0ec35d4fe5ecfc469d07b8045bcd04a8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0ec35d4fe5ecfc469d07b8045bcd04a8_JaffaCakes118
Size

4.8MB
MD5

0ec35d4fe5ecfc469d07b8045bcd04a8
SHA1

c4b52829b24d51d22944fd3db6013398fb4f9af4
SHA256

563d0e670d8ff0fb4cdf870452b30e945ef34c01f9c4d41a52d44e0066d2ce6b
SHA512

9923ff7a29d0093462423d61f854bab6cb11866f8e6fc33aa4e1719e90c5d4ced69aee33dc5ebdfbf80116a1eadfbdf45ab0f0774ab4cf7126d595a3268609d2
SSDEEP

98304:kNs7J1CyafhVhJDWoB5um+K5YddJJ27HksVdeWinY6LE4hrJPtlSz:kGATMvh3J27HkKd0TlJPPK

Score

7^/10

aspackv2 upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 2 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/Archivarius 3000/A3.dll	acprotect
static1/unpack001/Archivarius 3000/unrar.dll	acprotect

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/Archivarius 3000/AI.dll	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Archivarius 3000/unrar.dll	upx

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Archivarius 3000/A3.dll
unpack001/Archivarius 3000/A3Shell.dll
unpack001/Archivarius 3000/AI.dll
unpack001/Archivarius 3000/Archivarius3000.exe
unpack001/Archivarius 3000/unrar.dll
unpack002/out.upx

Files

0ec35d4fe5ecfc469d07b8045bcd04a8_JaffaCakes118
.rar
Archivarius 3000/A3.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

___CPPdebugHook
a

Sections

Size: - Virtual size: 484KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 161KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Archivarius 3000/A3Shell.dll
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Archivarius 3000/AI.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

