da08a0cfadc543fbed3dded4693ffd70_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

da08a0cfadc543fbed3dded4693ffd70_JaffaCakes118
Size

183KB
MD5

da08a0cfadc543fbed3dded4693ffd70
SHA1

c21fbdb4dc6de8fc25d8946a49f3741a4529e2d3
SHA256

ad507c8f1c78c8b33574bb14868c85b4a8e99c924bedec61c765fdaa93b9925f
SHA512

17f78aded748a1b7d6be900ff269c9e93ed74c68ce7f2099a01a6de00d29ce15677482bc6a1647c4d60df2c510cbf256a5e16966e07b6d2dbcc532a6fa79c717
SSDEEP

3072:SU5noSj5V5C0ljdc7J4jTKgDiNMjbg7ffDuedR07YWHgUzQ7kviKPoxW54cChm:jnG8da4jaNMo7frY3HHQAv54cCh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da08a0cfadc543fbed3dded4693ffd70_JaffaCakes118

Files

da08a0cfadc543fbed3dded4693ffd70_JaffaCakes118
.exe windows:6 windows x86 arch:x86

5e1a505afe1284a3a019620ba5f28589

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

CryptGenKey

gdi32

SetBkMode

user32

GetDC

atl

ord30

ole32

CoTaskMemFree

oleaut32

VariantInit

shlwapi

PathCombineW

winhttp

WinHttpOpen

crypt32

CryptMsgClose

ws2_32

WSAStartup

comctl32

InitCommonControlsEx

rpcrt4

UuidCreate

Exports

Exports

??0CLibMCSClientMessage@SMSMessaging@CCM@@QAE@XZ
??0CLibSDMPackage@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSClientIdentity@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSClientMessage@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSContentLocations@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSMessage@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSMessageHeader@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSMessageHttpTransport@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSMessageWinHttpTransport@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSPolicy@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAE@XZ
??0CLibSMSStatusMessage@SMSMessaging@CCM@@QAE@XZ
??1CLibMCSClientMessage@SMSMessaging@CCM@@UAE@XZ
??1CLibMCSOpenSessionResponse@SMSMessaging@CCM@@UAE@XZ
??1CLibSDMPackage@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSClientIdentity@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSClientMessage@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSContentLocations@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSMessage@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSMessageHeader@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSMessageHttpTransport@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSMessageWinHttpTransport@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSPolicy@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSPolicyAssignments@SMSMessaging@CCM@@UAE@XZ
??1CLibSMSStatusMessage@SMSMessaging@CCM@@UAE@XZ
?AddClassItem@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJPBG0@Z
?AddIPAddress@CLibSMSContentLocations@SMSMessaging@CCM@@QAEJPBG0@Z
?AddInstanceItem@CLibSMSClientDDR@SMSMessaging@CCM@@QAEJAAVCLibSMSReportBodyInstanceItem@23@@Z
?AddMacAddress@CLibSMSClientIdentity@SMSMessaging@CCM@@QAEJPBG@Z
?CreateAuthHeaders@SMSMessaging@CCM@@YGJPBGPBU_CERT_CONTEXT@@AAVString@Utility@2@@Z
?CreateCertificateContextFromPfx@SMSMessaging@CCM@@YGJPBG0PAPAXPAPBU_CERT_CONTEXT@@PAD@Z
?CreateSelfSignedCertificate@SMSMessaging@CCM@@YGJPBGPAPBU_CERT_CONTEXT@@KPADPAG0PBU_SYSTEMTIME@@4_N@Z
?DoRequest@CLibSMSClientMessage@SMSMessaging@CCM@@QAEJAAVString@Utility@3@_N@Z
?GetADSiteName@SMSMessaging@CCM@@YGJAAVString@Utility@2@@Z
?GetActions@CLibSMSPolicy@SMSMessaging@CCM@@QAEJAAV?$List@VCLibSMSPolicyAction@SMSMessaging@CCM@@@Utility@3@@Z
?GetAllPolicies@SMSMessaging@CCM@@YGJPBGK00ABV?$List@VString@Utility@CCM@@@Utility@2@0PBU_CERT_CONTEXT@@2V?$List@PBU_CERT_CONTEXT@@@42@0AAV342@@Z
