d35cddfa87f5edc5a2cace0777564179_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d35cddfa87f5edc5a2cace0777564179_JaffaCakes118
Size

81KB
MD5

d35cddfa87f5edc5a2cace0777564179
SHA1

1c28e3832467f358c9b35a8c1a01bbbeac7c8f6f
SHA256

90f75c2c6ff0154886a11d28b71e3a693bd179dd8140dbd0716615c46e14b285
SHA512

8f5136889ac557f327d131e6ece2ad4d42617098257f6e6c0a4050e39a084ac6890996cea9793a668b8dc86dc2bcec25ae2075fd1697a59abaa2992d9c84bf75
SSDEEP

1536:2Pt6UC/yoVtGDicvgUHEcSDdlFaMPUqVJhlgQilDISB8cAZevX/aWzj:U6U6yo7OicYUkVhUqVJhcn+kiWX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d35cddfa87f5edc5a2cace0777564179_JaffaCakes118

Files

d35cddfa87f5edc5a2cace0777564179_JaffaCakes118
.dll windows:6 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_DLL
IMAGE_FILE_UP_SYSTEM_ONLY
IMAGE_FILE_BYTES_REVERSED_HI

Sections

�#4�
Size: 8KB - Virtual size: 9KB

Size: - Virtual size: 720.1MB

��
Size: 16.4MB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�
Size: - Virtual size: 512.0MB

��@
Size: 29.9MB - Virtual size: 1730.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32.4MB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA

Size: - Virtual size: 738.0MB

!
Size: - Virtual size:

IMAGE_SCN_MEM_READ

S IS A W
Size: 1236.1MB - Virtual size: 803.2MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�B�A�R
Size: 4.6MB - Virtual size: 4.2MB

IMAGE_SCN_MEM_READ

�U�S�B�A
Size: 1237.3MB - Virtual size: 1200.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

P
Size: 1248.0MB - Virtual size: 244.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA

C
Size: 1168.0MB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

I
Size: 1428.1MB - Virtual size: 1328.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

EXA
Size: 1312.0MB - Virtual size: 1248.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

�ADVAPI3
Size: 1316.3MB - Virtual size: 1220.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

2.DLL
Size: 1444.6MB - Virtual size: 1173.0MB

EXITPROC
Size: 803.2MB - Virtual size: 149.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

�S�I�D�E
Size: 4.3MB - Virtual size: 596KB

IMAGE_SCN_MEM_READ

TA
Size: 1077.1MB - Virtual size: 84.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��ERROR
Size: 1268.4MB - Virtual size: 1280.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

inEXT
Size: 1734.7MB - Virtual size: 1252.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Pontell
Size: 935.0MB - Virtual size: 1317.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

m/winlif
Size: 1126.8MB - Virtual size: 1766.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

pon@gmai
Size: 1664.0MB - Virtual size: 1782.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�
Size: 24B - Virtual size: 50B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

10
Size: 1205.2MB - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Kos tune
Size: 1236.1MB - Virtual size: 517.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�Marco P
Size: 596.8MB - Virtual size: 1623.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

od.php?w
Size: 1252.4MB - Virtual size: 1670.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

on@gmail
Size: 1862.5MB - Virtual size: 1751.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��DATA�
Size: 1024KB - Virtual size: 1045.0MB

Size: 6B - Virtual size: 192KB

��
Size: 16.0MB - Virtual size: 16.0MB

Z
Size: 1216.0MB - Virtual size: 2B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4096.0MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4096.0MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4096.0MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4096.0MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4096.0MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4096.0MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4096.0MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4096.0MB - Virtual size: 4096.0MB

