fa30f43613736e31c457ffe07a22_JaffaCakes118

Files

0d82fa30f43613736e31c457ffe07a22_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d2928707b5004b8587dba781bfa828c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\VS_BUILD\Accelerator\CCS_20120322\Module\OHRMSClientd\OHRMSClientd _0.1.2012.4241\0bin_release\OHRMSClientd.pdb

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

mfc80

ord3946
ord2533
ord1617
ord2646
ord1620
ord3441
ord2540
ord5912
ord2862
ord6724
ord2714
ord4307
ord354
ord2835
ord1551
ord605
ord2731
ord1670
ord2537
ord1671
ord5200
ord2020
ord1599
ord4890
ord1655
ord4735
ord1656
ord4212
ord1964
ord5182
ord5175
ord1362
ord3641
ord4967
ord3345
ord6277
ord3802
ord6279
ord4580
ord1522
ord1903
ord2172
ord2178
ord2405
ord5203
ord2387
ord2385
ord2403
ord2415
ord2392
ord2408
ord2413
ord2396
ord2398
ord2400
ord2394
ord2410
ord2390
ord934
ord930
ord932
ord928
ord923
ord5233
ord5235
ord3718
ord3317
ord572
ord741
ord1794
ord6067
ord1643
ord2168
ord1581
ord3292
ord715
ord2095
ord1591
ord6725
ord5915
ord1402
ord4240
ord5214
ord2991
ord4261
ord1123
ord2468
ord5403
ord5563
ord911
ord1084
ord1098
ord762
ord371
ord1175
ord384
ord629
ord5089
ord2903
ord1482
ord5323
ord1401
ord382
ord266
ord386
ord631
ord556
ord744
ord1187
ord2280
ord2288
ord2748
ord2751
ord6297
ord5331
ord5097
ord5346
ord3255
ord1452
ord557
ord745
ord5715
ord5529
ord6138
ord1185
ord2372
ord6286
ord1181
ord5320
ord6006
ord3139
ord3719
ord4244
ord3709
ord5152
ord2644
ord1908
ord3949
ord5073
ord4486
ord6275
ord4262
ord4185
ord3403
ord4722
ord4282
ord1600
ord265
ord297
ord578
ord310
ord2322
ord2469
ord907
ord304
ord1486
ord2271
ord2272
ord4108
ord781
ord4109
ord3997
ord1489
ord299
ord784
ord6703
ord764
ord5960
ord1439
ord912

msvcr80

?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
printf
memcpy_s
fread
fopen_s
strtol
strstr
strcat_s
strcpy_s
fopen
atoi
_strtoi64
free
malloc
fclose
ferror
fwrite
memcpy
memset
__clean_type_info_names_internal

kernel32

CreateDirectoryA
GetACP
GetVersionExA
GetThreadLocale
GetTickCount
GetTempPathA
GetLongPathNameA
SetFileAttributesA
DeleteFileA
GetLocalTime
CreateThread
GetExitCodeThread
Sleep
CloseHandle
GetModuleFileNameA
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA

user32

SendMessageA
SetTimer
EnableWindow
KillTimer

ws2_32

recv
WSACleanup
socket
htons
select
WSAStartup
send
closesocket
connect
inet_addr
WSAGetLastError

