Static task
static1
Behavioral task
behavioral1
Sample
db24e9eede1a9af73b36ca17ed6f6b09_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
db24e9eede1a9af73b36ca17ed6f6b09_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db24e9eede1a9af73b36ca17ed6f6b09_JaffaCakes118
-
Size
38KB
-
MD5
db24e9eede1a9af73b36ca17ed6f6b09
-
SHA1
ddd413325ab6821b1688e7dc19fbc3b6b5515ea7
-
SHA256
dc4b1aa13d686cd8c3c5dd2520780dc0803bd063b710b1b18dc2d9cdfa933355
-
SHA512
cd4d35bcac177e211593e2fa64d3ba7c8c7762b116ee7909585f7846085ec9b665bb47408899c3890d82206f6c9d75474765d9595805101b648fc14907f62bd1
-
SSDEEP
768:KIBp7vd5e8ejT5yIN6ogVXQVbxvIYUXtV6ocKEc:rBpn4j98AVbxvIY0tbcKn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db24e9eede1a9af73b36ca17ed6f6b09_JaffaCakes118
Files
-
db24e9eede1a9af73b36ca17ed6f6b09_JaffaCakes118.exe windows:5 windows x86 arch:x86
6ea3e5f2561f5b7811fd215ccb87a951
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
modemui
drvCommConfigDialogA
ModemCplDlgProc
ModemPropPagesProvider
CountryRunOnce
QueryModemForCountrySettings
UnimodemGetDefaultCommConfig
InvokeControlPanel
drvSetDefaultCommConfigA
drvGetDefaultCommConfigW
drvCommConfigDialogW
UnimodemDevConfigDialog
drvGetDefaultCommConfigA
UnimodemGetExtendedCaps
drvSetDefaultCommConfigW
msvcrt20
_control87
?flush@ostream@@QAEAAV1@XZ
?is_open@ofstream@@QBEHXZ
??_8ostream_withassign@@7B@
_ismbslead
?setbuf@fstream@@QAEPAVstreambuf@@PADH@Z
_ismbclower
_strcmpi
?seekp@ostream@@QAEAAV1@J@Z
?tellg@istream@@QAEJXZ
ungetwc
?hex@@YAAAVios@@AAV1@@Z
_wexecve
_cabs
_mbslen
isleadbyte
?x_lockc@ios@@0U_RTL_CRITICAL_SECTION@@A
??5istream@@QAEAAV0@AAF@Z
_chsize
?seekoff@strstreambuf@@UAEJJW4seek_dir@ios@@H@Z
_wcsnicoll
rewind
??_Diostream@@QAEXXZ
?getline@istream@@QAEAAV1@PAEHD@Z
_CIfmod
is_wctype
_cwait
wcscmp
??_Eios@@UAEPAXI@Z
??_EIostream_init@@QAEPAXI@Z
_wexeclp
?out_waiting@streambuf@@QBEHXZ
?overflow@strstreambuf@@UAEHH@Z
?allocate@streambuf@@IAEHXZ
??_7ios@@6B@
_strrev
??_Distream_withassign@@QAEXXZ
_ismbbalnum
_tcsnset
??5istream@@QAEAAV0@PAVstreambuf@@@Z
_j1
?setg@streambuf@@IAEXPAD00@Z
?doallocate@strstreambuf@@MAEHXZ
?read@istream@@QAEAAV1@PAEH@Z
strncmp
powrprof
GetActivePwrScheme
WriteGlobalPwrPolicy
IsPwrShutdownAllowed
CanUserWritePwrScheme
WritePwrScheme
ValidatePowerPolicies
GetPwrDiskSpindownRange
WriteProcessorPwrScheme
LoadCurrentPwrScheme
EnumPwrSchemes
IsPwrSuspendAllowed
ReadGlobalPwrPolicy
SetSuspendState
CallNtPowerInformation
DeletePwrScheme
IsPwrHibernateAllowed
ReadProcessorPwrScheme
SetActivePwrScheme
GetCurrentPowerPolicies
GetPwrCapabilities
MergeLegacyPwrScheme
IsAdminOverrideActive
ReadPwrScheme
msvcp60
?_Getno@_Locinfo@std@@QBEPBDXZ
?hash@?$collate@D@std@@QBEJPBD0@Z
_FXbig