�%
Size: 208.0MB - Virtual size: 2.2MB

IMAGE_SCN_MEM_DISCARDABLE

��M
Size: 37.3MB - Virtual size: 1KB

��
Size: 7KB - Virtual size: 7KB

�%��&
Size: 10KB - Virtual size: 9KB

�/��0
Size: 12KB - Virtual size: 12KB

�9��:
Size: 15KB - Virtual size: 14KB

�C��D
Size: 17KB - Virtual size: 17KB

�M��N
Size: 20KB - Virtual size: 19KB

�W��X
Size: 22KB - Virtual size: 22KB

�a��b
Size: 25KB - Virtual size: 24KB

�k��l
Size: 27KB - Virtual size: 27KB

�u��v
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_MEM_DISCARDABLE

��
Size: 4.3MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��S�k
Size: 55KB - Virtual size: 1760.0MB

V
Size: 1072.0MB - Virtual size: 116.3MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�T�O�P
Size: 1KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

U
Size: 5B - Virtual size: 1264.0MB

J
Size: 1104.0MB - Virtual size: 1248.0MB

IMAGE_SCN_MEM_READ

�Y��S
Size: 1216.0MB - Virtual size: 149.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA

I
Size: 1732.1MB - Virtual size: 162B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

T
Size: 1958.8MB - Virtual size: 260.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Pontell
Size: 935.0MB - Virtual size: 1317.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

M
Size: 1783.0MB - Virtual size: 292.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

p://mark
Size: 14.5MB - Virtual size: 1622.9MB

��"�*Ski
Size: 1718.2MB - Virtual size: 1686.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

FO�
Size: 1734.3MB - Virtual size: 977KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1333.3MB - Virtual size: 1831.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RL!
Size: 1863.5MB - Virtual size: 1906.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

M
Size: 1783.0MB - Virtual size: 292.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

p://mark
Size: 87.3MB - Virtual size: 1622.9MB

��
Size: 1776.0MB - Virtual size: 3601.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

S
Size: 1508.9MB - Virtual size: 6.1MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�T�R�D�E
Size: 1344.0MB - Virtual size: 1072.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

S
Size: 5.3MB - Virtual size: 4.8MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�S�T�R�A
Size: 1040.0MB - Virtual size: 1280.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

N
Size: 4.8MB - Virtual size: 5.5MB

IMAGE_SCN_MEM_READ

�I�G�H�T
Size: 29B - Virtual size: 1088.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

E
Size: 1040.0MB - Virtual size: 6KB

IMAGE_SCN_MEM_EXECUTE

Size: 5.6MB - Virtual size: 4.1MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�N�D�E�A
Size: 1344.0MB - Virtual size: 1344.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

A
Size: 1056.0MB - Virtual size: 404.9MB

IMAGE_SCN_MEM_READ

Size: 5.2MB - Virtual size: 4.9MB

IMAGE_SCN_MEM_READ

�N�E�L�C
Size: 23B - Virtual size: 1216.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

U
Size: 1056.0MB - Virtual size: 1088.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

N
Size: 5KB - Virtual size: 5.4MB

IMAGE_SCN_MEM_READ

�O�R
Size: 4.3MB - Virtual size: 5.9MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�N�M�O�U
Size: 21B - Virtual size: 1104.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

T
Size: 1104.0MB - Virtual size: 1264.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

E
Size: 1056.0MB - Virtual size: 341.1MB

M
Size: 84B - Virtual size: 4.1MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�E�U�P
Size: 5.5MB - Virtual size: 4.8MB

IMAGE_SCN_MEM_READ

�O�P�U�P
Size: 19B - Virtual size: 1104.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

��M�_�B
Size: 1216.0MB - Virtual size: 1168.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

U
Size: 1104.0MB - Virtual size: 1264.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

T
Size: 1248.0MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

O
Size: 1264.0MB - Virtual size: 277.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

O
Size: 1248.0MB - Virtual size: 245.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

N
Size: 1440.0MB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

A
Size: 721KB - Virtual size: 1248.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�R�M
Size: 1379.2MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

mFront s
Size: 1252.7MB - Virtual size: 1110.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

lUSER
Size: 1734.8MB - Virtual size: 1782.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ay.net/p
Size: 1735.0MB - Virtual size: 1607.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

spFNUM
Size: 1558.8MB - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1108.3MB - Virtual size: 1830.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��
Size: 1090.0MB - Virtual size: 1892.6MB