Exports

Exports

??0CMRXModelDownloadStatus@@QAE@ABV0@@Z
??0CMRXModelDownloadStatus@@QAE@XZ
??0CMRXModelStatus@@QAE@ABV0@@Z
??0CMRXModelStatus@@QAE@XZ
??0COHRMSClientdObj@@QAE@XZ
??1CMRXModelDownloadStatus@@QAE@XZ
??1CMRXModelStatus@@QAE@XZ
??1COHRMSClientdObj@@QAE@XZ
??4CMRXModelDownloadStatus@@QAEAAV0@ABV0@@Z
??4CMRXModelStatus@@QAEAAV0@ABV0@@Z
?AddComment@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?CMD_CopyPC2RCFile@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?CMD_CopyPC2RCFileOneTime@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?CMD_CopyRC2PCFile@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0HH@Z
?CMD_CopyRC2PCFileOneTime@COHRMSClientdObj@@QAEHH@Z
?CMD_CopyRC2PCFileOneTime@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H@Z
?CMD_CopyRC2RCFile@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?CMD_CopyRC2RCFolder@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?CMD_DelFile@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?CMD_DelFolder@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?CMD_FindFolder@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?CMD_GetFileCntInFolder@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAH@Z
?CMD_MakeFile@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?CMD_MakeFolder@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?CMD_MoveRC2RCFolder@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?CMD_TargetCreateProc@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?CMD_TargetKillProc@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?CMD_TargetRCRestart@COHRMSClientdObj@@QAEHXZ
?CompareProductID@COHRMSClientdObj@@IAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?DeleteComment@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?DeleteFileByInfoFile@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?DoUpLoadVerfile@COHRMSClientdObj@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00@Z
?Down_AddFile@COHRMSClientdObj@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H@Z
?Down_DoModal@COHRMSClientdObj@@QAEHPAV1@@Z
?Down_EndSignal@COHRMSClientdObj@@QAEHXZ
?Down_GetStatus@COHRMSClientdObj@@QAEHXZ
?Down_Init@COHRMSClientdObj@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?Down_InstallUI@COHRMSClientdObj@@QAEHPAUHWND__@@H@Z
?Down_IsDoing@COHRMSClientdObj@@QAEHXZ
?Down_Start@COHRMSClientdObj@@QAEHXZ
?Down_StartSignal@COHRMSClientdObj@@QAEHH@Z
?Down_Thread@COHRMSClientdObj@@KGKPAX@Z
?Down_ThreadStart@COHRMSClientdObj@@IAEHXZ
?Down_ThreadStop@COHRMSClientdObj@@IAEHXZ
?Down_UseTempTarget@COHRMSClientdObj@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?Download_Do@COHRMSClientdObj@@IAEHXZ
?EditComment@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H0@Z
?GetComments@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAV?$CArray@EE@@AAVCStringArray@@@Z
?GetConsolObj@COHRMSClientdObj@@QAEPAXXZ
?GetFeedbackStatus@COHRMSClientdObj@@QAEHPAV?$CArray@PAVCMRXModelDownloadStatus@@PAV1@@@@Z
?GetIRMFirmFileVer@COHRMSClientdObj@@IAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAV23@@Z
?GetRMSDowmloadStatus@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00@Z
?GetRMSInfo@COHRMSClientdObj@@QAE?AUstRMS_Info@1@XZ
?GetStatus@COHRMSClientdObj@@IAEHXZ
?GetStatus@COHRMSClientdObj@@QAEHPAV?$CArray@PAVCMRXModelStatus@@PAV1@@@H@Z
?Init@COHRMSClientdObj@@QAEXXZ
?InitCommon@COHRMSClientdObj@@IAEXXZ
?InitDown@COHRMSClientdObj@@IAEXXZ
?InitLearnIR@COHRMSClientdObj@@IAEXXZ
?InitPath@COHRMSClientdObj@@IAEXXZ
?InitRMS@COHRMSClientdObj@@IAEXXZ
?InitTestIR@COHRMSClientdObj@@IAEXXZ
?InitUpload@COHRMSClientdObj@@IAEXXZ
?IsDuplicteData@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00@Z
?LearnIR_GetData@COHRMSClientdObj@@QAEHPAEAAK@Z
?LearnIR_GetStatus@COHRMSClientdObj@@QAEHXZ
?LearnIR_Init@COHRMSClientdObj@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?LearnIR_InstallUI@COHRMSClientdObj@@QAEHPAUHWND__@@H@Z
?LearnIR_IsDoing@COHRMSClientdObj@@QAEHXZ
?LearnIR_Start@COHRMSClientdObj@@QAEHH@Z
?LearnIR_Stop@COHRMSClientdObj@@QAEHXZ
?RMSIsIndividualInfoFile@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?RMS_Connect@COHRMSClientdObj@@QAEHXZ
?RMS_Disconnect@COHRMSClientdObj@@QAEHXZ
?RMS_SetLoginInfo@COHRMSClientdObj@@QAEHUstRMS_Info@1@@Z
?RMSpeedChk_CopyPC2RCFileOneTime@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAK@Z
?RMSpeedChk_SVR2RC@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAKH@Z
?SYS_ActionStop@COHRMSClientdObj@@QAEHXZ
?SYS_BlockSleep@COHRMSClientdObj@@QAEHH@Z
