24fcfc1d3943806226c0ff7cc5a4ebc0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

24fcfc1d3943806226c0ff7cc5a4ebc0_JaffaCakes118
Size

121KB
MD5

24fcfc1d3943806226c0ff7cc5a4ebc0
SHA1

74ffe4f93118a9951d41c1f63ac90af05dfd5a9a
SHA256

f9f60c3625a7aefa44e9fe7241ebff83ab6e817c09d03b6aef62dec659cce13a
SHA512

4a27c17da24601c5813aca62260d0c32488cb912370493be39dcc5d4400e771e2cfb2cdc2cbfd2d8523913aa31fbad85a3251c5cebc285812318deeeade64dbc
SSDEEP

3072:371jIYV1stgqX8FW3cWSH/fJ0pVVIPEoOwJs9I:xhmQzyVVmEodJsu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24fcfc1d3943806226c0ff7cc5a4ebc0_JaffaCakes118

Files

24fcfc1d3943806226c0ff7cc5a4ebc0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

272b99e55f97bed5bda0677cca53e044

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

cygwin1

__wrap__ZdaPv
__wrap__ZdlPv
__wrap__Znaj
__wrap__Znwj
_fstat64
_impure_ptr
_open64
_stat64
atoi
calloc
close
closedir
connect
cygwin_detach_dll
cygwin_internal
dlclose
dlerror
dll_dllcrt0
dlopen
dlsym
free
freeaddrinfo
getaddrinfo
getenv
getservbyname
isalnum
isalpha
malloc
memcmp
memcpy
memmove
memset
opendir
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
read
readdir
realloc
recv
send
shutdown
socket
sscanf
strcmp
strdup
strlen
strstr
tolower

cyggcc_s-1

_Unwind_Resume

cygstdc++-6

_ZNKSs13find_first_ofEPKcjj
_ZNKSs16find_last_not_ofEPKcjj
_ZNKSs17find_first_not_ofEPKcjj
_ZNKSs4findEPKcjj
_ZNKSs4findEcj
_ZNKSs5rfindEcj
_ZNKSs6substrEjj
_ZNKSs7compareEPKc
_ZNKSt13runtime_error4whatEv
_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNSo3putEc
_ZNSo5flushEv
_ZNSolsEi
_ZNSs12_M_leak_hardEv
_ZNSs4_Rep10_M_destroyERKSaIcE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep9_S_createEjjRKSaIcE
_ZNSs4swapERSs
_ZNSs6appendEPKcj
_ZNSs6appendERKSs
_ZNSs6assignEPKcj
_ZNSs6assignERKSs
_ZNSs7reserveEj
_ZNSsC1EPKcRKSaIcE
_ZNSsC1ERKSs
_ZNSsC1ERKSsjj
_ZNSsC1EjcRKSaIcE
_ZNSsD1Ev
_ZNSt13runtime_errorC1ERKSs
_ZNSt13runtime_errorC2ERKSs
_ZNSt13runtime_errorD1Ev
_ZNSt13runtime_errorD2Ev
_ZNSt19basic_ostringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt6localeC1Ev
_ZNSt6localeD1Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZNSt9exceptionD1Ev
_ZNSt9exceptionD2Ev
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_i
_ZSt16__throw_bad_castv
_ZSt17__throw_bad_allocv
_ZSt18_Rb_tree_decrementPKSt18_Rb_tree_node_base
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPKSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_out_of_rangePKc
_ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZSt4cerr
_ZSt4endlIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc
_ZTTSt19basic_ostringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt13runtime_error
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt15basic_stringbufIcSt11char_traitsIcESaIcEE
_ZTVSt19basic_ostringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZTVSt9exception
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_allocate_exception
__cxa_bad_typeid
__cxa_begin_catch
__cxa_call_unexpected
__cxa_end_catch
__cxa_free_exception
__cxa_get_exception_ptr
__cxa_pure_virtual
__cxa_rethrow
__cxa_throw
__dynamic_cast
__gxx_personality_v0