Size: 100.4MB - Virtual size: 69.3MB

IMAGE_SCN_MEM_READ

PE
Size: 519.5MB - Virtual size: 518.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

KNNAME
Size: 1606.6MB - Virtual size: 726.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

elloREM
Size: 1173.3MB - Virtual size: 1685.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

calculat
Size: 1319.2MB - Virtual size: 1618.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

lc.org/a
Size: 1622.8MB - Virtual size: 1686.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

tmlFNUM
Size: 1744.0MB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

E
Size: 7.3MB - Virtual size: 1558.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 8.8MB - Virtual size: 2503.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ware Ste
Size: 1110.9MB - Virtual size: 1671.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

id.xmlUS
Size: 1781.0MB - Virtual size: 916KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1751.0MB - Virtual size: 1652.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

etDEF
Size: 1045.0MB - Virtual size: 1044.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

e
Size: 6.3MB - Virtual size: 7.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

etchUp m
Size: 1205.2MB - Virtual size: 1734.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

SER
Size: 1319.0MB - Virtual size: 1282.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

imple bu
Size: 818.0MB - Virtual size: 1783.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1782.4MB - Virtual size: 1622.7MB

IMAGE_SCN_MEM_READ

AIL
Size: 742.8MB - Virtual size: 1783.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

0.net
Size: 1.0MB - Virtual size: 13.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

FO�
Size: 1138.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ivate/Se
Size: 1654.9MB - Virtual size: 1862.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rid.xmlU
Size: 1282.0MB - Virtual size: 229.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

www.pgp.
Size: 448KB - Virtual size: 758.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

il.comHO
Size: 1746.9MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1328.2MB - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

�# 4� Size: 8KB - Virtual size: 9KB

Size: - Virtual size: 720.1MB

������ Size: 16.4MB - Virtual size:

� Size: - Virtual size: 512.0MB

������@ Size: 29.9MB - Virtual size: 1730.9MB

.rsrc Size: 32.4MB - Virtual size: 384KB

 Size: - Virtual size: 738.0MB

! Size: - Virtual size:

S IS A W Size: 1236.1MB - Virtual size: 803.2MB

�B�A�R Size: 4.6MB - Virtual size: 4.2MB

�U�S�B�A Size: 1237.3MB - Virtual size: 1200.0MB

P Size: 1248.0MB - Virtual size: 244.8MB

C Size: 1168.0MB - Virtual size: 3KB

I Size: 1428.1MB - Virtual size: 1328.0MB

EXA Size: 1312.0MB - Virtual size: 1248.0MB

�ADVAPI3 Size: 1316.3MB - Virtual size: 1220.3MB

2.DLL Size: 1444.6MB - Virtual size: 1173.0MB

EXITPROC Size: 803.2MB - Virtual size: 149.2MB

�S�I�D�E Size: 4.3MB - Virtual size: 596KB

TA Size: 1077.1MB - Virtual size: 84.2MB

��ERROR Size: 1268.4MB - Virtual size: 1280.0MB

inEXT Size: 1734.7MB - Virtual size: 1252.8MB

Pontell Size: 935.0MB - Virtual size: 1317.3MB

m/winlif Size: 1126.8MB - Virtual size: 1766.6MB

pon@gmai Size: 1664.0MB - Virtual size: 1782.2MB

� Size: 24B - Virtual size: 50B

10 Size: 1205.2MB - Virtual size: 10B

Kos tune Size: 1236.1MB - Virtual size: 517.3MB

�Marco P Size: 596.8MB - Virtual size: 1623.3MB

od.php?w Size: 1252.4MB - Virtual size: 1670.2MB

on@gmail Size: 1862.5MB - Virtual size: 1751.0MB

��DATA� Size: 1024KB - Virtual size: 1045.0MB

Size: 6B - Virtual size: 192KB

������ Size: 16.0MB - Virtual size: 16.0MB

Z Size: 1216.0MB - Virtual size: 2B

�������� Size: 4096.0MB - Virtual size: 4096.0MB

�������� Size: 4096.0MB - Virtual size: 4096.0MB

�������� Size: 4096.0MB - Virtual size: 4096.0MB

�������� Size: 4096.0MB - Virtual size: 4096.0MB

�������� Size: 4096.0MB - Virtual size: 4096.0MB

�������� Size: 4096.0MB - Virtual size: 4096.0MB

�������� Size: 4096.0MB - Virtual size: 4096.0MB

�������� Size: 4096.0MB - Virtual size: 4096.0MB

�% Size: 208.0MB - Virtual size: 2.2MB

������M Size: 37.3MB - Virtual size: 1KB

���� Size: 7KB - Virtual size: 7KB

�%���& Size: 10KB - Virtual size: 9KB

�/���0 Size: 12KB - Virtual size: 12KB

�9���: Size: 15KB - Virtual size: 14KB

�C���D Size: 17KB - Virtual size: 17KB

�M���N Size: 20KB - Virtual size: 19KB

�W���X Size: 22KB - Virtual size: 22KB

�a���b Size: 25KB - Virtual size: 24KB

�k���l Size: 27KB - Virtual size: 27KB

�u���v Size: 30KB - Virtual size: 29KB

����� Size: 4.3MB - Virtual size: 6.9MB

�����S�k Size: 55KB - Virtual size: 1760.0MB

V Size: 1072.0MB - Virtual size: 116.3MB

�T�O�P Size: 1KB - Virtual size: 4.2MB

U Size: 5B - Virtual size: 1264.0MB

J Size: 1104.0MB - Virtual size: 1248.0MB

�Y���S Size: 1216.0MB - Virtual size: 149.4MB

I Size: 1732.1MB - Virtual size: 162B

T Size: 1958.8MB - Virtual size: 260.3MB

Pontell Size: 935.0MB - Virtual size: 1317.3MB

M Size: 1783.0MB - Virtual size: 292.8MB

p://mark Size: 14.5MB - Virtual size: 1622.9MB

��"�*Ski Size: 1718.2MB - Virtual size: 1686.4MB

FO� Size: 1734.3MB - Virtual size: 977KB

 Size: 1333.3MB - Virtual size: 1831.3MB

RL! Size: 1863.5MB - Virtual size: 1906.9MB

M Size: 1783.0MB - Virtual size: 292.8MB

�#4�
Size: 8KB - Virtual size: 9KB

��
Size: 16.4MB - Virtual size:

�
Size: - Virtual size: 512.0MB

��@
Size: 29.9MB - Virtual size: 1730.9MB

.rsrc
Size: 32.4MB - Virtual size: 384KB

Size: - Virtual size: 738.0MB

!
Size: - Virtual size:

S IS A W
Size: 1236.1MB - Virtual size: 803.2MB

�B�A�R
Size: 4.6MB - Virtual size: 4.2MB

�U�S�B�A
Size: 1237.3MB - Virtual size: 1200.0MB

P
Size: 1248.0MB - Virtual size: 244.8MB

C
Size: 1168.0MB - Virtual size: 3KB

I
Size: 1428.1MB - Virtual size: 1328.0MB

EXA
Size: 1312.0MB - Virtual size: 1248.0MB

�ADVAPI3
Size: 1316.3MB - Virtual size: 1220.3MB

2.DLL
Size: 1444.6MB - Virtual size: 1173.0MB

EXITPROC
Size: 803.2MB - Virtual size: 149.2MB

�S�I�D�E
Size: 4.3MB - Virtual size: 596KB

TA
Size: 1077.1MB - Virtual size: 84.2MB

��ERROR
Size: 1268.4MB - Virtual size: 1280.0MB

inEXT
Size: 1734.7MB - Virtual size: 1252.8MB

Pontell
Size: 935.0MB - Virtual size: 1317.3MB

m/winlif
Size: 1126.8MB - Virtual size: 1766.6MB

pon@gmai
Size: 1664.0MB - Virtual size: 1782.2MB

�
Size: 24B - Virtual size: 50B

10
Size: 1205.2MB - Virtual size: 10B

Kos tune
Size: 1236.1MB - Virtual size: 517.3MB

�Marco P
Size: 596.8MB - Virtual size: 1623.3MB

od.php?w
Size: 1252.4MB - Virtual size: 1670.2MB

on@gmail
Size: 1862.5MB - Virtual size: 1751.0MB

��DATA�
Size: 1024KB - Virtual size: 1045.0MB

��
Size: 16.0MB - Virtual size: 16.0MB

Z
Size: 1216.0MB - Virtual size: 2B

��
Size: 4096.0MB - Virtual size: 4096.0MB

��
Size: 4096.0MB - Virtual size: 4096.0MB

��
Size: 4096.0MB - Virtual size: 4096.0MB

��
Size: 4096.0MB - Virtual size: 4096.0MB

��
Size: 4096.0MB - Virtual size: 4096.0MB

��
Size: 4096.0MB - Virtual size: 4096.0MB

��
Size: 4096.0MB - Virtual size: 4096.0MB

��
Size: 4096.0MB - Virtual size: 4096.0MB

�%
Size: 208.0MB - Virtual size: 2.2MB

��M
Size: 37.3MB - Virtual size: 1KB

��
Size: 7KB - Virtual size: 7KB

�%��&
Size: 10KB - Virtual size: 9KB

�/��0
Size: 12KB - Virtual size: 12KB

�9��:
Size: 15KB - Virtual size: 14KB

�C��D
Size: 17KB - Virtual size: 17KB

�M��N
Size: 20KB - Virtual size: 19KB

�W��X
Size: 22KB - Virtual size: 22KB

�a��b
Size: 25KB - Virtual size: 24KB

�k��l
Size: 27KB - Virtual size: 27KB

�u��v
Size: 30KB - Virtual size: 29KB

��
Size: 4.3MB - Virtual size: 6.9MB

��S�k
Size: 55KB - Virtual size: 1760.0MB

V
Size: 1072.0MB - Virtual size: 116.3MB

�T�O�P
Size: 1KB - Virtual size: 4.2MB

U
Size: 5B - Virtual size: 1264.0MB

J
Size: 1104.0MB - Virtual size: 1248.0MB

�Y��S
Size: 1216.0MB - Virtual size: 149.4MB

I
Size: 1732.1MB - Virtual size: 162B

T
Size: 1958.8MB - Virtual size: 260.3MB

Pontell
Size: 935.0MB - Virtual size: 1317.3MB

M
Size: 1783.0MB - Virtual size: 292.8MB

p://mark
Size: 14.5MB - Virtual size: 1622.9MB

��"�*Ski
Size: 1718.2MB - Virtual size: 1686.4MB

FO�
Size: 1734.3MB - Virtual size: 977KB

Size: 1333.3MB - Virtual size: 1831.3MB

RL!
Size: 1863.5MB - Virtual size: 1906.9MB

M
Size: 1783.0MB - Virtual size: 292.8MB

p://mark
Size: 87.3MB - Virtual size: 1622.9MB

��
Size: 1776.0MB - Virtual size: 3601.7MB

S
Size: 1508.9MB - Virtual size: 6.1MB

�T�R�D�E
Size: 1344.0MB - Virtual size: 1072.0MB

S
Size: 5.3MB - Virtual size: 4.8MB

�S�T�R�A
Size: 1040.0MB - Virtual size: 1280.0MB

N
Size: 4.8MB - Virtual size: 5.5MB

�I�G�H�T
Size: 29B - Virtual size: 1088.0MB

E
Size: 1040.0MB - Virtual size: 6KB

Size: 5.6MB - Virtual size: 4.1MB