Extracted

• 28e9faec9de3bbdeb65435bfc377d1f8_JaffaCakes118

  .exe windows:4 windows x86 arch:x86

  8f8ca00cfeb72bbf751dee292dcd41ec

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  Sleep

  CreateProcessA

  SetFileAttributesA

  CloseHandle

  WriteFile

  GetModuleFileNameA

  CreateFileA

  GetTempPathA

  GetShortPathNameA

  MultiByteToWideChar

  WritePrivateProfileStringA

  FindNextFileA

  FindFirstFileA

  GetStartupInfoA

  GetModuleHandleA

  shell32

  SHGetPathFromIDListA

  SHGetSpecialFolderLocation

  ole32

  CoInitialize

  CoCreateInstance

  CoUninitialize

  msvcp60

  ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

  ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z

  ??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z

  ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

  ??0Init@ios_base@std@@QAE@XZ

  ??1Init@ios_base@std@@QAE@XZ

  ??0_Winit@std@@QAE@XZ

  ??1_Winit@std@@QAE@XZ

  ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

  ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

  ??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z

  ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

  ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z

  ??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z

  ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

  msvcrt

  _XcptFilter

  _controlfp

  _except_handler3

  __set_app_type

  strlen

  memcpy

  fread

  fseek

  memset

  fopen

  sprintf

  __dllonexit

  _onexit

  _exit

  _stricmp

  exit

  _acmdln

  __getmainargs

  _initterm

  __setusermatherr

  _adjust_fdiv

  __p__commode

  __p__fmode

  Sections

  .text

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 120KB - Virtual size: 117KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 16KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