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??4?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHABV12@@Z
?id@?$ctype@G@std@@2V0locale@2@A
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
?do_tolower@?$ctype@G@std@@MBEGG@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??_F?$complex@N@std@@QAEXXZ
?_Init@?$ctype@G@std@@IAEXABV_Locinfo@2@@Z
?cosh@std@@YA?AV?$complex@O@1@ABV21@@Z
?_Tidy@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEXXZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?underflow@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@MAEGXZ
?polar@std@@YA?AV?$complex@N@1@ABN0@Z
??_Fbad_exception@std@@QAEXXZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEGG@Z
??Gstd@@YA?AV?$complex@N@0@ABNABV10@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHPBGH@Z
?_Stinit@?1??_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@23@@Z@4HA
wctype
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?flush@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@KAPADPADDH@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ
??_D?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??1_Winit@std@@QAE@XZ
?seekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?sputbackc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??_7messages_base@std@@6B@
?good@ios_base@std@@QBE_NXZ
??_8?$basic_ifstream@GU?$char_traits@G@std@@@std@@7B@
?max@?$numeric_limits@C@std@@SACXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??_F?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1length_error@std@@UAE@XZ
??Zstd@@YAAAV?$complex@N@0@AAV10@ABV10@@Z
?epsilon@?$numeric_limits@J@std@@SAJXZ
??_7?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@6B@
??0bad_typeid@std@@QAE@ABV01@@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Tidy@ios_base@std@@AAEXXZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
??4?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??Dstd@@YA?AV?$complex@N@0@ABV10@0@Z
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_F?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?close@?$messages@G@std@@QBEXH@Z
??4?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?do_decimal_point@?$numpunct@D@std@@MBEDXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?signaling_NaN@?$numeric_limits@N@std@@SANXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?sqrt@?$_Ctr@M@std@@SAMM@Z
_Dnorm
?arg@std@@YAOABV?$complex@O@1@@Z
?copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPAGII@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
?cos@?$_Ctr@N@std@@SANN@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAGH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?positive_sign@?$_Mpunct@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?do_decimal_point@?$_Mpunct@G@std@@MBEGXZ