a

Sections

Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Archivarius 3000/Archivarius3000.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 1.5MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 908KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 129KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Archivarius 3000/Data/Belarusian.dat
Archivarius 3000/Data/Bulgarian.dat
Archivarius 3000/Data/Croatian.dat
Archivarius 3000/Data/Czech.dat
Archivarius 3000/Data/Danish.dat
Archivarius 3000/Data/Dutch.dat
Archivarius 3000/Data/English.dat
Archivarius 3000/Data/French.dat
Archivarius 3000/Data/German.dat
Archivarius 3000/Data/Greek.dat
Archivarius 3000/Data/Hungarian.dat
Archivarius 3000/Data/Italian.dat
Archivarius 3000/Data/Polish.dat
Archivarius 3000/Data/Portuguese.dat
Archivarius 3000/Data/Russian.dat
Archivarius 3000/Data/Spanish.dat
Archivarius 3000/Data/StopList.txt
.vbs
Archivarius 3000/Data/Swedish.dat
Archivarius 3000/Data/Ukrainian.dat
Archivarius 3000/Debug.protocol
Archivarius 3000/Help/Dutch/About.htm
.html
Archivarius 3000/Help/Dutch/Contacts.htm
.html
Archivarius 3000/Help/Dutch/Create.htm
.html
Archivarius 3000/Help/Dutch/Features.htm
.html
Archivarius 3000/Help/Dutch/Index.htm
.html
Archivarius 3000/Help/Dutch/Indexes.htm
.html
Archivarius 3000/Help/Dutch/Keys.htm
.html
Archivarius 3000/Help/Dutch/Ordering.htm
.html
Archivarius 3000/Help/Dutch/Queries.htm
.html
Archivarius 3000/Help/Dutch/Results.htm
.html
Archivarius 3000/Help/Dutch/Scheduler.htm
.html
Archivarius 3000/Help/Dutch/Search.htm
.html
Archivarius 3000/Help/Dutch/SearchAdvanced.htm
.html
Archivarius 3000/Help/Dutch/Server.htm
.html
Archivarius 3000/Help/Dutch/Start.htm
.html
Archivarius 3000/Help/Dutch/Tips.htm
.html
Archivarius 3000/Help/English/About.htm
.html
Archivarius 3000/Help/English/Contacts.htm
Archivarius 3000/Help/English/Create.htm
.html
Archivarius 3000/Help/English/Features.htm
.html
Archivarius 3000/Help/English/Index.htm
.html
Archivarius 3000/Help/English/Indexes.htm
.html
Archivarius 3000/Help/English/Keys.htm
.html
Archivarius 3000/Help/English/Ordering.htm
.html
Archivarius 3000/Help/English/Queries.htm
.html
Archivarius 3000/Help/English/Results.htm
.html
Archivarius 3000/Help/English/Scheduler.htm
.html
Archivarius 3000/Help/English/Search.htm
.html
Archivarius 3000/Help/English/SearchAdvanced.htm
.html
Archivarius 3000/Help/English/Server.htm
.html
Archivarius 3000/Help/English/Start.htm
.html
Archivarius 3000/Help/English/Tips.htm
.html
Archivarius 3000/Help/French/About.htm
.html
Archivarius 3000/Help/French/Contacts.htm
.html
Archivarius 3000/Help/French/Create.htm
.html
Archivarius 3000/Help/French/Features.htm
.html
Archivarius 3000/Help/French/Index.htm
.html
Archivarius 3000/Help/French/Indexes.htm
.html
Archivarius 3000/Help/French/Keys.htm
.html
Archivarius 3000/Help/French/Ordering.htm
.html
Archivarius 3000/Help/French/Queries.htm
.html
Archivarius 3000/Help/French/Results.htm
.html
Archivarius 3000/Help/French/Scheduler.htm
.html
Archivarius 3000/Help/French/Search.htm
.html
Archivarius 3000/Help/French/SearchAdvanced.htm
.html
Archivarius 3000/Help/French/Server.htm
.html
Archivarius 3000/Help/French/Start.htm
.html
Archivarius 3000/Help/French/Tips.htm
.html
Archivarius 3000/Help/German/About.htm
.html
Archivarius 3000/Help/German/Contacts.htm
Archivarius 3000/Help/German/Create.htm
.html
Archivarius 3000/Help/German/Features.htm
.html
Archivarius 3000/Help/German/Index.htm
.html
Archivarius 3000/Help/German/Indexes.htm
.html
Archivarius 3000/Help/German/Keys.htm
.html
Archivarius 3000/Help/German/Ordering.htm
.html
Archivarius 3000/Help/German/Queries.htm
.html
Archivarius 3000/Help/German/Results.htm
.html
Archivarius 3000/Help/German/Scheduler.htm
.html
Archivarius 3000/Help/German/Search.htm
.html
Archivarius 3000/Help/German/SearchAdvanced.htm
.html
Archivarius 3000/Help/German/Server.htm
.html
Archivarius 3000/Help/German/Start.htm
.html
Archivarius 3000/Help/German/Tips.htm
.html
Archivarius 3000/Help/Image1.bmp
Archivarius 3000/Help/Image2.bmp
Archivarius 3000/Help/Image3.bmp
Archivarius 3000/Help/Image4.bmp
Archivarius 3000/Help/Image5.bmp
Archivarius 3000/Help/Image6.bmp
Archivarius 3000/Help/Image7.bmp
Archivarius 3000/Help/Image8.bmp
Archivarius 3000/Help/Image9.bmp
Archivarius 3000/Help/ImageA.bmp
Archivarius 3000/Help/ImageB.bmp
Archivarius 3000/Help/ImageC.bmp
Archivarius 3000/Help/Logo.bmp
Archivarius 3000/Help/Polish/About.htm
.html
Archivarius 3000/Help/Polish/Contacts.htm
.html
Archivarius 3000/Help/Polish/Create.htm
.html
Archivarius 3000/Help/Polish/Features.htm
.html
Archivarius 3000/Help/Polish/Index.htm
.html
Archivarius 3000/Help/Polish/Indexes.htm
.html
Archivarius 3000/Help/Polish/Keys.htm
.html
Archivarius 3000/Help/Polish/Ordering.htm
.html
Archivarius 3000/Help/Polish/Queries.htm
.html
Archivarius 3000/Help/Polish/Results.htm
.html
Archivarius 3000/Help/Polish/Scheduler.htm
.html
Archivarius 3000/Help/Polish/Search.htm
.html
Archivarius 3000/Help/Polish/SearchAdvanced.htm
.html
Archivarius 3000/Help/Polish/Server.htm
.html
Archivarius 3000/Help/Polish/Start.htm
.html
Archivarius 3000/Help/Polish/Tips.htm
.html
Archivarius 3000/Help/Russian/About.htm
.html
Archivarius 3000/Help/Russian/Contacts.htm
.html
Archivarius 3000/Help/Russian/Create.htm
