Static task
static1
Behavioral task
behavioral1
Sample
952e5fb4c48b3b5f237eb8ca5b760d45_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
952e5fb4c48b3b5f237eb8ca5b760d45_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
952e5fb4c48b3b5f237eb8ca5b760d45_JaffaCakes118
-
Size
344KB
-
MD5
952e5fb4c48b3b5f237eb8ca5b760d45
-
SHA1
8065d85c3b5e43c14d9bbac9240fd17e7ee1c384
-
SHA256
6c969104538ed76297d3cdb1b9d71319694b8eb09ced9db594df3bfc93ea154a
-
SHA512
68789f09be035f396326a43ee66327f8eb663b4243802a38ace07e0289edf999174246bfef4dfb3776342127894d8808696b73d889bc6998b528d39ffddbce43
-
SSDEEP
6144:r3Nl561Yak8OwDNlwTZbFnHnp2RVBdNYI2N2uFBmet0hF2CFZGMjAh:zNlU1C8OwRlY5HorrGzN29ecFXFZ10h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 952e5fb4c48b3b5f237eb8ca5b760d45_JaffaCakes118
Files
-
952e5fb4c48b3b5f237eb8ca5b760d45_JaffaCakes118.exe windows:4 windows x86 arch:x86
0bc6672666c6a7284c0bcd3a3022c06c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapWalk
GetFileAttributesW
InterlockedExchange
GetCPInfoExW
GetUserDefaultLCID
SetSystemTime
GlobalCompact
QueryPerformanceFrequency
DebugBreak
SetFileAttributesA
GetEnvironmentStrings
UpdateResourceA
FindResourceExW
MapViewOfFile
GetTempPathA
CreateNamedPipeA
SetMailslotInfo
GetLocaleInfoW
WriteConsoleOutputCharacterW
HeapAlloc
SizeofResource
GetEnvironmentVariableA
GetDriveTypeA
WriteConsoleOutputAttribute
GetConsoleMode
SetErrorMode
ReadConsoleOutputAttribute
ResumeThread
GetOEMCP
GetModuleHandleW
SetThreadPriorityBoost
EnumResourceLanguagesA
EnumResourceLanguagesW
BackupWrite
ReadFileEx
OpenEventA
GlobalAddAtomA
Beep
ResetEvent
SuspendThread
GetLongPathNameW
HeapCreate
_hwrite
CommConfigDialogW
GlobalAlloc
TransmitCommChar
SetProcessWorkingSetSize
GetCommModemStatus
lstrcpyA
GetProcessVersion
GetTickCount
GlobalLock
SetConsoleTextAttribute
VirtualProtect
SetupComm
OutputDebugStringW
TlsFree
AddAtomA
SetConsoleCursorPosition
FindNextFileW
VirtualFreeEx
EndUpdateResourceW
GetStringTypeW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
PeekNamedPipe
lstrcmpA
GetBinaryTypeA
ReadConsoleInputA
PulseEvent
IsDBCSLeadByteEx
CreateDirectoryExW
WaitNamedPipeW
SetEnvironmentVariableW
FatalExit
FreeConsole
lstrcpynA
SetConsoleWindowInfo
LocalShrink
GetWindowsDirectoryA
SetComputerNameW
TlsGetValue
GlobalSize
WaitForSingleObject
SetThreadPriority
GetProfileStringA
OutputDebugStringA
CreateDirectoryW
CreateTapePartition
ContinueDebugEvent
AllocConsole
GetFileAttributesExW
OpenEventW
ReadConsoleOutputW
CompareFileTime
Process32Next
GetProfileSectionW
UnlockFileEx
OpenFileMappingW
SetConsoleOutputCP
ScrollConsoleScreenBufferW
LocalCompact
GetConsoleCursorInfo
FileTimeToSystemTime
SetFileTime
CopyFileW
ReadConsoleA
lstrlenA
GetCurrentDirectoryA
UnmapViewOfFile
BackupRead
GetTempPathW
InterlockedCompareExchange
EnterCriticalSection