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

_Z12pdlsymlinkedPKcS0_
_ZN19ip_ignore_extension6ignoreERN8libproxy3urlESs
_ZN19ip_ignore_extensionD0Ev
_ZN19ip_ignore_extensionD1Ev
_ZN23domain_ignore_extension6ignoreERN8libproxy3urlESs
_ZN23domain_ignore_extensionD0Ev
_ZN23domain_ignore_extensionD1Ev
_ZN23envvar_config_extension10get_configEN8libproxy3urlE
_ZN23envvar_config_extension10get_ignoreEN8libproxy3urlE
_ZN23envvar_config_extensionD0Ev
_ZN23envvar_config_extensionD1Ev
_ZN24dns_alias_wpad_extension4nextEPPc
_ZN24dns_alias_wpad_extension5foundEv
_ZN24dns_alias_wpad_extension6rewindEv
_ZN24dns_alias_wpad_extensionD0Ev
_ZN24dns_alias_wpad_extensionD1Ev
_ZN25hostname_ignore_extension6ignoreERN8libproxy3urlESs
_ZN25hostname_ignore_extensionD0Ev
_ZN25hostname_ignore_extensionD1Ev
_ZN8libproxy11parse_errorD0Ev
_ZN8libproxy11parse_errorD1Ev
_ZN8libproxy13proxy_factory11get_proxiesESs
_ZN8libproxy13proxy_factory12_get_proxiesEPNS_3urlERSt6vectorISsSaISsEE
_ZN8libproxy13proxy_factory4lockEv
_ZN8libproxy13proxy_factory6unlockEv
_ZN8libproxy13proxy_factoryC1Ev
_ZN8libproxy13proxy_factoryC2Ev
_ZN8libproxy13proxy_factoryD1Ev
_ZN8libproxy13proxy_factoryD2Ev
_ZN8libproxy14wpad_extensionD0Ev
_ZN8libproxy14wpad_extensionD1Ev
_ZN8libproxy16config_extension10get_ignoreENS_3urlE
_ZN8libproxy16config_extension9get_validEv
_ZN8libproxy16config_extension9set_credsENS_3urlESsSs
_ZN8libproxy16config_extension9set_validEb
_ZN8libproxy16config_extensionD0Ev
_ZN8libproxy16config_extensionD1Ev
_ZN8libproxy16ignore_extensionD0Ev
_ZN8libproxy16ignore_extensionD1Ev
_ZN8libproxy19pacrunner_extension3getESsRKNS_3urlE
_ZN8libproxy19pacrunner_extensionC1Ev
_ZN8libproxy19pacrunner_extensionC2Ev
_ZN8libproxy19pacrunner_extensionD0Ev
_ZN8libproxy19pacrunner_extensionD1Ev
_ZN8libproxy19pacrunner_extensionD2Ev
_ZN8libproxy3url11empty_cacheEv
_ZN8libproxy3url6encodeERKSsS2_
_ZN8libproxy3url7get_ipsEb
_ZN8libproxy3url7get_pacEv
_ZN8libproxy3url8is_validESs
_ZN8libproxy3urlC1ERKS0_
_ZN8libproxy3urlC1ERKSs
_ZN8libproxy3urlC2ERKS0_
_ZN8libproxy3urlC2ERKSs
_ZN8libproxy3urlD1Ev
_ZN8libproxy3urlD2Ev
_ZN8libproxy3urlaSERKS0_
_ZN8libproxy3urlaSESs
_ZN8libproxy9pacrunnerC1ESsRKNS_3urlE
_ZN8libproxy9pacrunnerC2ESsRKNS_3urlE
_ZN8libproxy9pacrunnerD0Ev
_ZN8libproxy9pacrunnerD1Ev
_ZN9libmodman14base_extensionD0Ev
_ZN9libmodman14base_extensionD1Ev
_ZN9libmodman14module_manager12load_builtinEP9mm_module
_ZN9libmodman14module_manager8load_dirESsb
_ZN9libmodman14module_manager9load_fileESsb
_ZN9libmodman14module_managerD1Ev
_ZN9libmodman14module_managerD2Ev
_ZN9libmodman9extensionIN8libproxy14wpad_extensionELb0EE9base_typeEv