?GetAllPolicies@SMSMessaging@CCM@@YGJPBGK00ABV?$List@VString@Utility@CCM@@@Utility@2@PBU_CERT_CONTEXT@@2V?$List@PBU_CERT_CONTEXT@@@42@0AAV342@@Z
?GetAssignmentLocations@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJAAV?$List@VString@Utility@CCM@@@Utility@3@@Z
?GetAssignments@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJAAV?$List@VCLibSMSAssignment@SMSMessaging@CCM@@@Utility@3@@Z
?GetAuthenticatorContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetCertificatePublicKey@SMSMessaging@CCM@@YGJPBU_CERT_CONTEXT@@PAPAEPAK@Z
?GetClass@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetClassItems@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJAAV?$List@VCListSMSReportInstanceClassItem@SMSMessaging@CCM@@@Utility@3@@Z
?GetClientCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJAAPBU_CERT_CONTEXT@@@Z
?GetClientCertificateStore@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJAAPAX@Z
?GetClientID@CLibSMSClientIdentity@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetContent@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetContentLocation@SMSMessaging@CCM@@YGJPBG0J0000PBU_CERT_CONTEXT@@1V?$List@PBU_CERT_CONTEXT@@@Utility@2@_N0AAV?$List@VCLibSMSContentLocation@SMSMessaging@CCM@@@52@@Z
?GetContentLocation@SMSMessaging@CCM@@YGJPBG0J00PAVCLibSMSMessageHttpTransport@12@00_N0AAV?$List@VCLibSMSContentLocation@SMSMessaging@CCM@@@Utility@2@@Z
?GetContentLocations@CLibSMSContentLocations@SMSMessaging@CCM@@QAEJAAV?$List@VCLibSMSContentLocation@SMSMessaging@CCM@@@Utility@3@@Z
?GetContentLocations@CLibSMSContentLocations@SMSMessaging@CCM@@QAEJAAV?$List@VString@Utility@CCM@@@Utility@3@@Z
?GetEnterpriseCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJAAPBU_CERT_CONTEXT@@@Z
?GetFormattedMessageHeader@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetFormattedReportHeader@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetID@CLibSMSPolicy@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetIPSubnetAddresses@SMSMessaging@CCM@@YGJAAV?$Map@VString@Utility@CCM@@V123@U?$less@VString@Utility@CCM@@@std@@@Utility@2@@Z
?GetIPV6Addresses@SMSMessaging@CCM@@YGJAAV?$Map@VString@Utility@CCM@@V123@U?$less@VString@Utility@CCM@@@std@@@Utility@2@@Z
?GetMCSKey@CLibMCSClientMessage@SMSMessaging@CCM@@QAEJAAVCLibMCSKeyResponse@23@@Z
?GetMacAddress@SMSMessaging@CCM@@YGJAAVString@Utility@2@@Z
?GetMacAddresses@SMSMessaging@CCM@@YGJAAV?$List@VString@Utility@CCM@@@Utility@2@@Z
?GetMediaCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJAAPBU_CERT_CONTEXT@@@Z
?GetMediaCertificateStore@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJAAPAX@Z
?GetNamespace@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetNetbiosName@CLibSMSClientIdentity@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetParentClass@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetPolicyBody@CLibSMSPolicy@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetResultCode@CLibSMSMessageHttpTransport@SMSMessaging@CCM@@UAEJAAK@Z
?GetResultCode@CLibSMSMessageTransport@SMSMessaging@CCM@@UAEJAAK@Z
?GetSDMPackageBody@CLibSDMPackage@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetSMSHardwareID@SMSMessaging@CCM@@YGJAAVString@Utility@2@@Z
?GetServerCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJAAV?$List@PBU_CERT_CONTEXT@@@Utility@3@@Z
?GetServerTimeZoneInfo@CLibSMSClientIdentity@SMSMessaging@CCM@@QAEJAAU_TIME_ZONE_INFORMATION@@@Z
?GetSmbiosID@SMSMessaging@CCM@@YGJAAVString@Utility@2@@Z
?GetSource@CLibSMSPolicy@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetState@CLibSMSClientIdentity@SMSMessaging@CCM@@QAEJAA_N@Z