SetConsoleCursorInfo
MoveFileW
CancelIo
FreeEnvironmentStringsW
GetConsoleScreenBufferInfo
OpenFileMappingA
SetProcessPriorityBoost
LockFileEx
EnumSystemLocalesW
GetDevicePowerState
GetProcessAffinityMask
TransactNamedPipe
GetCommProperties
EnumResourceNamesA
OpenProcess
GetCurrentThread
SetCommConfig
WriteTapemark
LocalReAlloc
GetLogicalDrives
EnumCalendarInfoA
ExpandEnvironmentStringsA
GetNamedPipeHandleStateA
DefineDosDeviceW
SetConsoleMode
GetLastError
PrepareTape
GlobalReAlloc
RaiseException
GetProfileIntW
Heap32Next
FindAtomA
FindResourceW
CloseHandle
GetTempFileNameW
WritePrivateProfileStructA
ClearCommBreak
EnumResourceNamesW
GetStringTypeExA
GetAtomNameA
GetConsoleTitleA
WriteConsoleA
GetOverlappedResult
GetThreadPriority
HeapValidate
GetExitCodeProcess
SetCommBreak
InitAtomTable
GetModuleHandleA
TlsSetValue
Heap32ListNext
Heap32ListFirst
SetSystemPowerState
FillConsoleOutputCharacterW
GetCommandLineW
SetComputerNameA
GetStdHandle
ReadConsoleOutputCharacterA
GetSystemDefaultLangID
FreeEnvironmentStringsA
GetEnvironmentStringsW
GlobalDeleteAtom
SetTimeZoneInformation
CreateNamedPipeW
CreateRemoteThread
GetPrivateProfileStructA
QueryDosDeviceA
EnumResourceTypesA
PurgeComm
DeleteFileA
Heap32First
EnumSystemCodePagesA
GetConsoleOutputCP
GetLogicalDriveStringsW
GetDiskFreeSpaceExA
GetDefaultCommConfigW
ExitProcess
FormatMessageW
HeapUnlock
InterlockedDecrement
FormatMessageA
FatalAppExitA
GetTapePosition
GetQueuedCompletionStatus
DosDateTimeToFileTime
MoveFileExW
FindFirstFileA
InterlockedIncrement
SetCommMask
IsBadWritePtr
GetTimeFormatA
WaitForDebugEvent
ConvertDefaultLocale
FindResourceExA
GetLocaleInfoA
Thread32First
GetShortPathNameA
SetCommTimeouts
QueryDosDeviceW
GetThreadLocale
VirtualFree
GetThreadSelectorEntry
WriteFileGather
GetNumberFormatW
GetProfileIntA
ConnectNamedPipe
SetStdHandle
DeleteCriticalSection
GetTapeParameters
ReadFile
WriteConsoleInputW
lstrcatW
AddAtomW
LocalHandle
Module32Next
GetNumberOfConsoleMouseButtons
CopyFileA
SetThreadExecutionState
GetCurrencyFormatA
_lopen
GetHandleInformation
WritePrivateProfileStringA
FoldStringA
ReadFileScatter
VirtualQuery
FoldStringW
SetSystemTimeAdjustment
VirtualAlloc
GetNamedPipeInfo
DeviceIoControl
GlobalFlags
SleepEx
MoveFileA
CreateEventA
GetDateFormatW
WritePrivateProfileStructW
lstrcmpiA
GetPrivateProfileSectionW
GlobalWire
BuildCommDCBAndTimeoutsA
GetExitCodeThread
EnumSystemCodePagesW
GetSystemDirectoryW
WriteConsoleOutputA
LCMapStringA
_lcreat
WriteFile
FillConsoleOutputAttribute
LocalFileTimeToFileTime
TerminateThread
GetThreadTimes
SetLocaleInfoW
ReadProcessMemory
GetSystemDefaultLCID
LoadLibraryExA
SetFileApisToOEM
WriteProfileStringA
SetConsoleScreenBufferSize
EnumSystemLocalesA
TerminateProcess
WaitCommEvent
GetCPInfo
GetVersion
FreeLibrary
GetMailslotInfo
CreateDirectoryA
PostQueuedCompletionStatus