?pword@ios_base@std@@QAEAAPAXH@Z
_Snan
?round_error@?$numeric_limits@C@std@@SACXZ
??Hstd@@YA?AV?$complex@N@0@ABV10@0@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
_Nan
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
??0locale@std@@QAE@ABV01@0H@Z
?real@std@@YANABV?$complex@N@1@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
??_7?$moneypunct@G$00@std@@6B@
?do_frac_digits@?$_Mpunct@D@std@@MBEHXZ
??_F?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1_Locinfo@std@@QAE@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
?_Nanv@?$_Ctr@N@std@@SANN@Z
kernel32
SetUnhandledExceptionFilter
EnumLanguageGroupLocalesW
LeaveCriticalSection
_hwrite
GetVolumePathNameA
GlobalUnfix
LocalSize
UnmapViewOfFile
SetComPlusPackageInstallStatus
GetConsoleAliasExesLengthW
GetVolumePathNamesForVolumeNameW
SetConsoleMode
ReadConsoleW
ExpandEnvironmentStringsA
GetUserDefaultUILanguage
GetFullPathNameW
CreateActCtxW
CancelIo
GetSystemTimeAdjustment
ReleaseActCtx
SetThreadExecutionState
BuildCommDCBAndTimeoutsW
Sleep
SizeofResource
UnregisterWait
VirtualAlloc
OpenMutexW
Beep
LoadLibraryW
GetVersion
GetHandleContext
SetProcessWorkingSetSize
BackupWrite
SetConsoleNlsMode
GetConsoleAliasW
QueryPerformanceFrequency
opengl32
glRasterPos2dv
glVertex3f
wglSetPixelFormat
wglGetCurrentDC
glInterleavedArrays
glVertex3iv
glRasterPos4i
wglGetLayerPaletteEntries
glLightModeli
glPushName
wglRealizeLayerPalette
wglUseFontOutlinesA
glEvalCoord1fv
glTexCoord4f
glGetTexImage
glTexCoord2dv
glRasterPos4f
glIndexs
wglSwapMultipleBuffers
glHint
glVertex3s
glLoadName
glTexCoord2fv
glColor3ubv
glMap1d
glDepthRange
glBitmap
glIndexub
glNormal3b
glTexSubImage2D
glLighti
glNormal3i
glRenderMode
glDrawArrays
setupapi
SetupRenameErrorA
SetupDiOpenDeviceInfoW
SetupCommitFileQueueW
pSetupIsGuidNull
CM_Enumerate_EnumeratorsW
CM_Create_DevNodeA
pSetupAddTagToGroupOrderListEntry
SetupFindFirstLineW
CM_Query_Resource_Conflict_List
CM_Get_Class_Key_NameA
SetupAdjustDiskSpaceListW
SetupScanFileQueue
SetupDiInstallClassW
pSetupGetRealSystemTime
SetupAddToSourceListW
CM_Get_Device_ID_ExA
CMP_Report_LogOn
SetupSetSourceListW
SetupDiGetHwProfileFriendlyNameExA
SetupDiCreateDeviceInfoListExA
ExtensionPropSheetPageProc
CM_Get_Res_Des_Data
SetupDuplicateDiskSpaceListA
SetupCreateDiskSpaceListW
InstallCatalog
CM_Get_Device_ID_Size_Ex
SetupDiGetActualSectionToInstallA
SetupDiGetSelectedDevice
CM_Get_Device_Interface_List_Size_ExW
pSetupRetrieveServiceConfig
CM_Detect_Resource_Conflict
CM_Add_IDW
CM_Get_Hardware_Profile_InfoA
SetupDiGetClassDevPropertySheetsA
pSetupVerifyQueuedCatalogs
CM_Set_HW_Prof_Flags_ExA
pSetupIsUserAdmin
SetupDiSetSelectedDevice
InstallHinfSection
CM_Request_Device_EjectW