?SYS_DiscoveryClientDevice@COHRMSClientdObj@@QAEHPAVCMRXModelStatus@@@Z
?SYS_EndDownload@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SYS_EndDownloadSignal@COHRMSClientdObj@@QAEHXZ
?SYS_EndUpload@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SYS_GetBrightness@COHRMSClientdObj@@QAEHAAH@Z
?SYS_GetBtnLight@COHRMSClientdObj@@QAEHAAH0@Z
?SYS_GetMacaddress@COHRMSClientdObj@@QAEHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SYS_GetNetStatus@COHRMSClientdObj@@QAEHAAHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SYS_GetNetwork@COHRMSClientdObj@@QAEHAAHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@111@Z
?SYS_GetProductID@COHRMSClientdObj@@QAEHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SYS_GetRMSDownloadStatus@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?SYS_GetSleepSetting@COHRMSClientdObj@@QAEHAAH0@Z
?SYS_GetSound@COHRMSClientdObj@@QAEHAAH@Z
?SYS_GetStorageLastNumber@COHRMSClientdObj@@QAEHAAH@Z
?SYS_GetSystemInfo@COHRMSClientdObj@@QAEHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SYS_GetTime@COHRMSClientdObj@@QAEHAAEAAH11111@Z
?SYS_GetVersion@COHRMSClientdObj@@QAEHHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAV23@@Z
?SYS_IRMFirmUpdate@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SYS_LicenseGet@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?SYS_Reboot@COHRMSClientdObj@@QAEHXZ
?SYS_SetBrightness@COHRMSClientdObj@@QAEHH@Z
?SYS_SetBtnLight@COHRMSClientdObj@@QAEHHH@Z
?SYS_SetFactoryDefault@COHRMSClientdObj@@QAEHXZ
?SYS_SetNetwork@COHRMSClientdObj@@QAEHHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@000@Z
?SYS_SetSleepSetting@COHRMSClientdObj@@QAEHHH@Z
?SYS_SetSound@COHRMSClientdObj@@QAEHH@Z
?SYS_SetTime@COHRMSClientdObj@@QAEHEHHHHHH@Z
?SYS_StartDownload@COHRMSClientdObj@@QAEHH@Z
?SYS_StartDownloadSignal@COHRMSClientdObj@@QAEHH@Z
?SYS_StartUpload@COHRMSClientdObj@@QAEHXZ
?SYS_StopDownload@COHRMSClientdObj@@QAEHXZ
?SYS_StopUpload@COHRMSClientdObj@@QAEHXZ
?SetStatus@COHRMSClientdObj@@IAEXH@Z
?TestIR_Do@COHRMSClientdObj@@QAEHPAEEH@Z
?TestIR_DoMoal@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?TestIR_GetStatus@COHRMSClientdObj@@QAEHXZ
?TestIR_Init@COHRMSClientdObj@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HEEH@Z
?TestIR_InstallUI@COHRMSClientdObj@@QAEHPAUHWND__@@H@Z
?TestIR_IsDoing@COHRMSClientdObj@@QAEHXZ
?Test_IP@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@EPAEEGHKHEK@Z
?Test_IR@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@EPAEHEHHKH@Z
?Test_RFTX@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@EPAEGHHHK@Z
?Test_RFTX_MRX1@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@EPAEHHK@Z
?Test_Relay@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@EHHKH@Z
?Test_Serial@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@EPAEHEHPAUURC_SERIAL_INFO@1@EKH@Z
?Test_Stream_Select@COHRMSClientdObj@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAEKEEK@Z
?UISet_Progress@COHRMSClientdObj@@QAEHHH@Z
?UISet_Progress@COHRMSClientdObj@@QAEHHK@Z
?UISet_Text@COHRMSClientdObj@@QAEHHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?UITest_Addion@COHRMSClientdObj@@QAEHXZ
?UITest_DoModal@COHRMSClientdObj@@QAEHXZ
?UITest_GetStatus@COHRMSClientdObj@@QAEHXZ
?UITest_Init@COHRMSClientdObj@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?UITest_InstallUI@COHRMSClientdObj@@QAEHPAUHWND__@@H@Z
?UITest_IsDoing@COHRMSClientdObj@@QAEHXZ
?UITest_Start@COHRMSClientdObj@@QAEHXZ
?UInit_Progress@COHRMSClientdObj@@QAEHHHH@Z
?UInit_Progress@COHRMSClientdObj@@QAEHHKK@Z
?UInit_Text@COHRMSClientdObj@@QAEHH@Z
?UP_AddFile@COHRMSClientdObj@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?Up_DoModal@COHRMSClientdObj@@QAEHPAV1@@Z
?Up_GetStatus@COHRMSClientdObj@@QAEHXZ
?Up_Init@COHRMSClientdObj@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00@Z
?Up_InstallUI@COHRMSClientdObj@@QAEHPAUHWND__@@H@Z
?Up_IsDoing@COHRMSClientdObj@@QAEHXZ
?Up_Start@COHRMSClientdObj@@QAEHXZ
?Up_Thread@COHRMSClientdObj@@KGKPAX@Z
?Up_ThreadStart@COHRMSClientdObj@@IAEHXZ
?Up_ThreadStop@COHRMSClientdObj@@IAEHXZ
?Upload_Do@COHRMSClientdObj@@IAEHXZ
?Verify_RMSInfo@COHRMSClientdObj@@QAEHUstRMS_Info@1@@Z

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d2928707b5004b8587dba781bfa828c6

Headers

File Characteristics

PDB Paths

Imports

version

mfc80

msvcr80

kernel32

user32

ws2_32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 83KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 84KB - Virtual size: 83KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 12KB - Virtual size: 11KB