?GetTimeDifference@CLibSMSClientIdentity@SMSMessaging@CCM@@QAEJAA_J@Z
?GetTimes@CLibSMSClientIdentity@SMSMessaging@CCM@@QAEJAAU_FILETIME@@000@Z
?GetTransport@CLibSMSMessage@SMSMessaging@CCM@@QAEJPAPAVCLibSMSMessageTransport@23@@Z
?GetType@CLibSMSPolicy@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?GetVersion@CLibSMSPolicy@SMSMessaging@CCM@@QAEJAAVString@Utility@3@@Z
?HashAndSignBuffer@SMSMessaging@CCM@@YGJPAEKPBU_CERT_CONTEXT@@PAPAEPAK@Z
?HashBuffer@SMSMessaging@CCM@@YGJPAEKPAPAEPAKK@Z
?HexDecode@SMSMessaging@CCM@@YGJPBGPAPAEPAK@Z
?HexEncode@SMSMessaging@CCM@@YGJPAEKPAPAG@Z
?Initialize@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEH_N@Z
?IsAuthenticatorUsed@CLibSMSMessageTransport@SMSMessaging@CCM@@QAE_NXZ
?IsCertDateValiditySkipped@CLibSMSMessageTransport@SMSMessaging@CCM@@QAE_NXZ
?IsSSLUsed@CLibSMSMessageTransport@SMSMessaging@CCM@@QAE_NXZ
?OpenSessionRequest@CLibMCSClientMessage@SMSMessaging@CCM@@QAEJAAVCLibMCSOpenSessionResponse@23@@Z
?RequestAssignments@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJXZ
?RequestAssignmentsLocally@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJXZ
?RequestClientIdentity@CLibSMSClientIdentity@SMSMessaging@CCM@@QAEJXZ
?RequestContentLocations@CLibSMSContentLocations@SMSMessaging@CCM@@QAEJXZ
?RequestPolicy@CLibSMSPolicy@SMSMessaging@CCM@@QAEJ_N@Z
?RequestPolicyLocally@CLibSMSPolicy@SMSMessaging@CCM@@QAEJXZ
?RequestSDMPackage@CLibSDMPackage@SMSMessaging@CCM@@QAEJXZ
?Send@CLibSMSMessage@SMSMessaging@CCM@@QAEJAAPADAAK@Z
?Send@CLibSMSMessageWinHttpTransport@SMSMessaging@CCM@@UAEJPADKAAPADAAK@Z
?Send@CLibSMSStatusMessage@SMSMessaging@CCM@@QAEJXZ
?SendDDR@CLibSMSClientDDR@SMSMessaging@CCM@@QAEJXZ
?SendReport@CLibSMSClientReport@SMSMessaging@CCM@@QAEJPAVCLibSMSReportHeader@23@PBG111_N1@Z
?SendReport@CLibSMSClientReport@SMSMessaging@CCM@@QAEJPBG000_N0@Z
?SetADSiteName@CLibSMSContentLocations@SMSMessaging@CCM@@QAEJPBG@Z
?SetAttachment@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG0@Z
?SetAttachmentAttribute@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBGK@Z
?SetAuthInfoV3SP1@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG00@Z
?SetAuthInfoV4Token@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetAuthenticatorContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG@Z
?SetBody@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetBodyLength@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJK@Z
?SetCRLUse@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJ_N@Z
?SetClass@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJPBG@Z
?SetClientCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPAEKPBGPAD@Z
?SetClientCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG0@Z
?SetClientCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG@Z
?SetClientCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBU_CERT_CONTEXT@@@Z
?SetClientFQDN@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJPBG@Z
?SetClientID@CLibSDMPackage@SMSMessaging@CCM@@QAEJPBG@Z
?SetClientID@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetClientID@CLibSMSPolicy@SMSMessaging@CCM@@QAEJPBG@Z
?SetClientID@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetClientInstalled@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJ_N@Z
?SetClientNetBIOSName@CLibSMSClientMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetClientType@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJH@Z
?SetClientVersion@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetCodePage@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetCodePage@CLibSMSStatusMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetContent@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJPBG@Z
?SetCorrelationID@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetCorrelationID@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetCredentials@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG0@Z
?SetEncryption@CLibMCSClientMessage@SMSMessaging@CCM@@QAEJH@Z
?SetEnterpriseCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG@Z
?SetEnterpriseCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBU_CERT_CONTEXT@@@Z
?SetHash@CLibSMSPolicy@SMSMessaging@CCM@@QAEJPBG0@Z
?SetHeaderItem@CLibSMSMessageHttpTransport@SMSMessaging@CCM@@UAEJPBG0@Z
?SetID@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetID@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetLocaleID@CLibSMSStatusMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetLocation@CLibSMSPolicy@SMSMessaging@CCM@@QAEJPBG@Z
?SetMacAddresses@CLibSMSClientMessage@SMSMessaging@CCM@@QAEJV?$List@VString@Utility@CCM@@@Utility@3@@Z
?SetMachineID@CLibSMSClientIdentity@SMSMessaging@CCM@@QAEJPBG@Z
?SetMachineIdentification@CLibSMSClientReport@SMSMessaging@CCM@@QAEJ_NHHPBG1111@Z
?SetMachineIdentification@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJ_NHHPBG1111@Z
?SetMaxReplySize@CLibSDMPackage@SMSMessaging@CCM@@QAEJK@Z
?SetMaxReplySize@CLibSMSClientMessage@SMSMessaging@CCM@@QAEJK@Z
?SetMaxReplySize@CLibSMSPolicy@SMSMessaging@CCM@@QAEJK@Z
?SetMediaCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG0@Z
?SetMediaID@CLibSMSPolicy@SMSMessaging@CCM@@QAEJPBG@Z
?SetMessageSigning@CLibSMSMessage@SMSMessaging@CCM@@QAEJ_N@Z
?SetNamespace@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJPBG@Z
?SetNativeMode@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJ_N@Z
?SetNetBIOSName@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetObject@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG@Z
?SetPackageID@CLibMCSClientMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetPackageID@CLibSMSContentLocations@SMSMessaging@CCM@@QAEJPBG@Z
?SetPackageType@CLibSMSContentLocations@SMSMessaging@CCM@@QAEJPBG@Z
?SetPackageVersion@CLibSMSContentLocations@SMSMessaging@CCM@@QAEJH@Z
?SetParentClass@CLibSMSReportBodyInstanceItem@SMSMessaging@CCM@@QAEJPBG@Z
?SetPolicyIDList@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJABV?$List@VString@Utility@CCM@@@Utility@3@@Z
?SetPort@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJK@Z
?SetPriority@CLibSMSMessage@SMSMessaging@CCM@@QAEJH@Z
?SetPriority@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJH@Z
?SetProperty@CLibSMSStatusMessage@SMSMessaging@CCM@@QAEJPBG0@Z
?SetRemotePath@CLibMCSClientMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetReplyMode@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetReplyMode@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetReplyTo@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetReplyTo@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetReportContent@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetReportDateTime@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetReportDetails@CLibSMSClientReport@SMSMessaging@CCM@@QAEJPBG0000@Z
?SetReportDetails@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG0000@Z
?SetReportElement@CLibSMSClientReport@SMSMessaging@CCM@@QAEJPBG@Z
?SetReportElement@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetReportFormat@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetReportType@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetReportVersion@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetRequestType@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJPBG@Z