.html
Archivarius 3000/Help/Russian/Features.htm
.html
Archivarius 3000/Help/Russian/Index.htm
.html
Archivarius 3000/Help/Russian/Indexes.htm
.html
Archivarius 3000/Help/Russian/Keys.htm
.html
Archivarius 3000/Help/Russian/Ordering.htm
.html
Archivarius 3000/Help/Russian/Queries.htm
.html
Archivarius 3000/Help/Russian/Results.htm
.html
Archivarius 3000/Help/Russian/Scheduler.htm
.html
Archivarius 3000/Help/Russian/Search.htm
.html
Archivarius 3000/Help/Russian/SearchAdvanced.htm
.html
Archivarius 3000/Help/Russian/Server.htm
.html
Archivarius 3000/Help/Russian/Start.htm
.html
Archivarius 3000/Help/Russian/Tips.htm
.html
Archivarius 3000/Help/Spanish/About.htm
.html
Archivarius 3000/Help/Spanish/Contacts.htm
.html
Archivarius 3000/Help/Spanish/Create.htm
.html
Archivarius 3000/Help/Spanish/Features.htm
.html
Archivarius 3000/Help/Spanish/Index.htm
.html
Archivarius 3000/Help/Spanish/Indexes.htm
.html
Archivarius 3000/Help/Spanish/Keys.htm
.html
Archivarius 3000/Help/Spanish/Ordering.htm
.html
Archivarius 3000/Help/Spanish/Queries.htm
.html
Archivarius 3000/Help/Spanish/Results.htm
.html
Archivarius 3000/Help/Spanish/Scheduler.htm
.html
Archivarius 3000/Help/Spanish/Search.htm
.html
Archivarius 3000/Help/Spanish/SearchAdvanced.htm
.html
Archivarius 3000/Help/Spanish/Server.htm
.html
Archivarius 3000/Help/Spanish/Start.htm
.html
Archivarius 3000/Help/Spanish/Tips.htm
.html
Archivarius 3000/Help/cardline.bmp
Archivarius 3000/Languages/Albanian.bmp
Archivarius 3000/Languages/Albanian.txt
Archivarius 3000/Languages/Arabic.bmp
Archivarius 3000/Languages/Arabic.txt
Archivarius 3000/Languages/Azeri.bmp
Archivarius 3000/Languages/Azeri.txt
Archivarius 3000/Languages/Belarusian.bmp
Archivarius 3000/Languages/Belarusian.txt
Archivarius 3000/Languages/Bulgarian.bmp
Archivarius 3000/Languages/Bulgarian.txt
Archivarius 3000/Languages/Catalan.bmp
Archivarius 3000/Languages/Catalan.txt
Archivarius 3000/Languages/ChineseSimplified.bmp
Archivarius 3000/Languages/ChineseSimplified.txt
Archivarius 3000/Languages/ChineseTraditional.bmp
Archivarius 3000/Languages/ChineseTraditional.txt
Archivarius 3000/Languages/Croatian.bmp
Archivarius 3000/Languages/Croatian.txt
Archivarius 3000/Languages/Czech.bmp
Archivarius 3000/Languages/Czech.txt
Archivarius 3000/Languages/Danish.bmp
Archivarius 3000/Languages/Danish.txt
Archivarius 3000/Languages/Dutch.bmp
Archivarius 3000/Languages/Dutch.txt
Archivarius 3000/Languages/English.bmp
Archivarius 3000/Languages/English.txt
Archivarius 3000/Languages/French.bmp
Archivarius 3000/Languages/French.txt
Archivarius 3000/Languages/Galician.bmp
Archivarius 3000/Languages/Galician.txt
Archivarius 3000/Languages/Georgian.bmp
Archivarius 3000/Languages/Georgian.txt
Archivarius 3000/Languages/German.bmp
Archivarius 3000/Languages/German.txt
Archivarius 3000/Languages/Greek.bmp
Archivarius 3000/Languages/Greek.txt
Archivarius 3000/Languages/Hungarian.bmp
Archivarius 3000/Languages/Hungarian.txt
Archivarius 3000/Languages/Indonesian.bmp
Archivarius 3000/Languages/Indonesian.txt
Archivarius 3000/Languages/Italian.bmp
Archivarius 3000/Languages/Italian.txt
Archivarius 3000/Languages/Japanese.bmp
Archivarius 3000/Languages/Japanese.txt
Archivarius 3000/Languages/Kazakh.bmp
Archivarius 3000/Languages/Kazakh.txt
Archivarius 3000/Languages/Korean.bmp
Archivarius 3000/Languages/Korean.txt
Archivarius 3000/Languages/Latvian.bmp
Archivarius 3000/Languages/Latvian.txt
Archivarius 3000/Languages/Lithuanian.bmp
Archivarius 3000/Languages/Lithuanian.txt
Archivarius 3000/Languages/Malay.bmp
Archivarius 3000/Languages/Malay.txt
Archivarius 3000/Languages/NorwegianNynorsk.bmp
Archivarius 3000/Languages/NorwegianNynorsk.txt
Archivarius 3000/Languages/Persian.bmp
Archivarius 3000/Languages/Persian.txt
Archivarius 3000/Languages/Polish.bmp
Archivarius 3000/Languages/Polish.txt
Archivarius 3000/Languages/Portuguese.bmp
Archivarius 3000/Languages/Portuguese.txt
Archivarius 3000/Languages/PortugueseBrazil.bmp
Archivarius 3000/Languages/PortugueseBrazil.txt
Archivarius 3000/Languages/Romanian.bmp
Archivarius 3000/Languages/Romanian.txt
Archivarius 3000/Languages/Russian.bmp
Archivarius 3000/Languages/Russian.txt
Archivarius 3000/Languages/Spanish.bmp
Archivarius 3000/Languages/Spanish.txt
Archivarius 3000/Languages/Swedish.bmp
Archivarius 3000/Languages/Swedish.txt
Archivarius 3000/Languages/Turkish.bmp
Archivarius 3000/Languages/Turkish.txt
Archivarius 3000/Languages/Ukrainian.bmp
Archivarius 3000/Languages/Ukrainian.txt
Archivarius 3000/Languages/UzbekCyrillic.bmp
Archivarius 3000/Languages/UzbekCyrillic.txt
Archivarius 3000/Languages/UzbekLatin.bmp
Archivarius 3000/Languages/UzbekLatin.txt
Archivarius 3000/Languages/Vietnamese.bmp
Archivarius 3000/Languages/Vietnamese.txt
Archivarius 3000/Languages/Yiddish.bmp
Archivarius 3000/Languages/Yiddish.txt
Archivarius 3000/Server/design.css
Archivarius 3000/Server/favicon.ico
Archivarius 3000/Server/help.htm
.html
Archivarius 3000/Server/index.htm
.html
Archivarius 3000/Server/report.htm
.html
Archivarius 3000/Server/results.htm
.html
Archivarius 3000/Server/script.js
.js
Archivarius 3000/Server/view.htm
.html
Archivarius 3000/StartServer.bat
Archivarius 3000/serial.txt
Archivarius 3000/unrar.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