CreatePipe
CommConfigDialogA
GetAtomNameW
IsDBCSLeadByte
CreateEventW
lstrcpynW
GetPrivateProfileSectionNamesW
VerLanguageNameA
BackupSeek
GetModuleFileNameA
SetHandleCount
SetEnvironmentVariableA
lstrlenW
GetTapeStatus
GlobalUnWire
LocalUnlock
CancelDeviceWakeupRequest
DuplicateHandle
GetProcessHeap
DisconnectNamedPipe
LoadResource
GetCurrencyFormatW
GetPrivateProfileIntA
HeapCompact
_hread
SetEndOfFile
DebugActiveProcess
SetProcessAffinityMask
CreateSemaphoreA
GlobalUnlock
SetVolumeLabelA
Toolhelp32ReadProcessMemory
PeekConsoleInputW
GetWriteWatch
LoadLibraryExW
BuildCommDCBA
GetStartupInfoA
SetDefaultCommConfigW
GetVersionExA
user32
VkKeyScanExW
DlgDirListA
MessageBoxExA
TranslateAcceleratorW
UnhookWindowsHookEx
GetAsyncKeyState
IsCharAlphaA
MsgWaitForMultipleObjects
VkKeyScanW
DialogBoxParamW
SetRect
FlashWindow
GetKeyNameTextA
CreateMDIWindowW
PeekMessageA
MessageBoxIndirectA
ToUnicodeEx
ArrangeIconicWindows
VkKeyScanExA
EnumDisplaySettingsA
GetScrollRange
RegisterClassW
DrawTextA
InsertMenuA
InternalGetWindowText
OpenIcon
IsCharAlphaNumericW
GetWindowWord
RegisterHotKey
SetMessageExtraInfo
KillTimer
WindowFromDC
IsIconic
ChangeDisplaySettingsExA
EndPaint
OpenInputDesktop
TabbedTextOutW
GetMenuStringA
UnloadKeyboardLayout
EnumWindowStationsA
OemToCharA
InflateRect
GetKeyboardState
CreateDialogIndirectParamW
SetSysColors
GetClipCursor
OemToCharBuffA
DispatchMessageW
RegisterWindowMessageW
RegisterClassExA
GetCapture
SendMessageTimeoutW
SetScrollRange
CharUpperBuffA
ReleaseDC
GetMenuState
SwitchToThisWindow
SendNotifyMessageW
GetKeyboardLayout
GetCaretPos
LoadCursorW
ShowCaret
SetDoubleClickTime
CopyAcceleratorTableW
OemToCharW
GetUpdateRect
PaintDesktop
GetTabbedTextExtentW
GetWindowContextHelpId
CreateMDIWindowA
GetClassWord
DefMDIChildProcW
DefWindowProcW
DefFrameProcW
DefMDIChildProcA
ClipCursor
GetSubMenu
GetMenuDefaultItem
CreateAcceleratorTableW
DeferWindowPos
CreateDialogParamW
GetPropA
ChangeDisplaySettingsA
GetMessageExtraInfo
SetWindowsHookExA
ScrollWindowEx
DestroyIcon
OpenWindowStationW
DispatchMessageA
GetCursor
DrawEdge
SetClassWord
EnableScrollBar
GetDCEx
SetForegroundWindow
OpenClipboard
EnumPropsExW
SetMenu
IntersectRect
wvsprintfW
SetRectEmpty
FrameRect
LookupIconIdFromDirectory
DialogBoxIndirectParamA
SendDlgItemMessageA
CreateDialogIndirectParamA
GetDialogBaseUnits
CheckMenuRadioItem
GetKeyState
GetWindowLongA
EnumThreadWindows
SendMessageA
RemovePropA
SetScrollInfo
GetSystemMetrics
SetWindowsHookW
DefFrameProcA
DrawCaption
LoadBitmapW
GetQueueStatus
GetWindowRgn
UnregisterClassW
DrawFocusRect
GetUserObjectInformationW
wvsprintfA
LoadMenuIndirectW
SetMessageQueue
SetKeyboardState
SetWindowsHookA
ScreenToClient
LoadKeyboardLayoutW
CharUpperW
EnumChildWindows
EmptyClipboard
CloseDesktop
CreateWindowExW
CharUpperA
SetWindowRgn
RegisterClassExW