_ZN9libmodman9extensionIN8libproxy14wpad_extensionELb0EED0Ev
_ZN9libmodman9extensionIN8libproxy14wpad_extensionELb0EED1Ev
_ZN9libmodman9extensionIN8libproxy16config_extensionELb0EE9base_typeEv
_ZN9libmodman9extensionIN8libproxy16config_extensionELb0EED0Ev
_ZN9libmodman9extensionIN8libproxy16config_extensionELb0EED1Ev
_ZN9libmodman9extensionIN8libproxy16ignore_extensionELb0EE9base_typeEv
_ZN9libmodman9extensionIN8libproxy16ignore_extensionELb0EED0Ev
_ZN9libmodman9extensionIN8libproxy16ignore_extensionELb0EED1Ev
_ZN9libmodman9extensionIN8libproxy19pacrunner_extensionELb1EED0Ev
_ZN9libmodman9extensionIN8libproxy19pacrunner_extensionELb1EED1Ev
_ZNK23envvar_config_extensionltERKN9libmodman14base_extensionE
_ZNK8libproxy14wpad_extensionltERKS0_
_ZNK8libproxy16config_extensionltERKN9libmodman14base_extensionE
_ZNK8libproxy3url10get_schemeEv
_ZNK8libproxy3url12get_passwordEv
_ZNK8libproxy3url12get_usernameEv
_ZNK8libproxy3url8get_hostEv
_ZNK8libproxy3url8get_pathEv
_ZNK8libproxy3url8get_portEv
_ZNK8libproxy3url9to_stringEv
_ZNK8libproxy3urleqERKS0_
_ZNK9libmodman14module_manager14get_extensionsIN8libproxy14wpad_extensionEEESt6vectorIPT_SaIS6_EEv
_ZNK9libmodman14module_manager14get_extensionsIN8libproxy19pacrunner_extensionEEESt6vectorIPT_SaIS6_EEv
_ZNK9libmodman9extensionIN8libproxy14wpad_extensionELb0EE13get_base_typeEv
_ZNK9libmodman9extensionIN8libproxy14wpad_extensionELb0EEltERKNS_14base_extensionE
_ZNK9libmodman9extensionIN8libproxy16config_extensionELb0EE13get_base_typeEv
_ZNK9libmodman9extensionIN8libproxy16config_extensionELb0EEltERKNS_14base_extensionE
_ZNK9libmodman9extensionIN8libproxy16ignore_extensionELb0EE13get_base_typeEv
_ZNK9libmodman9extensionIN8libproxy16ignore_extensionELb0EEltERKNS_14base_extensionE
_ZNK9libmodman9extensionIN8libproxy19pacrunner_extensionELb1EE13get_base_typeEv
_ZNK9libmodman9extensionIN8libproxy19pacrunner_extensionELb1EEltERKNS_14base_extensionE
_ZNSt12_Destroy_auxILb0EE9__destroyIPSsEEvT_S3_
_ZNSt13runtime_errorC1ERKS_
_ZNSt15basic_stringbufIcSt11char_traitsIcESaIcEED1Ev
_ZNSt4pairIKSsSt6vectorIPN9libmodman14base_extensionESaIS4_EEED1Ev
_ZNSt6vectorIPN8libproxy14wpad_extensionESaIS2_EE13_M_insert_auxEN9__gnu_cxx17__normal_iteratorIPS2_S4_EERKS2_
_ZNSt6vectorIPN8libproxy14wpad_extensionESaIS2_EED1Ev
_ZNSt6vectorIPN8libproxy16config_extensionESaIS2_EE13_M_insert_auxEN9__gnu_cxx17__normal_iteratorIPS2_S4_EERKS2_
_ZNSt6vectorIPN8libproxy16config_extensionESaIS2_EED1Ev
_ZNSt6vectorIPN8libproxy16config_extensionESaIS2_EEaSERKS4_
_ZNSt6vectorIPN8libproxy16ignore_extensionESaIS2_EE13_M_insert_auxEN9__gnu_cxx17__normal_iteratorIPS2_S4_EERKS2_
