84ae36b114b6e9c0715d11c9d5e0a710_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

84ae36b114b6e9c0715d11c9d5e0a710_JaffaCakes118
Size

1.1MB
MD5

84ae36b114b6e9c0715d11c9d5e0a710
SHA1

3082974a40a63e5a182243ad7c9f69f57a57d901
SHA256

e8349bdfd86d423208e66f9e7f369eda84bf145af9512497ad40d0e168a96da5
SHA512

4810b7dcc9c65f92168e68f1101c2a0822bde0fbdb94df6579009b7be10987034e72b859ed956998d77fe561f9cc40a2e4ecf69b3a72ec3543d50a36e0930fb4
SSDEEP

24576:ztLiIrgyBkkP1sBn16nU4nIkkoTuTG6jTBY5nlyuwuSUG8KXODxtnKSjHgmsR0/D:1iIe88xS8q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84ae36b114b6e9c0715d11c9d5e0a710_JaffaCakes118

Files

84ae36b114b6e9c0715d11c9d5e0a710_JaffaCakes118
.dll windows:4 windows x86 arch:x86

41052aeb2f82deca0c999b170e1967c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

r

INTEGER
LENGTH
LOGICAL
RAW
REAL
R_CHAR
R_ClassSymbol
R_ClearExternalPtr
R_ExternalPtrAddr
R_MakeExternalPtr
R_NaInt
R_NamesSymbol
R_NilValue
R_SetExternalPtrAddr
R_alloc
R_chk_calloc
R_chk_free
R_qsort_int_I
R_registerRoutines
Rf_ScalarLogical
Rf_allocVector
Rf_asChar
Rf_asInteger
Rf_asLogical
Rf_asReal
Rf_error
Rf_getAttrib
Rf_install
Rf_isLogical
Rf_length
Rf_mkChar
Rf_protect
Rf_unprotect
SET_STRING_ELT
SET_VECTOR_ELT
STRING_ELT
TYPEOF
VECTOR_ELT

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
FlushViewOfFile
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExA
GetFileAttributesExA
GetFileSizeEx
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MapViewOfFileEx
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
SetEndOfFile
SetFilePointerEx
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

_fdopen
_fileno
_read
_write
__dllonexit
__doserrno
__mb_cur_max
__pioinfo
_amsg_exit
_errno
_filelengthi64
_fileno
_fstat64
_initterm
_iob
_lock
_lseeki64
_onexit
_strnicmp
_unlock
_vsnprintf
_winmajor
_write
abort
atoi
calloc
fclose
fflush
fgetpos
fopen
fputc
fputs
fread
free
fsetpos
fwrite
getc
getwc
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
putc
putwc
realloc
setlocale
setvbuf
sprintf
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncmp
strncpy
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm

Exports

Exports

R_init_ff
R_unload_ff
_Z12ff_raw_d_newPKchdiii
_Z13ff_byte_d_newPKcidiii
_Z13ff_quad_d_newPKcidiii
_Z14ff_short_d_newPKcidiii
_Z14ff_ubyte_d_newPKcidiii
_Z15ff_double_d_newPKcddiii
_Z15ff_nibble_d_newPKcidiii
_Z15ff_single_d_newPKcddiii
_Z15ff_ushort_d_newPKcidiii
_Z16ff_boolean_d_newPKcidiii
_Z16ff_integer_d_newPKcidiii
_Z16ff_logical_d_newPKcidiii
_ZN2ff14getErrorStringENS_5ErrorE
_ZN2ff14isFileReadOnlyEPKc
_ZN2ff16Win32FileMapping10mapSectionEyjPv
_ZN2ff16Win32FileMapping11getPageSizeEv
_ZN2ff16Win32FileMapping12remapSectionERNS_16Win32FileSectionEyjPv
_ZN2ff16Win32FileMappingC1EPKcybb
_ZN2ff16Win32FileMappingC2EPKcybb
_ZN2ff16Win32FileMappingD1Ev
_ZN2ff16Win32FileMappingD2Ev
_ZN2ff16Win32FileSection5flushEv
_ZN2ff16Win32FileSection5resetEyjPv
_ZN2ff16Win32FileSectionC1EPvyjS1_bb
_ZN2ff16Win32FileSectionC2EPvyjS1_bb
_ZN2ff16Win32FileSectionD1Ev
_ZN2ff16Win32FileSectionD2Ev
_ZN2ff5ArrayIcED0Ev
_ZN2ff5ArrayIcED1Ev
_ZN2ff5ArrayIdE10getPointerEy
_ZN2ff5ArrayIdED0Ev
_ZN2ff5ArrayIdED1Ev
_ZN2ff5ArrayIfE10getPointerEy
_ZN2ff5ArrayIfED0Ev
_ZN2ff5ArrayIfED1Ev
_ZN2ff5ArrayIhE10getPointerEy
_ZN2ff5ArrayIhED0Ev
_ZN2ff5ArrayIhED1Ev
_ZN2ff5ArrayIiE10getPointerEy
_ZN2ff5ArrayIiED0Ev
_ZN2ff5ArrayIiED1Ev
_ZN2ff5ArrayIjE10getPointerEy
_ZN2ff5ArrayIjED0Ev
_ZN2ff5ArrayIjED1Ev
_ZN2ff5ArrayIsED0Ev
_ZN2ff5ArrayIsED1Ev
_ZN2ff5ArrayItE10getPointerEy
_ZN2ff5ArrayItED0Ev
_ZN2ff5ArrayItED1Ev
_ZN2ff6FFTypeINS_5ArrayIcEENS_7filters7cast_naILi8EEEED0Ev
_ZN2ff6FFTypeINS_5ArrayIcEENS_7filters7cast_naILi8EEEED1Ev
_ZN2ff6FFTypeINS_5ArrayIdEENS_7filters4pipeEED0Ev
_ZN2ff6FFTypeINS_5ArrayIdEENS_7filters4pipeEED1Ev
_ZN2ff6FFTypeINS_5ArrayIfEENS_7filters4pipeEED0Ev
_ZN2ff6FFTypeINS_5ArrayIfEENS_7filters4pipeEED1Ev
_ZN2ff6FFTypeINS_5ArrayIhEENS_7filters4pipeEED0Ev
_ZN2ff6FFTypeINS_5ArrayIhEENS_7filters4pipeEED1Ev
_ZN2ff6FFTypeINS_5ArrayIiEENS_7filters4pipeEED0Ev
_ZN2ff6FFTypeINS_5ArrayIiEENS_7filters4pipeEED1Ev
_ZN2ff6FFTypeINS_5ArrayIsEENS_7filters7cast_naILi16EEEED0Ev
_ZN2ff6FFTypeINS_5ArrayIsEENS_7filters7cast_naILi16EEEED1Ev
_ZN2ff6FFTypeINS_5ArrayItEENS_7filters4pipeEED0Ev
_ZN2ff6FFTypeINS_5ArrayItEENS_7filters4pipeEED1Ev
_ZN2ff6FFTypeINS_8BitArrayILi1EjEENS_7filters4pipeEED0Ev
_ZN2ff6FFTypeINS_8BitArrayILi1EjEENS_7filters4pipeEED1Ev
_ZN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters4pipeEED0Ev
_ZN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters4pipeEED1Ev
_ZN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters7cast_naILi2EEEED0Ev
_ZN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters7cast_naILi2EEEED1Ev
_ZN2ff6FFTypeINS_8BitArrayILi4EjEENS_7filters4pipeEED0Ev
_ZN2ff6FFTypeINS_8BitArrayILi4EjEENS_7filters4pipeEED1Ev
_ZN2ff8BitArrayILi1EjED0Ev
_ZN2ff8BitArrayILi1EjED1Ev
_ZN2ff8BitArrayILi2EjED0Ev
_ZN2ff8BitArrayILi2EjED1Ev