CM_Add_Range
CM_Unregister_Device_Interface_ExW
CM_Query_And_Remove_SubTreeW
CM_Unregister_Device_Interface_ExA
SetupDiClassNameFromGuidExW
CM_Is_Dock_Station_Present_Ex
CM_Get_Res_Des_Data_Size
CM_Get_Depth
SetupBackupErrorW
CM_Enumerate_Enumerators_ExA
CM_Query_Arbitrator_Free_Data_Ex
CM_Invert_Range_List
SetupDiInstallDevice
SetupDiInstallClassExA
SetupDiCreateDeviceInterfaceRegKeyW
SetupInstallFromInfSectionA
SetupOpenAppendInfFileA
SetupFindNextLine
CM_Get_Device_Interface_List_Size_ExA
CM_Move_DevNode
CM_Get_Class_Key_Name_ExW
SetupAddSectionToDiskSpaceListA
SetupDiGetDeviceInterfaceDetailW
pSetupMalloc
CM_Request_Device_Eject_ExA
CM_Add_ID_ExW
CM_Next_Range
CM_Test_Range_Available
CM_Connect_MachineA
CM_Get_Resource_Conflict_Count
CM_Find_Range
SetupDiRegisterDeviceInfo
pSetupStringTableLookUpStringEx
CM_Get_Class_NameA
CM_Get_Next_Log_Conf_Ex
SetupDiClassGuidsFromNameA
SetupDiGetDeviceRegistryPropertyW
SetupInstallFromInfSectionW
SetupQueueRenameSectionW
SetupOpenInfFileW
SetupDefaultQueueCallbackW
msvcirt
?unbuffered@streambuf@@IBEHXZ
?adjustfield@ios@@2JB
??4strstream@@QAEAAV0@AAV0@@Z
?setb@streambuf@@IAEXPAD0H@Z
??0exception@@QAE@ABQBD@Z
?open@ifstream@@QAEXPBDHH@Z
?is_open@fstream@@QBEHXZ
?put@ostream@@QAEAAV1@D@Z
??_Gostrstream@@UAEPAXI@Z
?floatfield@ios@@2JB
??_Gfstream@@UAEPAXI@Z
??0strstreambuf@@QAE@H@Z
?rdstate@ios@@QBEHXZ
??0strstreambuf@@QAE@XZ
?x_statebuf@ios@@0PAJA
?peek@istream@@QAEHXZ
??_8stdiostream@@7Bistream@@@
??0istrstream@@QAE@PADH@Z
??0ofstream@@QAE@XZ
?gbump@streambuf@@IAEXH@Z
??_Estrstream@@UAEPAXI@Z
??0fstream@@QAE@H@Z
?sputc@streambuf@@QAEHH@Z
?base@streambuf@@IBEPADXZ
?overflow@filebuf@@UAEHH@Z
??4ostream@@IAEAAV0@ABV0@@Z
?fail@ios@@QBEHXZ
?x_lockc@ios@@0U_CRT_CRITICAL_SECTION@@A
??0fstream@@QAE@XZ
?getline@istream@@QAEAAV1@PAEHD@Z
??0fstream@@QAE@ABV0@@Z
??0ios@@IAE@XZ
?close@ifstream@@QAEXXZ
??1stdiobuf@@UAE@XZ
??_Gostream_withassign@@UAEPAXI@Z
??_Gistream_withassign@@UAEPAXI@Z
?ignore@istream@@QAEAAV1@HH@Z
??_Gstdiobuf@@UAEPAXI@Z
??6ostream@@QAEAAV0@C@Z
??5istream@@QAEAAV0@PAD@Z
?sync@istream@@QAEHXZ
sqlunirl
_DeviceCapabilities_@20
_QueryServiceLockStatus_@16
_VerQueryValue_@16
_RemoveProp@8
_ClearEventLog_@8
_DragQueryFile_@16
_RegOpenKeyEx_@20
_WritePrivateProfileSection_@12
_EnumResourceLanguages_@20
_CopyFileEx_@24
_OpenSCManager_@12
_GetVolumeInformation_@32
_EnumDesktops_@12
_CallMsgFilter_@8
_RegSetValueEx_@24
_CreateDialogParam_@20
_RegEnumKey_@16
_SendMessage@16
_GetProcAddress_@8
_WriteProfileSection_@8
_CreateWindowStation_@16
_LookupPrivilegeValue_@12
_WinHelp@16
_RegSaveKey_@12
_LoadKeyboardLayout_@8
_GetFileVersionInfo_@16
_ShellAbout_@16
_SendMessageCallback_@24
_GetUserObjectInformation_@20
_GetServiceKeyName_@16
_CreateMailslot_@16