_ZNSt6vectorIPN8libproxy16ignore_extensionESaIS2_EED1Ev
_ZNSt6vectorIPN8libproxy16ignore_extensionESaIS2_EEaSERKS4_
_ZNSt6vectorIPN8libproxy17network_extensionESaIS2_EE13_M_insert_auxEN9__gnu_cxx17__normal_iteratorIPS2_S4_EERKS2_
_ZNSt6vectorIPN8libproxy17network_extensionESaIS2_EED1Ev
_ZNSt6vectorIPN8libproxy17network_extensionESaIS2_EEaSERKS4_
_ZNSt6vectorIPN8libproxy19pacrunner_extensionESaIS2_EE13_M_insert_auxEN9__gnu_cxx17__normal_iteratorIPS2_S4_EERKS2_
_ZNSt6vectorIPN8libproxy19pacrunner_extensionESaIS2_EED1Ev
_ZNSt6vectorIPN9libmodman14base_extensionESaIS2_EE13_M_insert_auxEN9__gnu_cxx17__normal_iteratorIPS2_S4_EERKS2_
_ZNSt6vectorIPN9libmodman14base_extensionESaIS2_EED1Ev
_ZNSt6vectorISsSaISsEE13_M_insert_auxEN9__gnu_cxx17__normal_iteratorIPSsS1_EERKSs
_ZNSt6vectorISsSaISsEED1Ev
_ZNSt6vectorISsSaISsEEaSERKS1_
_ZNSt8_Rb_treeIPvS0_St9_IdentityIS0_ESt4lessIS0_ESaIS0_EE8_M_eraseEPSt13_Rb_tree_nodeIS0_E
_ZNSt8_Rb_treeIPvS0_St9_IdentityIS0_ESt4lessIS0_ESaIS0_EED1Ev
_ZNSt8_Rb_treeISsSsSt9_IdentityISsESt4lessISsESaISsEE10_M_insert_EPKSt18_Rb_tree_node_baseS8_RKSs
_ZNSt8_Rb_treeISsSsSt9_IdentityISsESt4lessISsESaISsEE11equal_rangeERKSs
_ZNSt8_Rb_treeISsSsSt9_IdentityISsESt4lessISsESaISsEE16_M_insert_uniqueERKSs
_ZNSt8_Rb_treeISsSsSt9_IdentityISsESt4lessISsESaISsEE8_M_eraseEPSt13_Rb_tree_nodeISsE
_ZNSt8_Rb_treeISsSsSt9_IdentityISsESt4lessISsESaISsEED1Ev
_ZNSt8_Rb_treeISsSt4pairIKSsSt6vectorIPN9libmodman14base_extensionESaIS5_EEESt10_Select1stIS8_ESt4lessISsESaIS8_EE10_M_insert_EPKSt18_Rb_tree_node_baseSH_RKS8_
_ZNSt8_Rb_treeISsSt4pairIKSsSt6vectorIPN9libmodman14base_extensionESaIS5_EEESt10_Select1stIS8_ESt4lessISsESaIS8_EE16_M_insert_uniqueERKS8_
_ZNSt8_Rb_treeISsSt4pairIKSsSt6vectorIPN9libmodman14base_extensionESaIS5_EEESt10_Select1stIS8_ESt4lessISsESaIS8_EE17_M_insert_unique_ESt23_Rb_tree_const_iteratorIS8_ERKS8_
_ZNSt8_Rb_treeISsSt4pairIKSsSt6vectorIPN9libmodman14base_extensionESaIS5_EEESt10_Select1stIS8_ESt4lessISsESaIS8_EE8_M_eraseEPSt13_Rb_tree_nodeIS8_E
_ZNSt8_Rb_treeISsSt4pairIKSsSt6vectorIPN9libmodman14base_extensionESaIS5_EEESt10_Select1stIS8_ESt4lessISsESaIS8_EED1Ev
_ZSt13__adjust_heapIN9__gnu_cxx17__normal_iteratorIPPN8libproxy14wpad_extensionESt6vectorIS4_SaIS4_EEEEiS4_PFbS4_S4_EEvT_T0_SD_T1_T2_
_ZSt13__adjust_heapIN9__gnu_cxx17__normal_iteratorIPPN8libproxy16ignore_extensionESt6vectorIS4_SaIS4_EEEEiS4_PFbS4_S4_EEvT_T0_SD_T1_T2_
_ZSt13__adjust_heapIN9__gnu_cxx17__normal_iteratorIPPN8libproxy19pacrunner_extensionESt6vectorIS4_SaIS4_EEEEiS4_PFbS4_S4_EEvT_T0_SD_T1_T2_
_ZSt13__adjust_heapIN9__gnu_cxx17__normal_iteratorIPSsSt6vectorISsSaISsEEEEiSsEvT_T0_S8_T1_
_ZSt13__heap_selectIN9__gnu_cxx17__normal_iteratorIPSsSt6vectorISsSaISsEEEEEvT_S7_S7_
_ZSt16__insertion_sortIN9__gnu_cxx17__normal_iteratorIPSsSt6vectorISsSaISsEEEEEvT_S7_
_ZSt16__introsort_loopIN9__gnu_cxx17__normal_iteratorIPPN8libproxy14wpad_extensionESt6vectorIS4_SaIS4_EEEEiPFbS4_S4_EEvT_SC_T0_T1_
_ZSt16__introsort_loopIN9__gnu_cxx17__normal_iteratorIPPN8libproxy16ignore_extensionESt6vectorIS4_SaIS4_EEEEiPFbS4_S4_EEvT_SC_T0_T1_
_ZSt16__introsort_loopIN9__gnu_cxx17__normal_iteratorIPPN8libproxy19pacrunner_extensionESt6vectorIS4_SaIS4_EEEEiPFbS4_S4_EEvT_SC_T0_T1_
_ZSt16__introsort_loopIN9__gnu_cxx17__normal_iteratorIPSsSt6vectorISsSaISsEEEEiEvT_S7_T0_
_ZSt19__move_median_firstIN9__gnu_cxx17__normal_iteratorIPPN8libproxy14wpad_extensionESt6vectorIS4_SaIS4_EEEEPFbS4_S4_EEvT_SC_SC_T0_
_ZSt19__move_median_firstIN9__gnu_cxx17__normal_iteratorIPPN8libproxy16config_extensionESt6vectorIS4_SaIS4_EEEEPFbS4_S4_EEvT_SC_SC_T0_
_ZSt19__move_median_firstIN9__gnu_cxx17__normal_iteratorIPPN8libproxy16ignore_extensionESt6vectorIS4_SaIS4_EEEEPFbS4_S4_EEvT_SC_SC_T0_
_ZSt19__move_median_firstIN9__gnu_cxx17__normal_iteratorIPPN8libproxy17network_extensionESt6vectorIS4_SaIS4_EEEEPFbS4_S4_EEvT_SC_SC_T0_
_ZSt19__move_median_firstIN9__gnu_cxx17__normal_iteratorIPPN8libproxy19pacrunner_extensionESt6vectorIS4_SaIS4_EEEEPFbS4_S4_EEvT_SC_SC_T0_
_ZSt19__move_median_firstIN9__gnu_cxx17__normal_iteratorIPSsSt6vectorISsSaISsEEEEEvT_S7_S7_
_ZSt3hexRSt8ios_base
_ZSt9make_heapIN9__gnu_cxx17__normal_iteratorIPSsSt6vectorISsSaISsEEEEEvT_S7_
_ZTI19ip_ignore_extension
_ZTI23domain_ignore_extension
_ZTI23envvar_config_extension
_ZTI24dns_alias_wpad_extension
_ZTI25hostname_ignore_extension
_ZTIN8libproxy11parse_errorE
_ZTIN8libproxy14wpad_extensionE
_ZTIN8libproxy16config_extensionE
_ZTIN8libproxy16ignore_extensionE
_ZTIN8libproxy17network_extensionE
_ZTIN8libproxy19pacrunner_extensionE
_ZTIN8libproxy9pacrunnerE
_ZTIN9libmodman14base_extensionE
_ZTIN9libmodman9extensionIN8libproxy14wpad_extensionELb0EEE
_ZTIN9libmodman9extensionIN8libproxy16config_extensionELb0EEE
_ZTIN9libmodman9extensionIN8libproxy16ignore_extensionELb0EEE
_ZTIN9libmodman9extensionIN8libproxy17network_extensionELb0EEE
_ZTIN9libmodman9extensionIN8libproxy19pacrunner_extensionELb1EEE
_ZTISt13runtime_error
_ZTISt9bad_alloc
_ZTISt9exception
_ZTS19ip_ignore_extension
_ZTS23domain_ignore_extension
_ZTS23envvar_config_extension
_ZTS24dns_alias_wpad_extension
_ZTS25hostname_ignore_extension
_ZTSN8libproxy11parse_errorE
_ZTSN8libproxy14wpad_extensionE
_ZTSN8libproxy16config_extensionE
_ZTSN8libproxy16ignore_extensionE
_ZTSN8libproxy17network_extensionE