_ZN2ff8BitArrayILi4EjED0Ev
_ZN2ff8BitArrayILi4EjED1Ev
_ZN2ff9ArrayBaseD0Ev
_ZN2ff9ArrayBaseD1Ev
_ZN2ff9getFSInfoEPKcRNS_6FSInfoE
_ZN3utk11file_resizeEPKcy
_ZN3utk19file_allocate_fseekEPKcy
_ZNK2ff5ArrayIcE4sizeEv
_ZNK2ff5ArrayIdE4sizeEv
_ZNK2ff5ArrayIfE4sizeEv
_ZNK2ff5ArrayIhE4sizeEv
_ZNK2ff5ArrayIiE4sizeEv
_ZNK2ff5ArrayIjE4sizeEv
_ZNK2ff5ArrayIsE4sizeEv
_ZNK2ff5ArrayItE4sizeEv
_ZTIN2ff5ArrayIcEE
_ZTIN2ff5ArrayIdEE
_ZTIN2ff5ArrayIfEE
_ZTIN2ff5ArrayIhEE
_ZTIN2ff5ArrayIiEE
_ZTIN2ff5ArrayIjEE
_ZTIN2ff5ArrayIsEE
_ZTIN2ff5ArrayItEE
_ZTIN2ff6FFTypeINS_5ArrayIcEENS_7filters7cast_naILi8EEEEE
_ZTIN2ff6FFTypeINS_5ArrayIdEENS_7filters4pipeEEE
_ZTIN2ff6FFTypeINS_5ArrayIfEENS_7filters4pipeEEE
_ZTIN2ff6FFTypeINS_5ArrayIhEENS_7filters4pipeEEE
_ZTIN2ff6FFTypeINS_5ArrayIiEENS_7filters4pipeEEE
_ZTIN2ff6FFTypeINS_5ArrayIsEENS_7filters7cast_naILi16EEEEE
_ZTIN2ff6FFTypeINS_5ArrayItEENS_7filters4pipeEEE
_ZTIN2ff6FFTypeINS_8BitArrayILi1EjEENS_7filters4pipeEEE
_ZTIN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters4pipeEEE
_ZTIN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters7cast_naILi2EEEEE
_ZTIN2ff6FFTypeINS_8BitArrayILi4EjEENS_7filters4pipeEEE
_ZTIN2ff8BitArrayILi1EjEE
_ZTIN2ff8BitArrayILi2EjEE
_ZTIN2ff8BitArrayILi4EjEE
_ZTIN2ff9ArrayBaseE
_ZTSN2ff5ArrayIcEE
_ZTSN2ff5ArrayIdEE
_ZTSN2ff5ArrayIfEE
_ZTSN2ff5ArrayIhEE
_ZTSN2ff5ArrayIiEE
_ZTSN2ff5ArrayIjEE
_ZTSN2ff5ArrayIsEE
_ZTSN2ff5ArrayItEE
_ZTSN2ff6FFTypeINS_5ArrayIcEENS_7filters7cast_naILi8EEEEE
_ZTSN2ff6FFTypeINS_5ArrayIdEENS_7filters4pipeEEE
_ZTSN2ff6FFTypeINS_5ArrayIfEENS_7filters4pipeEEE
_ZTSN2ff6FFTypeINS_5ArrayIhEENS_7filters4pipeEEE
_ZTSN2ff6FFTypeINS_5ArrayIiEENS_7filters4pipeEEE
_ZTSN2ff6FFTypeINS_5ArrayIsEENS_7filters7cast_naILi16EEEEE
_ZTSN2ff6FFTypeINS_5ArrayItEENS_7filters4pipeEEE
_ZTSN2ff6FFTypeINS_8BitArrayILi1EjEENS_7filters4pipeEEE
_ZTSN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters4pipeEEE
_ZTSN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters7cast_naILi2EEEEE
_ZTSN2ff6FFTypeINS_8BitArrayILi4EjEENS_7filters4pipeEEE
_ZTSN2ff8BitArrayILi1EjEE
_ZTSN2ff8BitArrayILi2EjEE
_ZTSN2ff8BitArrayILi4EjEE
_ZTSN2ff9ArrayBaseE
_ZTVN2ff5ArrayIcEE
_ZTVN2ff5ArrayIdEE
_ZTVN2ff5ArrayIfEE
_ZTVN2ff5ArrayIhEE
_ZTVN2ff5ArrayIiEE
_ZTVN2ff5ArrayIjEE
_ZTVN2ff5ArrayIsEE
_ZTVN2ff5ArrayItEE
_ZTVN2ff6FFTypeINS_5ArrayIcEENS_7filters7cast_naILi8EEEEE
_ZTVN2ff6FFTypeINS_5ArrayIdEENS_7filters4pipeEEE
_ZTVN2ff6FFTypeINS_5ArrayIfEENS_7filters4pipeEEE
_ZTVN2ff6FFTypeINS_5ArrayIhEENS_7filters4pipeEEE
_ZTVN2ff6FFTypeINS_5ArrayIiEENS_7filters4pipeEEE
_ZTVN2ff6FFTypeINS_5ArrayIsEENS_7filters7cast_naILi16EEEEE
_ZTVN2ff6FFTypeINS_5ArrayItEENS_7filters4pipeEEE
_ZTVN2ff6FFTypeINS_8BitArrayILi1EjEENS_7filters4pipeEEE
_ZTVN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters4pipeEEE