EnumDesktopWindows
GetUserObjectSecurity
CopyIcon
LoadAcceleratorsW
LoadCursorFromFileA
ChangeDisplaySettingsW
AppendMenuA
SetCaretPos
LoadCursorA
DestroyCursor
CreateWindowStationW
CreateIconFromResourceEx
CopyAcceleratorTableA
CreateMenu
GetSysColorBrush
IsClipboardFormatAvailable
WinHelpW
ExcludeUpdateRgn
InSendMessage
CharLowerBuffW
IsWindowUnicode
UnhookWindowsHook
CreateCaret
InsertMenuItemW
CloseWindowStation
OpenDesktopW
DrawMenuBar
LoadImageW
GetWindowTextW
TrackPopupMenu
LoadImageA
SetCapture
DlgDirSelectComboBoxExA
LoadIconW
IsCharUpperW
HideCaret
MapVirtualKeyExA
CreateDesktopW
ToUnicode
GetMenuItemInfoA
GetClassLongA
EnumPropsExA
BringWindowToTop
MapVirtualKeyA
DestroyMenu
DrawTextExW
DrawAnimatedRects
GetWindow
GetKeyboardLayoutNameW
AdjustWindowRectEx
InsertMenuItemA
GetMenuItemID
GetDC
CloseWindow
GetIconInfo
SetPropW
GetForegroundWindow
wsprintfW
DefDlgProcA
GetClipboardFormatNameW
SetWindowLongA
ReplyMessage
ValidateRgn
FindWindowExA
ChangeMenuW
RegisterClipboardFormatA
IsMenu
GetSysColor
OpenDesktopA
EqualRect
FindWindowW
GetWindowDC
EnumDisplaySettingsW
SetMenuContextHelpId
mouse_event
CreateIcon
SetLastErrorEx
GetKBCodePage
GetInputState
GetDlgItem
GetMenuItemInfoW
PostQuitMessage
CheckDlgButton
ToAscii
TabbedTextOutA
GetClipboardData
RemoveMenu
InvalidateRgn
CharPrevExA
HiliteMenuItem
CopyRect
GetMenu
SwapMouseButton
SetDlgItemTextA
SetWindowWord
GetMessagePos
SetCursor
EnumPropsW
AttachThreadInput
AppendMenuW
GetMenuCheckMarkDimensions
SetClassLongW
CreateIconFromResource
SendMessageW
GetOpenClipboardWindow
ShowWindow
SystemParametersInfoA
MapWindowPoints
GetMenuContextHelpId
MapVirtualKeyW
AnyPopup
MessageBoxW
RegisterClipboardFormatW
EndDeferWindowPos
DestroyCaret
SetWindowTextA
wsprintfA
RegisterWindowMessageA
LoadStringA
MessageBoxA
DrawIconEx
CreateAcceleratorTableA
GetProcessWindowStation
EndDialog
SetParent
CallMsgFilterA
DrawStateW
SetMenuItemInfoA
GetScrollPos
CountClipboardFormats
gdi32
GetCharWidth32A
GetCharWidthFloatW
CreatePatternBrush
SetTextColor
ResetDCA
CreateDCA
CreateDCW
GetTextCharacterExtra
MaskBlt
TranslateCharsetInfo
SetICMProfileW
GetClipRgn
AbortDoc
AnimatePalette
EnumICMProfilesA
CreateColorSpaceW
GetObjectA
EnumICMProfilesW
GetFontData
EnumFontsA
AbortPath
GetTextAlign
SetArcDirection
CreateCompatibleDC
RestoreDC
GetTextFaceA
SetICMMode
GetPixelFormat
CancelDC
SaveDC
SetPaletteEntries
GetBkMode
GetGraphicsMode
CombineTransform
GetPixel
LineTo
RealizePalette
GetPath
GetKerningPairsW
SelectClipRgn
ChoosePixelFormat
GetMetaRgn
Arc
AngleArc
SetSystemPaletteUse
GetSystemPaletteUse
StartDocA
RemoveFontResourceW
FillRgn
GetCharABCWidthsFloatA
SetWindowOrgEx
CreatePen
GetOutlineTextMetricsA
GetEnhMetaFilePaletteEntries
CreateBitmap
Chord
GetDIBits
CreateEllipticRgn
DeleteMetaFile
GdiFlush
PlayMetaFile
GetEnhMetaFileDescriptionW