_ZTSN8libproxy19pacrunner_extensionE
_ZTSN8libproxy9pacrunnerE
_ZTSN9libmodman14base_extensionE
_ZTSN9libmodman9extensionIN8libproxy14wpad_extensionELb0EEE
_ZTSN9libmodman9extensionIN8libproxy16config_extensionELb0EEE
_ZTSN9libmodman9extensionIN8libproxy16ignore_extensionELb0EEE
_ZTSN9libmodman9extensionIN8libproxy17network_extensionELb0EEE
_ZTSN9libmodman9extensionIN8libproxy19pacrunner_extensionELb1EEE
_ZTSSt13runtime_error
_ZTSSt9bad_alloc
_ZTSSt9exception
_ZTV19ip_ignore_extension
_ZTV23domain_ignore_extension
_ZTV23envvar_config_extension
_ZTV24dns_alias_wpad_extension
_ZTV25hostname_ignore_extension
_ZTVN8libproxy11parse_errorE
_ZTVN8libproxy14wpad_extensionE
_ZTVN8libproxy16config_extensionE
_ZTVN8libproxy16ignore_extensionE
_ZTVN8libproxy19pacrunner_extensionE
_ZTVN8libproxy9pacrunnerE
_ZTVN9libmodman14base_extensionE
_ZTVN9libmodman9extensionIN8libproxy14wpad_extensionELb0EEE
_ZTVN9libmodman9extensionIN8libproxy16config_extensionELb0EEE
_ZTVN9libmodman9extensionIN8libproxy16ignore_extensionELb0EEE
_ZTVN9libmodman9extensionIN8libproxy19pacrunner_extensionELb1EEE
_ZZNK9libmodman14module_manager14get_extensionsIN8libproxy14wpad_extensionEEESt6vectorIPT_SaIS6_EEvEN4pcmp3cmpEPS3_SA_
_ZZNK9libmodman14module_manager14get_extensionsIN8libproxy16config_extensionEEESt6vectorIPT_SaIS6_EEvEN4pcmp3cmpEPS3_SA_
_ZZNK9libmodman14module_manager14get_extensionsIN8libproxy16ignore_extensionEEESt6vectorIPT_SaIS6_EEvEN4pcmp3cmpEPS3_SA_
_ZZNK9libmodman14module_manager14get_extensionsIN8libproxy17network_extensionEEESt6vectorIPT_SaIS6_EEvEN4pcmp3cmpEPS3_SA_
_ZZNK9libmodman14module_manager14get_extensionsIN8libproxy19pacrunner_extensionEEESt6vectorIPT_SaIS6_EEvEN4pcmp3cmpEPS3_SA_
mm_info_config_envvar
mm_info_ignore_domain
mm_info_ignore_hostname
mm_info_ignore_ip
mm_info_wpad_dns_alias
px_proxy_factory_free
px_proxy_factory_get_proxies
px_proxy_factory_new

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

272b99e55f97bed5bda0677cca53e044

Headers

File Characteristics

Imports

cygwin1

cyggcc_s-1

cygstdc++-6

kernel32

Exports

Exports

Sections

.text Size: 81KB - Virtual size: 81KB

.data Size: 6KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 4KB

/4 Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 304B

.edata Size: 14KB - Virtual size: 14KB

.idata Size: 5KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 81KB - Virtual size: 81KB

.data
Size: 6KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 4KB

/4
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 304B

.edata
Size: 14KB - Virtual size: 14KB

.idata
Size: 5KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 2KB