_ZTVN2ff6FFTypeINS_8BitArrayILi2EjEENS_7filters7cast_naILi2EEEEE
_ZTVN2ff6FFTypeINS_8BitArrayILi4EjEENS_7filters4pipeEEE
_ZTVN2ff8BitArrayILi1EjEE
_ZTVN2ff8BitArrayILi2EjEE
_ZTVN2ff8BitArrayILi4EjEE
_ZTVN2ff9ArrayBaseE
callMethods
ff_boolean_addgetset
ff_boolean_addgetset_contiguous
ff_boolean_addset
ff_boolean_addset_contiguous
ff_boolean_d_addgetset
ff_boolean_d_addgetset_contiguous
ff_boolean_d_addset
ff_boolean_d_addset_contiguous
ff_boolean_d_get
ff_boolean_d_get_contiguous
ff_boolean_d_getset
ff_boolean_d_getset_contiguous
ff_boolean_d_set
ff_boolean_d_set_contiguous
ff_boolean_get
ff_boolean_get_contiguous
ff_boolean_getset
ff_boolean_getset_contiguous
ff_boolean_new
ff_boolean_set
ff_boolean_set_contiguous
ff_byte_addgetset
ff_byte_addgetset_contiguous
ff_byte_addset
ff_byte_addset_contiguous
ff_byte_d_addgetset
ff_byte_d_addgetset_contiguous
ff_byte_d_addset
ff_byte_d_addset_contiguous
ff_byte_d_get
ff_byte_d_get_contiguous
ff_byte_d_getset
ff_byte_d_getset_contiguous
ff_byte_d_set
ff_byte_d_set_contiguous
ff_byte_get
ff_byte_get_contiguous
ff_byte_getset
ff_byte_getset_contiguous
ff_byte_new
ff_byte_set
ff_byte_set_contiguous
ff_close
ff_delete
ff_double_addgetset
ff_double_addgetset_contiguous
ff_double_addset
ff_double_addset_contiguous
ff_double_d_addgetset
ff_double_d_addgetset_contiguous
ff_double_d_addset
ff_double_d_addset_contiguous
ff_double_d_get
ff_double_d_get_contiguous
ff_double_d_getset
ff_double_d_getset_contiguous
ff_double_d_set
ff_double_d_set_contiguous
ff_double_get
ff_double_get_contiguous
ff_double_getset
ff_double_getset_contiguous
ff_double_new
ff_double_set
ff_double_set_contiguous
ff_geterror
ff_geterrstr
ff_getpagesize
ff_integer_addgetset
ff_integer_addgetset_contiguous
ff_integer_addset
ff_integer_addset_contiguous
ff_integer_d_addgetset
ff_integer_d_addgetset_contiguous
ff_integer_d_addset
ff_integer_d_addset_contiguous
ff_integer_d_get
ff_integer_d_get_contiguous
ff_integer_d_getset
ff_integer_d_getset_contiguous
ff_integer_d_set
ff_integer_d_set_contiguous
ff_integer_get
ff_integer_get_contiguous
ff_integer_getset
ff_integer_getset_contiguous
ff_integer_new
ff_integer_set
ff_integer_set_contiguous
ff_len
ff_logical_addgetset
ff_logical_addgetset_contiguous
ff_logical_addset
ff_logical_addset_contiguous
ff_logical_d_addgetset
ff_logical_d_addgetset_contiguous
ff_logical_d_addset
ff_logical_d_addset_contiguous
ff_logical_d_get
ff_logical_d_get_contiguous
ff_logical_d_getset
ff_logical_d_getset_contiguous
ff_logical_d_set
ff_logical_d_set_contiguous
ff_logical_get
ff_logical_get_contiguous
ff_logical_getset
ff_logical_getset_contiguous
ff_logical_new
ff_logical_set
ff_logical_set_contiguous
ff_nibble_addgetset
ff_nibble_addgetset_contiguous
ff_nibble_addset
ff_nibble_addset_contiguous
ff_nibble_d_addgetset
ff_nibble_d_addgetset_contiguous
ff_nibble_d_addset
ff_nibble_d_addset_contiguous
ff_nibble_d_get
ff_nibble_d_get_contiguous
ff_nibble_d_getset
ff_nibble_d_getset_contiguous
ff_nibble_d_set
ff_nibble_d_set_contiguous
ff_nibble_get
ff_nibble_get_contiguous
ff_nibble_getset
ff_nibble_getset_contiguous
ff_nibble_new
ff_nibble_set
ff_nibble_set_contiguous
ff_quad_addgetset
ff_quad_addgetset_contiguous
ff_quad_addset
ff_quad_addset_contiguous
ff_quad_d_addgetset
ff_quad_d_addgetset_contiguous
ff_quad_d_addset
ff_quad_d_addset_contiguous
ff_quad_d_get
ff_quad_d_get_contiguous
ff_quad_d_getset
ff_quad_d_getset_contiguous
ff_quad_d_set
ff_quad_d_set_contiguous
ff_quad_get
ff_quad_get_contiguous
ff_quad_getset
ff_quad_getset_contiguous
ff_quad_new
ff_quad_set
ff_quad_set_contiguous
ff_raw_addgetset
ff_raw_addgetset_contiguous
ff_raw_addset
ff_raw_addset_contiguous
ff_raw_d_addgetset
ff_raw_d_addgetset_contiguous
ff_raw_d_addset
ff_raw_d_addset_contiguous
ff_raw_d_get
ff_raw_d_get_contiguous
ff_raw_d_getset
ff_raw_d_getset_contiguous
ff_raw_d_set
ff_raw_d_set_contiguous
ff_raw_get
ff_raw_get_contiguous
ff_raw_getset
ff_raw_getset_contiguous
ff_raw_new
ff_raw_set
ff_raw_set_contiguous
ff_short_addgetset
ff_short_addgetset_contiguous
ff_short_addset
ff_short_addset_contiguous
ff_short_d_addgetset
ff_short_d_addgetset_contiguous
ff_short_d_addset
ff_short_d_addset_contiguous
ff_short_d_get
ff_short_d_get_contiguous
ff_short_d_getset
ff_short_d_getset_contiguous
ff_short_d_set
ff_short_d_set_contiguous
ff_short_get
ff_short_get_contiguous
ff_short_getset
ff_short_getset_contiguous
ff_short_new
ff_short_set
ff_short_set_contiguous
ff_single_addgetset
ff_single_addgetset_contiguous
ff_single_addset
ff_single_addset_contiguous
ff_single_d_addgetset
ff_single_d_addgetset_contiguous
ff_single_d_addset
ff_single_d_addset_contiguous
ff_single_d_get
ff_single_d_get_contiguous
ff_single_d_getset
ff_single_d_getset_contiguous
ff_single_d_set
ff_single_d_set_contiguous
ff_single_get
ff_single_get_contiguous
ff_single_getset
ff_single_getset_contiguous
ff_single_new
ff_single_set
ff_single_set_contiguous
ff_ubyte_addgetset
ff_ubyte_addgetset_contiguous
ff_ubyte_addset
ff_ubyte_addset_contiguous
ff_ubyte_d_addgetset
ff_ubyte_d_addgetset_contiguous
ff_ubyte_d_addset
ff_ubyte_d_addset_contiguous
ff_ubyte_d_get
ff_ubyte_d_get_contiguous
ff_ubyte_d_getset
ff_ubyte_d_getset_contiguous
ff_ubyte_d_set
ff_ubyte_d_set_contiguous
ff_ubyte_get
ff_ubyte_get_contiguous
ff_ubyte_getset
ff_ubyte_getset_contiguous
ff_ubyte_new
ff_ubyte_set
ff_ubyte_set_contiguous
ff_ushort_addgetset
ff_ushort_addgetset_contiguous
ff_ushort_addset
ff_ushort_addset_contiguous
ff_ushort_d_addgetset
ff_ushort_d_addgetset_contiguous
ff_ushort_d_addset
ff_ushort_d_addset_contiguous
ff_ushort_d_get
ff_ushort_d_get_contiguous
ff_ushort_d_getset
ff_ushort_d_getset_contiguous
ff_ushort_d_set
ff_ushort_d_set_contiguous
ff_ushort_get
ff_ushort_get_contiguous
ff_ushort_getset
ff_ushort_getset_contiguous
ff_ushort_new
ff_ushort_set
ff_ushort_set_contiguous
getListElement
next_packed
next_positive_neg
next_positive_negpacked
r_ff__addgetset_array
r_ff__addgetset_contiguous
r_ff__addgetset_vec
r_ff__addgetset_vector
r_ff__addset_array
r_ff__addset_contiguous
r_ff__addset_vec
r_ff__addset_vector
r_ff__get_array
r_ff__get_contiguous
r_ff__get_vec
r_ff__get_vector
r_ff__getset_array
r_ff__getset_contiguous
r_ff__getset_vec
r_ff__getset_vector
r_ff__index_get
r_ff__index_set
r_ff__ordermerge
r_ff__set_array
r_ff__set_contiguous
r_ff__set_vec
r_ff__set_vector
r_ff__sortmerge
r_ff_boolean_addgetset_array
r_ff_boolean_addgetset_contiguous
r_ff_boolean_addgetset_vec
r_ff_boolean_addgetset_vector
r_ff_boolean_addset_array
r_ff_boolean_addset_contiguous
r_ff_boolean_addset_vec
r_ff_boolean_addset_vector
r_ff_boolean_get_array
r_ff_boolean_get_contiguous
r_ff_boolean_get_vec
r_ff_boolean_get_vector
r_ff_boolean_getset_array
r_ff_boolean_getset_contiguous
r_ff_boolean_getset_vec
r_ff_boolean_getset_vector
r_ff_boolean_set_array
r_ff_boolean_set_contiguous
r_ff_boolean_set_vec
r_ff_boolean_set_vector
r_ff_byte_addgetset_array
r_ff_byte_addgetset_contiguous
r_ff_byte_addgetset_vec
r_ff_byte_addgetset_vector
r_ff_byte_addset_array
r_ff_byte_addset_contiguous
r_ff_byte_addset_vec
r_ff_byte_addset_vector
r_ff_byte_get_array
r_ff_byte_get_contiguous
r_ff_byte_get_vec
r_ff_byte_get_vector
r_ff_byte_getset_array
r_ff_byte_getset_contiguous
r_ff_byte_getset_vec
r_ff_byte_getset_vector
r_ff_byte_set_array
r_ff_byte_set_contiguous
r_ff_byte_set_vec
r_ff_byte_set_vector
r_ff_close
r_ff_delete
r_ff_double_addgetset_array
r_ff_double_addgetset_contiguous
r_ff_double_addgetset_vec
r_ff_double_addgetset_vector
r_ff_double_addset_array
r_ff_double_addset_contiguous
r_ff_double_addset_vec
r_ff_double_addset_vector
r_ff_double_get_array
r_ff_double_get_contiguous

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41052aeb2f82deca0c999b170e1967c3

Headers

File Characteristics

Imports

r

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.data Size: 25KB - Virtual size: 25KB

.rdata Size: 31KB - Virtual size: 30KB

.bss Size: - Virtual size: 3KB

.edata Size: 27KB - Virtual size: 26KB

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 26KB - Virtual size: 25KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 25KB - Virtual size: 25KB

.rdata
Size: 31KB - Virtual size: 30KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 27KB - Virtual size: 26KB

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 26KB - Virtual size: 25KB