CopyEnhMetaFileW
GetMiterLimit
GetEnhMetaFileBits
StretchDIBits
EqualRgn
DPtoLP
GetMetaFileA
CreateICW
CreatePolygonRgn
Pie
EndDoc
GetViewportExtEx
GetICMProfileA
GetTextExtentExPointA
SetRectRgn
GetGlyphOutlineA
UpdateICMRegKeyW
GdiComment
CreateHatchBrush
GetColorSpace
OffsetWindowOrgEx
UpdateColors
CreateBrushIndirect
GetWindowOrgEx
GetCharWidth32W
CreateEnhMetaFileA
SetStretchBltMode
GetRegionData
FixBrushOrgEx
AddFontResourceW
GetTextMetricsW
SetPixel
DescribePixelFormat
GetCharWidthW
ResizePalette
GetICMProfileW
GetViewportOrgEx
GetTextExtentPoint32W
CreateFontIndirectA
GetEnhMetaFileA
GetCurrentPositionEx
CreateRoundRectRgn
PlgBlt
PolyBezier
CreatePalette
Escape
Rectangle
GetCharABCWidthsFloatW
GetTextCharsetInfo
GetMetaFileW
GetDIBColorTable
CreateCompatibleBitmap
ExtFloodFill
GetEnhMetaFileHeader
EnumFontsW
ExtCreateRegion
ExtCreatePen
LineDDA
EnumObjects
SetWinMetaFileBits
PtVisible
SetBitmapDimensionEx
CreateFontA
GetOutlineTextMetricsW
SetAbortProc
PatBlt
ScaleViewportExtEx
SetMetaFileBitsEx
SetDIBitsToDevice
SetWindowExtEx
GetNearestPaletteIndex
MoveToEx
GetCharABCWidthsA
GetKerningPairsA
PolyPolyline
WidenPath
GetTextExtentPointW
SetBrushOrgEx
PolyBezierTo
SetMiterLimit
GdiSetBatchLimit
DeleteDC
GetGlyphOutlineW
SetDIBits
Polygon
SetViewportExtEx
GetStockObject
PolyDraw
StrokeAndFillPath
ExtSelectClipRgn
GetROP2
Polyline
ExtEscape
CreateMetaFileW
GetWindowExtEx
GetWorldTransform
SetPolyFillMode
RectVisible
SetTextCharacterExtra
PolyPolygon
ExtTextOutW
DeleteEnhMetaFile
FillPath
SetMetaRgn
GetTextFaceW
UpdateICMRegKeyA
GetDeviceCaps
GetCharacterPlacementW
GetFontLanguageInfo
SetGraphicsMode
TextOutW
GetBrushOrgEx
PolyTextOutA
GetObjectType
GetPolyFillMode
SetColorAdjustment
SetBkMode
EnumMetaFile
GetWinMetaFileBits
SetPixelV
comdlg32
ChooseFontW
CommDlgExtendedError
PrintDlgA
GetSaveFileNameW
GetSaveFileNameA
FindTextW
PageSetupDlgW
GetOpenFileNameA
FindTextA
ChooseColorA
PageSetupDlgA
advapi32
ClearEventLogW
GetSecurityDescriptorDacl
CreatePrivateObjectSecurity
ChangeServiceConfigW
ObjectCloseAuditAlarmW
ObjectPrivilegeAuditAlarmA
RegSaveKeyW
GetLengthSid
CryptHashSessionKey
GetServiceDisplayNameW
InitiateSystemShutdownA
LogonUserW
CryptSetProvParam
DuplicateToken
LookupAccountNameA
GetServiceKeyNameA
CreateServiceW
SetServiceStatus
BuildExplicitAccessWithNameW
BuildExplicitAccessWithNameA
RegNotifyChangeKeyValue
ReadEventLogW
AddAce
DestroyPrivateObjectSecurity
LookupPrivilegeNameW
CryptEnumProviderTypesW
RegUnLoadKeyA
DuplicateTokenEx
AddAuditAccessAce
AreAllAccessesGranted
SetSecurityDescriptorOwner
GetSidSubAuthorityCount
LookupPrivilegeNameA
ObjectOpenAuditAlarmA
CryptVerifySignatureA
RegCreateKeyW
RegQueryInfoKeyW
EnumServicesStatusA
ObjectCloseAuditAlarmA
GetServiceKeyNameW
BuildImpersonateTrusteeW
QueryServiceLockStatusW
CryptEnumProviderTypesA