RARCloseArchive
RARGetDllVersion
RAROpenArchive
RAROpenArchiveEx
RARProcessFile
RARProcessFileW
RARReadHeader
RARReadHeaderEx
RARSetCallback
RARSetChangeVolProc
RARSetPassword
RARSetProcessDataProc
___CPPdebugHook

Sections

UPX0
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

Size: - Virtual size: 484KB

Size: 161KB - Virtual size: 164KB

.rsrc Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 50KB - Virtual size: 50KB

DATA Size: 1024B - Virtual size: 840B

BSS Size: - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 164B

.reloc Size: 4KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 16B

Headers

File Characteristics

Exports

Exports

Sections

Size: 27KB - Virtual size: 48KB

Size: 1KB - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: 2KB - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: 2KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.data Size: 99KB - Virtual size: 100KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Sections

Size: 1.5MB - Virtual size: 4.0MB

Size: 908KB - Virtual size: 3.0MB

Size: - Virtual size: 1.8MB

Size: 13KB - Virtual size: 16KB

Size: - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: - Virtual size: 192KB

.rsrc Size: 4KB - Virtual size: 24KB

.data Size: 129KB - Virtual size: 132KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 132KB

UPX1 Size: 74KB - Virtual size: 76KB

.rsrc Size: 1KB - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 135KB - Virtual size: 136KB

.data Size: 15KB - Virtual size: 44KB

.tls Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

CODE
Size: 50KB - Virtual size: 50KB

DATA
Size: 1024B - Virtual size: 840B

BSS
Size: - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 164B

.reloc
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 16B

.rsrc
Size: 512B - Virtual size: 4KB

.data
Size: 99KB - Virtual size: 100KB

.adata
Size: - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 24KB

.data
Size: 129KB - Virtual size: 132KB

.adata
Size: - Virtual size: 4KB

UPX0
Size: - Virtual size: 132KB

UPX1
Size: 74KB - Virtual size: 76KB

.rsrc
Size: 1KB - Virtual size: 4KB

.text
Size: 135KB - Virtual size: 136KB

.data
Size: 15KB - Virtual size: 44KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB