Static task
static1
Behavioral task
behavioral1
Sample
226dc3075901f337a1fc6492ff08085f_JaffaCakes118.exe
Resource
win7-20240611-en
windows7-x64
Behavioral task
behavioral2
Sample
226dc3075901f337a1fc6492ff08085f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
General
-
Target
226dc3075901f337a1fc6492ff08085f_JaffaCakes118
-
Size
612KB
-
MD5
226dc3075901f337a1fc6492ff08085f
-
SHA1
bcc0bbeb088cbbf0f879b2ab2e2c58378b427dd5
-
SHA256
d4ab21b71a6f21cf3f2cd19f0c402c171d7bd1e4b586b20402a1a0bfa6bc95f3
-
SHA512
78f0f5d4c90ca4f7402449631a147cccf8fd47551e354f323babf5225d76da20d17a0a8e7b762d139fe278ab123f361571e57c9e6bf872121877ddacd7f5ba7e
-
SSDEEP
6144:T+MB3OGgVa33OHdJBbHxyms6ad1uavJ1Gzfwdkf3WOLbEXIXBe1ttbdzVSfYRCDk:T+OemAdJBbCrKfwGPPRMNb7S8CDq2YP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 226dc3075901f337a1fc6492ff08085f_JaffaCakes118
Files
-
226dc3075901f337a1fc6492ff08085f_JaffaCakes118.exe windows:4 windows x86 arch:x86
e4055bc249ea25c890031e9028b9b025
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
outilsft
OUTILS_AjouterTrace
OUTILS_NiveauTrace
OUTILS_InitialiserTrace
styleihm
?InitModule@CSTY_Gal_Chargeur@@QAEXPAUHINSTANCE__@@@Z
?InitControl@CSTY_Ctl_Menu@@SAXIIIIIIIIIIIPBD0000000000@Z
?InitControlCommun@CSTY_Dlg_MsgBox@@SAXIIIIII_NI0I0I0PBD11111111@Z
?InitCadreCommun@CSTY_Dlg_MsgBox@@SAXIIIIIIIIIIIIIIPBD0000000000000@Z
?InitIconesCommun@CSTY_Dlg_MsgBox@@SAXIIIIPBD000@Z
?InitTitre@CSTY_Dlg_MsgBox@@SAXI@Z
?m_uiMultiTopic@CSTY_Dlg_MsgBox@@2IA
?InitBoutons@CSTY_Dlg_MsgBox@@SAXIIIIIIIII@Z
?m_uiCouleurFond@CSTY_Ctl_PropertyPage@@2KA
?AnswerOnQueryNewPalette@@YAHPAVCPalette@@PAVCWnd@@@Z
?AnswerOnPaletteChanged@@YAXPAVCPalette@@PAVCWnd@@1@Z
?UsePalette@CSTY_Wnd_Bmp@@QAEHPAVCDC@@H@Z
?Creer@CSTY_Wnd_Bmp@@QAEHPBD0KPAUHWND__@@@Z
?Creer@CSTY_Wnd_Bmp@@QAEHPAUHINSTANCE__@@GPBDKPAUHWND__@@@Z
?GetPixel@CSTY_Wnd_Bmp@@QAEKHH@Z
??1CSTY_Wnd_Bmp@@UAE@XZ
??0CSTY_Wnd_Bmp@@QAE@XZ
?messageMap@CSTY_Ctl_Edit@@1UAFX_MSGMAP@@B
?InitControl@CSTY_Ctl_Cadre@@QAEHPAVCWnd@@IIIIIIIIIIIIIIIIPBD111111111111111@Z
?DeleteString@CSTY_Ctl_Liste@@QAEHI@Z
?FindString@CSTY_Ctl_Liste@@QBEHHPBD@Z
?InitControl@CSTY_Ctl_Texte@@QAEXXZ
?InitCurseur@CSTY_Tab_Ctl@@QAEXI@Z
?GetInstance@CSTY_Gal_Chargeur@@SAPAV1@XZ
?SetPuce@CSTY_Ctl_Texte@@QAEX_NIPBD@Z
?SetReadOnlyState@CSTY_Ctl_Edit@@QAEXXZ
?GetCheck@CSTY_Ctl_RadioBouton@@QAE_NXZ
?SetCheck@CSTY_Ctl_RadioBouton@@QAEX_N@Z
?GetCheck@CSTY_Ctl_CheckBox@@QAEHXZ
?SetCheck@CSTY_Ctl_CheckBox@@QAEXH@Z
?SetWindowPos@CSTY_Ctl_Edit@@QAEXPBVCWnd@@HHHHI@Z
?InitControl@CSTY_Tab_Ctl@@QAEXIPAVCWnd@@IIIIIIIIIIIPBD1111111111@Z
?InserePage@CSTY_Tab_Ctl@@QAEXPAVCSTY_Ctl_PropertyPage@@@Z
?CalculateRegionSansSheet@CSTY_Tab_Ctl@@QAEXXZ
?InitArrierePlan@CSTY_Tab_Ctl@@QAEXIIIIIIPBD00000@Z
??1CSTY_Tab_Ctl@@UAE@XZ
??0CSTY_Tab_Ctl@@QAE@XZ
?OnInitDialog@CSTY_Ctl_PropertyPage@@UAEHXZ
??0CSTY_Ctl_PropertyPage@@QAE@I@Z
??1CSTY_Ctl_PropertyPage@@UAE@XZ
?messageMap@CSTY_Ctl_PropertyPage@@1UAFX_MSGMAP@@B
?GetCurSel@CSTY_Ctl_Liste@@QBEHXZ
?GetText@CSTY_Ctl_Liste@@QBEXHAAVCString@@@Z
?ResetContent@CSTY_Ctl_Liste@@QAEXXZ
?SetCurSel@CSTY_Ctl_Liste@@QAEHH@Z
?GetCount@CSTY_Ctl_Liste@@QBEHXZ
?OnSysCommand@CSTY_Dlg_Gal@@QAEXIJ@Z
?OnSysCommand@CSTY_Dlg_Bmp@@IAEXIJ@Z
?OnInitDialog@CSTY_Dlg_Bmp@@MAEHXZ
??0CSTY_Dlg_Bmp@@QAE@IPAVCWnd@@@Z
??1CSTY_Dlg_Bmp@@UAE@XZ
?ShowWindow@CSTY_Dlg_Bmp@@MAEHH@Z
?messageMap@CSTY_Dlg_Bmp@@1UAFX_MSGMAP@@B
?GetMessageMap@CSTY_Dlg_Gal@@MBEPBUAFX_MSGMAP@@XZ
?SetValeurMin@CSTY_Ctl_DebitBar@@QAEXJ@Z
?OnTimer@CSTY_Dlg_Gal@@QAEXI@Z
?STY_AfxMessageBox@@YAHPBDII@Z
?SetLastItemState@CSTY_Ctl_Liste@@QAEXW4t_enEtatListeAuto@@@Z
?EnableScroll@CSTY_Ctl_Liste@@QAEXH@Z
?Vider@CSTY_Ctl_Liste@@QAEXXZ
?OnInitDialog@CSTY_Dlg_Gal@@UAEHXZ
?InitScrollBar@CSTY_Ctl_Liste@@QAEXIIIIIIIIIIIIIIPBD0000000000000@Z
??0CSTY_Dlg_Gal@@QAE@IPAVCWnd@@@Z
?InitControl@CSTY_Dlg_Gal@@QAEXIIIIII_NI0I0I0PBD11111111@Z
?InitCadre@CSTY_Dlg_Gal@@QAEXIIIIIIIIIIIIIIPBD0000000000000@Z
??1CSTY_Dlg_Gal@@UAE@XZ
?InitPolices@CSTY_Gal_Chargeur@@QAEXXZ
?InitBitmaps@CSTY_Ctl_BtnGen@@SAXIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIPBD00000000000000000000000000000000000@Z
?DecouperBords@CSTY_Dlg_Gal@@UAEXXZ
?OnBoutonReduire@CSTY_Dlg_Gal@@UAEXXZ
?OnBoutonTaille@CSTY_Dlg_Gal@@UAEXXZ
?OnBoutonQuitter@CSTY_Dlg_Gal@@UAEXXZ
?OnBoutonAPropos@CSTY_Dlg_Gal@@UAEXXZ
?OnNcHitTest@CSTY_Dlg_Gal@@UAEIVCPoint@@@Z
?ShowWindow@CSTY_Dlg_Gal@@UAEHH@Z
?messageMap@CSTY_Dlg_Gal@@1UAFX_MSGMAP@@B
?UpdateControl@CSTY_Ctl_TexteDefilant@@QAEXIHHK@Z
?UnLoad@CSTY_Ctl_GIF@@QAEXXZ
?Update@CSTY_Ctl_Bmp@@QAEXXZ
?Add@CSTY_Ctl_DebitBar@@QAEXJ@Z
?STY_AfxMessageBox@@YAHIII@Z
?RedrawTitle@CSTY_Dlg_Gal@@QAEXXZ
??1CSTY_Ctl_TexteDefilantVertical@@UAE@XZ
?GetMessageMap@CSTY_Ctl_TexteDefilantVertical@@MBEPBUAFX_MSGMAP@@XZ
??1CSTY_Ctl_TexteDefilantHorizontal@@UAE@XZ
??0CSTY_Ctl_TexteDefilant@@QAE@XZ
?InitControl@CSTY_Ctl_TexteDefilant@@QAEXIPAVCWnd@@IHH@Z
?InitCouleur@CSTY_Ctl_TexteDefilant@@QAEXK@Z
?GetMessageMap@CSTY_Ctl_TexteDefilantHorizontal@@MBEPBUAFX_MSGMAP@@XZ
??1CSTY_Ctl_GIF@@UAE@XZ
??0CSTY_Ctl_GIF@@QAE@XZ
?Load@CSTY_Ctl_GIF@@QAEHPBD@Z
?Draw@CSTY_Ctl_GIF@@QAEHXZ
?GetMessageMap@CSTY_Ctl_GIF@@MBEPBUAFX_MSGMAP@@XZ
??1CSTY_Ctl_Texte@@UAE@XZ
??0CSTY_Ctl_Texte@@QAE@XZ
?InitControl@CSTY_Ctl_Texte@@QAEXIPAVCWnd@@@Z
?GetMessageMap@CSTY_Ctl_Texte@@MBEPBUAFX_MSGMAP@@XZ
??1CSTY_Ctl_RadioBouton@@UAE@XZ
??0CSTY_Ctl_RadioBouton@@QAE@XZ
?InitControl@CSTY_Ctl_RadioBouton@@QAEHIPAVCWnd@@IIII@Z
?GetRuntimeClass@CSTY_Ctl_RadioBouton@@UBEPAUCRuntimeClass@@XZ
?GetMessageMap@CSTY_Ctl_RadioBouton@@MBEPBUAFX_MSGMAP@@XZ
?DrawItem@CSTY_Ctl_RadioBouton@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
??1CSTY_Ctl_ProgressBar@@UAE@XZ
??0CSTY_Ctl_ProgressBar@@QAE@XZ
?InitControl@CSTY_Ctl_ProgressBar@@QAEXIIIIIIIIIIPBD000000000@Z
?GetMessageMap@CSTY_Ctl_ProgressBar@@MBEPBUAFX_MSGMAP@@XZ
??1CSTY_Ctl_Liste@@UAE@XZ
??0CSTY_Ctl_Liste@@QAE@XZ
?InitControl@CSTY_Ctl_Liste@@QAEXIPAVCWnd@@IIIPBD11@Z
?GetMessageMap@CSTY_Ctl_Liste@@MBEPBUAFX_MSGMAP@@XZ
?PreTranslateMessage@CSTY_Ctl_Liste@@UAEHPAUtagMSG@@@Z
??1CSTY_Ctl_Edit@@UAE@XZ
??0CSTY_Ctl_Edit@@QAE@XZ
?InitControl@CSTY_Ctl_Edit@@QAEHIIIIIIIIIIIIIIIIIIIIIIIIPBD00000000000000000000000@Z
?GetMessageMap@CSTY_Ctl_Edit@@MBEPBUAFX_MSGMAP@@XZ
??1CSTY_Ctl_DebitBar@@UAE@XZ
??0CSTY_Ctl_DebitBar@@QAE@XZ
?m_bInitialise@CSTY_Gal_Chargeur@@2HA
?InitControl@CSTY_Ctl_DebitBar@@QAEXIIIIIIIIIIIIPBD00000000000@Z
?ReInit@CSTY_Ctl_DebitBar@@QAEXXZ
?GetMessageMap@CSTY_Ctl_DebitBar@@MBEPBUAFX_MSGMAP@@XZ
??1CSTY_Ctl_ComboBox@@UAE@XZ
??0CSTY_Ctl_ComboBox@@QAE@XZ
?InitControl@CSTY_Ctl_ComboBox@@QAEHIIIIIIIIIIIIIIIIIIPBD00000000000000000@Z
?GetMessageMap@CSTY_Ctl_ComboBox@@MBEPBUAFX_MSGMAP@@XZ
?DrawItem@CSTY_Ctl_ComboBox@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?SetValeurMax@CSTY_Ctl_DebitBar@@QAEXJ@Z
?STY_AfxMessageBoxErreur@@YAHIIII@Z
?STY_AfxMessageBoxTempo@@YAHPBDIHI@Z
??0CSTY_Ctl_Menu@@QAE@PAVCMenu@@HHPAVCWnd@@H@Z
?GetSelected@CSTY_Ctl_Menu@@QAEIXZ
??1CSTY_Ctl_Menu@@UAE@XZ
?InitDialog@CSTY_Dlg_Bmp@@QAEHPBD@Z
?InitDialog@CSTY_Dlg_Bmp@@QAEHPAUHINSTANCE__@@G@Z
?GetMessageMap@CSTY_Wnd_Bmp@@MBEPBUAFX_MSGMAP@@XZ
?AjouterItem@CSTY_Ctl_Liste@@QAEIPBD@Z
?InitControl@CSTY_Ctl_Edit@@QAEHIPAVCWnd@@IIIIIIIIIIIIIIIIIIIIIIIIPBD11111111111111111111111@Z
?PreTranslateMessage@CSTY_Dlg_Gal@@UAEHPAUtagMSG@@@Z
?Dessiner@CSTY_Dlg_Gal@@UAEXPAVCDC@@@Z
?SetAPropos@CSTY_Dlg_Gal@@QAEXXZ
?SetAide@CSTY_Dlg_Gal@@QAEXXZ
?InitControl@CSTY_Ctl_ComboBox@@QAEHIPAVCWnd@@IIIIIIIIIIIIIIIIIIPBD11111111111111111@Z
?GetMessageMap@CSTY_Ctl_BtnGen@@MBEPBUAFX_MSGMAP@@XZ
?DrawItem@CSTY_Ctl_BtnGen@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?MeasureItem@CSTY_Ctl_ComboBox@@MAEXPAUtagMEASUREITEMSTRUCT@@@Z
?GetMessageMap@CSTY_Ctl_Bmp@@MBEPBUAFX_MSGMAP@@XZ
?CompareItem@CSTY_Ctl_ComboBox@@MAEHPAUtagCOMPAREITEMSTRUCT@@@Z
?InitControl@CSTY_Ctl_Bmp@@QAEXAAVCString@@@Z
??0CSTY_Ctl_Bmp@@QAE@XZ
?InitControl@CSTY_Ctl_Bmp@@QAEXI@Z
?DrawItem@CSTY_Ctl_Button@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?GetMessageMap@CSTY_Ctl_Button@@MBEPBUAFX_MSGMAP@@XZ
??1CSTY_Ctl_Bmp@@UAE@XZ
?InitControlPath@CSTY_Ctl_Button@@QAEHIPAVCWnd@@PBD111@Z
??0CSTY_Ctl_Button@@QAE@XZ
?InitControl@CSTY_Ctl_Button@@QAEHIPAVCWnd@@IIII@Z
?InitControl@CSTY_Ctl_BtnGen@@QAEXIPAVCWnd@@@Z
??0CSTY_Ctl_BtnGen@@QAE@XZ
??1CSTY_Ctl_BtnGen@@UAE@XZ
?GetMessageMap@CSTY_Ctl_Cadre@@MBEPBUAFX_MSGMAP@@XZ
?InitControl@CSTY_Ctl_Cadre@@QAEHIPAVCWnd@@IIIIIIIIIIIIIIIIPBD111111111111111@Z
??0CSTY_Ctl_Cadre@@QAE@XZ
??1CSTY_Ctl_Cadre@@UAE@XZ
?DrawItem@CSTY_Ctl_CheckBox@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?WindowProc@CSTY_Ctl_CheckBox@@MAEJIIJ@Z
?GetMessageMap@CSTY_Ctl_CheckBox@@MBEPBUAFX_MSGMAP@@XZ
??1CSTY_Ctl_CheckBox@@UAE@XZ
??1CSTY_Ctl_Button@@UAE@XZ
?InitControl@CSTY_Ctl_CheckBox@@QAEHIPAVCWnd@@IIII@Z
??0CSTY_Ctl_CheckBox@@QAE@XZ
mfc42
ord2379
ord3346
ord5300
ord2515
ord355
ord2818
ord4202
ord5594
ord5802
ord1576
ord924
ord6874
ord5856
ord6392
ord278
ord605
ord3780
ord966
ord1971
ord3570
ord5796
ord4863
ord5478
ord2031
ord5481
ord4335
ord2077
ord559
ord5810
ord812
ord923
ord6144
ord5603
ord1871
ord6648
ord1158
ord4189
ord861
ord5465
ord913
ord398
ord1083
ord700
ord5621
ord501
ord2776
ord4299
ord817
ord773
ord3353
ord5715
ord565
ord2726
ord5303
ord4699
ord2915
ord5572
ord1948
ord6282
ord6283
ord6385
ord4673
ord859
ord4680
ord2621
ord1247
ord5289
ord5943
ord561
ord1106
ord3663
ord800
ord540
ord825
ord2864
ord2642
ord6215
ord3790
ord922
ord939
ord926
ord537
ord665
ord1979
ord5442
ord3318
ord5186
ord354
ord536
ord535
ord2764
ord823
ord860
ord4277
ord4278
ord858
ord4129
ord6662
ord2763
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord6241
ord3089
ord4396
ord3574
ord3721
ord4287
ord2411
ord4398
ord3582
ord4284
ord5949
ord2080
ord6880
ord3797
ord2116
ord6442
ord1233
ord3610
ord2089
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord2099
ord3698
ord2108
ord6199
ord6877
ord941
ord2645
ord912
ord3092
ord6663
ord4188
ord5450
ord6394
ord2841
ord2107
ord5440
ord6383
ord5265
ord4998
ord6052
ord1775
ord4425
ord3597
ord1193
ord2514
ord6197
ord6379
ord6380
ord3138
ord3874
ord1146
ord1168
ord4160
ord3870
ord2614
ord1199
ord4835
ord3699
ord5600
ord801
ord6143
ord541
ord4442
ord4376
ord2370
ord2299
ord6334
ord4853
ord5981
ord397
ord699
ord809
ord556
ord1087
ord2122
ord4220
ord2584
ord3654
ord2438
ord1644
ord5631
ord3438
ord4123
ord940
ord5710
ord548
ord2820
ord3811
ord641
ord2086
ord326
ord6378
ord5683
ord6781
ord2065
ord2301
ord5280
ord2863
ord1175
ord6883
ord3337
ord668
ord1980
ord4058
ord2781
ord2770
ord356
ord3181
ord2302
ord5861
ord551
ord4204
ord5161
ord5162
ord5160
ord4905
ord4742
ord4976
ord4948
ord4358
ord4377
ord4854
ord5287
ord3626
ord1641
ord3319
ord798
ord1997
ord6407
ord5194
ord533
ord2298
ord3499
ord6569
ord1085
ord802
ord5601
ord542
ord3317
ord1151
ord2859
ord2340
ord3402
ord795
ord567
ord3876
ord654
ord341
ord348
ord5858
ord6140
ord4275
ord818
ord2152
ord1232
ord3573
ord815
ord324
ord2414
ord5805
ord5608
ord3178
ord3185
ord1622
ord1086
ord5609
ord2765
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord5307
ord4698
ord5302
ord2725
ord4079
ord4710
ord3361
ord5714
ord4622
ord3738
msvcrt
atoi
_mbscmp
strtol
memset
_mbsicmp
atol
_purecall
memcpy
strtoul
_ftol
_mbstok
sscanf
strlen
srand
strcpy
rand
_mbsnbcmp
memcmp
strncpy
strncmp
_strdup
free
fread
_mkdir
fclose
time
fopen
_mbsnbcpy
_mbschr
_mbsnbicmp
_mbsstr
realloc
_itoa
_mbspbrk
_mbsninc
_mbsdec
_mbsinc
_mbsrchr
strcat
_rmdir
fprintf
_except_handler3
_ultoa
_onexit
?terminate@@YAXXZ
__dllonexit
exit
_exit
_XcptFilter
_initterm
_acmdln
__getmainargs
__p__commode
__setusermatherr
_adjust_fdiv
??1type_info@@UAE@XZ
__p__fmode
__set_app_type
_setmbcp
_controlfp
_strnicmp
_stricmp
_EH_prolog
__CxxFrameHandler
kernel32
GetFileInformationByHandle
GetStartupInfoA
RemoveDirectoryA
WaitForMultipleObjects
CreateEventA
GetModuleHandleA
HeapFree
GetProcessHeap
HeapAlloc
ExpandEnvironmentStringsA
OpenFile
MoveFileExA
GetCurrentProcessId
OpenProcess
SetFileAttributesA
CreateFileA
GetPrivateProfileStringA
ReadFile
GetVersionExA
FindFirstFileA
FindNextFileA
FindClose
OutputDebugStringA
LocalSize
LocalAlloc
LocalFree
GlobalAlloc
GlobalLock
FindResourceA
LoadResource
LockResource
lstrcmpiA
CopyFileA
ResumeThread
LoadLibraryA
FreeLibrary
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
SetCurrentDirectoryA
lstrlenA
Sleep
GetLastError
TerminateThread
CreateThread
CreateProcessA
GetPrivateProfileIntA
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
GlobalMemoryStatus
MoveFileA
WritePrivateProfileStringA
CreateDirectoryA
GetLocalTime
GetTempFileNameA
GetShortPathNameA
SetEvent
GetTickCount
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
GetProcAddress
DeleteFileA
GlobalHandle
GlobalUnlock
GlobalFree
user32
wsprintfA
EnumWindows
CloseWindow
SetWindowRgn
SetForegroundWindow
IsIconic
ShowWindow
PostThreadMessageA
GetWindowLongA
DefWindowProcA
SetWindowTextA
LoadStringA
AppendMenuA
IsWindowVisible
GetDC
PeekMessageA
FindWindowA
InvalidateRect
RemoveMenu
GetSystemMenu
GetMenuItemID
UpdateWindow
RedrawWindow
SetWindowLongA
CreatePopupMenu
GetMenuItemCount
GetCursorPos
GetFocus
GetWindow
CopyRect
KillTimer
SetTimer
LoadIconA
SetClassLongA
GetSystemMetrics
PostMessageA
SetParent
IsWindow
GetParent
EnableWindow
SendMessageA
GetWindowRect
gdi32
CreateSolidBrush
GetDeviceCaps
advapi32
RegSetValueExA
LookupPrivilegeValueA
RegCreateKeyExA
RegDeleteValueA
RegEnumValueA
RegQueryValueExA
GetTokenInformation
LookupPrivilegeNameA
OpenProcessToken
RegEnumKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
shell32
ShellExecuteA
ShellExecuteExA
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ole32
CoInitialize
CoCreateInstance
CoCreateGuid
oleaut32
SysFreeString
wsock32
ioctlsocket
htons
gethostname
gethostbyname
WSAAsyncGetHostByName
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 464KB - Virtual size: 461KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