InitializeSecurityDescriptor
ObjectOpenAuditAlarmW
LookupAccountSidW
RegQueryMultipleValuesW
RegGetKeySecurity
RegQueryMultipleValuesA
GetTokenInformation
GetNamedSecurityInfoA
LookupPrivilegeDisplayNameW
DeleteAce
RegDeleteKeyW
RegisterEventSourceA
GetExplicitEntriesFromAclW
CryptGetProvParam
CryptSignHashA
StartServiceCtrlDispatcherW
CryptSetProviderExW
EnumDependentServicesA
SetFileSecurityW
CryptImportKey
EqualPrefixSid
QueryServiceStatus
AbortSystemShutdownA
OpenSCManagerW
ReportEventA
OpenServiceA
CryptDestroyKey
LookupPrivilegeDisplayNameA
GetSidSubAuthority
StartServiceW
FreeSid
CryptReleaseContext
RegQueryValueExA
QueryServiceConfigW
InitializeSid
OpenEventLogW
LookupSecurityDescriptorPartsW
ImpersonateLoggedOnUser
GetEffectiveRightsFromAclW
CopySid
ObjectPrivilegeAuditAlarmW
CryptCreateHash
RegReplaceKeyW
CloseEventLog
AccessCheck
SetFileSecurityA
IsValidSecurityDescriptor
ReportEventW
MakeAbsoluteSD
RegEnumValueW
RegCreateKeyExA
DeregisterEventSource
GetFileSecurityW
PrivilegedServiceAuditAlarmW
GetNumberOfEventLogRecords
GetSidLengthRequired
OpenBackupEventLogW
RegSetValueW
GetMultipleTrusteeA
CryptGetHashParam
OpenSCManagerA
CryptDeriveKey
GetServiceDisplayNameA
CreateServiceA
DeleteService
CryptExportKey
MakeSelfRelativeSD
LookupPrivilegeValueW
CryptEnumProvidersA
RegRestoreKeyW
RevertToSelf
ObjectDeleteAuditAlarmA
ChangeServiceConfigA
GetTrusteeTypeW
RegDeleteKeyA
CryptContextAddRef
RegOpenKeyA
GetExplicitEntriesFromAclA
GetPrivateObjectSecurity
CryptGetUserKey
GetSecurityDescriptorGroup
CryptAcquireContextA
RegisterEventSourceW
CryptDecrypt
NotifyBootConfigStatus
CryptHashData
RegReplaceKeyA
LookupSecurityDescriptorPartsA
RegConnectRegistryW
RegLoadKeyA
BuildTrusteeWithNameA
BackupEventLogW
PrivilegedServiceAuditAlarmA
CreateProcessAsUserA
QueryServiceConfigA
GetAclInformation
PrivilegeCheck
RegRestoreKeyA
BuildSecurityDescriptorW
LogonUserA
SetServiceObjectSecurity
GetSecurityDescriptorOwner
CryptSetProviderW
GetFileSecurityA
QueryServiceObjectSecurity
LookupPrivilegeValueA
shell32
SHGetFileInfoA
SHFormatDrive
DragQueryFileA
SHInvokePrinterCommandW
DragQueryFileW
SHBrowseForFolderA
FindExecutableW
CommandLineToArgvW
Shell_NotifyIconA
ShellAboutA
ExtractAssociatedIconA
ShellAboutW
SHBrowseForFolderW
SHAddToRecentDocs
Shell_NotifyIconW
SHGetPathFromIDListA
SHGetInstanceExplorer
ExtractAssociatedIconW
ExtractIconW
DuplicateIcon
SHLoadInProc
SHGetPathFromIDListW
SHGetFileInfoW
ExtractIconExA
SHGetSpecialFolderPathA
DragFinish
ShellExecuteA
ShellExecuteExA
SHGetSettings
SHGetSpecialFolderPathW
ExtractIconA
SHGetDesktopFolder
DoEnvironmentSubstW
SHQueryRecycleBinW
SHFileOperationA
SHEmptyRecycleBinW
FindExecutableA
ExtractAssociatedIconExA
SHGetMalloc
DoEnvironmentSubstA
msvcrt
_acmdln
_XcptFilter
_exit
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