?SetResourceType@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJPBG@Z
?SetSDMPackageHash@CLibSDMPackage@SMSMessaging@CCM@@QAEJPBG@Z
?SetSDMPackageName@CLibSDMPackage@SMSMessaging@CCM@@QAEJPBG@Z
?SetSDMPackageVersion@CLibSDMPackage@SMSMessaging@CCM@@QAEJPBG@Z
?SetSSLUse@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJ_N@Z
?SetServerCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG@Z
?SetServerCertificateContext@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJV?$List@PBU_CERT_CONTEXT@@@Utility@3@@Z
?SetSiteCode@CLibSMSClientMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetSiteSigningCertificateContext@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJPBG@Z
?SetSiteSigningCertificateContext@CLibSMSPolicyAssignments@SMSMessaging@CCM@@QAEJPBU_CERT_CONTEXT@@@Z
?SetSkipCertDateValidity@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJ_N@Z
?SetSourceHost@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetSourceHost@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetSourceID@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetSourceID@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetSystemDefaultLCID@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetTargetAddress@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetTargetAddress@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetTargetEndpoint@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetTargetEndpoint@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetTargetHost@CLibSMSMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetTargetHost@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJPBG@Z
?SetTimeout@CLibSMSMessage@SMSMessaging@CCM@@QAEJH@Z
?SetTimeout@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJH@Z
?SetTransport@CLibSDMPackage@SMSMessaging@CCM@@QAEJPAVCLibSMSMessageHttpTransport@23@@Z
?SetTransport@CLibSMSMessage@SMSMessaging@CCM@@QAEJPAVCLibSMSMessageTransport@23@@Z
?SetTransport@CLibSMSPolicy@SMSMessaging@CCM@@QAEJPAVCLibSMSMessageHttpTransport@23@@Z
?SetType@CLibSMSStatusMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SetURL@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG@Z
?SetUnknown@CLibSMSReportHeader@SMSMessaging@CCM@@QAEJH@Z
?SetUseAuthInfoToken@CLibSMSMessage@SMSMessaging@CCM@@QAEJ_N@Z
?SetUseAuthInfoToken@CLibSMSMessageHeader@SMSMessaging@CCM@@QAEJ_N@Z
?SetUseContextCredentials@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJ_N@Z
?SetVerb@CLibSMSMessageTransport@SMSMessaging@CCM@@QAEJPBG@Z
?SetVersion@CLibMCSClientMessage@SMSMessaging@CCM@@QAEJPBG@Z
?SignBuffer@SMSMessaging@CCM@@YGJPAEKPBU_CERT_CONTEXT@@PAPAEPAK@Z
?VerifyHashSignature@SMSMessaging@CCM@@YGJKPAEKPBU_CERT_CONTEXT@@K@Z
?VerifyHashSignature@SMSMessaging@CCM@@YGJPAE0KPBU_CERT_CONTEXT@@K@Z
?VerifyHashedBuffer@SMSMessaging@CCM@@YGJPAEK0KK@Z
?VerifySignedBuffer@SMSMessaging@CCM@@YGJPAEKPBU_CERT_CONTEXT@@0K@Z

Sections

.MPRESS1
Size: 157KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5e1a505afe1284a3a019620ba5f28589

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

gdi32

user32

atl

ole32

oleaut32

shlwapi

winhttp

crypt32

ws2_32

comctl32

rpcrt4

Exports

Exports

Sections

.MPRESS1 Size: 157KB - Virtual size: 760KB

.MPRESS2 Size: 21KB - Virtual size: 21KB

.rsrc Size: 4KB - Virtual size: 3KB

.MPRESS1
Size: 157KB - Virtual size: 760KB

.MPRESS2
Size: 21KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 3KB