_ObjectDeleteAuditAlarm_@12
_DefWindowProc@16
_OpenBackupEventLog_@8
_LogonUser_@24
_CommDlg_OpenSave_GetFilePath@12
_GetSystemDirectory_@8
_EnumFonts_@16
_GetDriveType_@4
query
?BeginTransaction@CPropStoreManager@@QAEKXZ
?Close@CPipeClient@@IAEXXZ
?AcquireRead@CPropertyStore@@AAEXAAVCReadWriteLockRecord@@@Z
?Flush@CDynStream@@QAEXXZ
?IsPaused@CCatalogAdmin@@QAEHXZ
?Read@CRegAccess@@QAEPAGPBG0@Z
?ChangeCurrentScope@CCatState@@QAEXPBG@Z
?AcqPhrase@CQueryScanner@@QAEPAGXZ
?Release@CEnumString@@UAGKXZ
?AllocHeapAndGetWString@@YGPAGAAVPDeSerStream@@@Z
?QueryScopeList@CiStorage@@QAEPAVPRcovStorageObj@@K@Z
?Add@CDbSortSet@@QAEHABVCDbSortKey@@I@Z
?VT_VARIANT_GE@@YGHABUtagPROPVARIANT@@0@Z
?TransferNode@CDbCmdTreeNode@@QAEXPAV1@@Z
?QueryCatalogAdmin@CMachineAdmin@@QAEPAVCCatalogAdmin@@PBG@Z
??0CDFA@@QAE@PBGAAVCTimeLimit@@E@Z
?SetProperties@CDbProperties@@UAGJKQAUtagDBPROPSET@@@Z
?GetSectorSize@CDriveInfo@@QAEKXZ
??1CImpersonationTokenCache@@QAE@XZ
?GetPropType@CEmptyPropertyList@@SGGI@Z
?VT_VARIANT_LE@@YGHABUtagPROPVARIANT@@0@Z
?SetUI8@CStorageVariant@@QAEXT_ULARGE_INTEGER@@I@Z
?Empty@CPropStoreManager@@QAEXXZ
?ReInitializeIISScopes@CImpersonationTokenCache@@QAEXXZ
?StopCI@CMachineAdmin@@QAEHXZ
wininet
InternetCheckConnectionW
InternetGoOnlineW
FreeUrlCacheSpaceA
GopherCreateLocatorA
InternetSetFilePointer
InternetAttemptConnect
InternetOpenA
InternetCreateUrlW
HttpSendRequestA
InternetEnumPerSiteCookieDecisionW
InternetSetCookieExA
InternetGetConnectedStateEx
FindNextUrlCacheEntryExW
IncrementUrlCacheHeaderData
FindFirstUrlCacheContainerA
CreateMD5SSOHash
InternetGetLastResponseInfoW
UnlockUrlCacheEntryStream
InternetUnlockRequestFile
UrlZonesDetach
InternetGetConnectedStateExA
FtpCreateDirectoryA
FtpCommandW
FindFirstUrlCacheGroup
InternetGetConnectedStateExW
GopherCreateLocatorW
CommitUrlCacheEntryA
HttpQueryInfoW
InternetShowSecurityInfoByURLW
InternetReadFile
InternetQueryDataAvailable
FtpGetFileSize
SetUrlCacheEntryGroupW
FtpCommandA
FtpGetFileA
InternetSetCookieW
FindNextUrlCacheEntryW
CreateUrlCacheContainerW
shell32
ShellExecuteEx
SHEmptyRecycleBinA
SHPathPrepareForWriteA
SHHelpShortcuts_RunDLLA
ExtractIconEx
StrStrIA
CheckEscapesW
SHQueryRecycleBinW
StrRStrA
SHBrowseForFolderA
DllInstall
SHGetSpecialFolderPathA
ExtractIconA
DragAcceptFiles
Options_RunDLLW
StrStrIW
StrRStrW
DllCanUnloadNow
SHCreateDirectoryExA
StrCmpNIA
SHGetPathFromIDListW
StrChrW
SHGetFileInfoA
SheChangeDirA
WOWShellExecute
SHGetPathFromIDListA
StrChrIW
SHGetIconOverlayIndexA
SHGetNewLinkInfoW
SHGetFileInfoW
CommandLineToArgvW
SHInvokePrinterCommandA
SheSetCurDrive
SHEnableServiceObject
StrRStrIW
StrRStrIA
DragQueryPoint
Shell_NotifyIconA
SHLoadInProc
SHFileOperation
expsrv
__vbaSetSystemError
rtcVarBstrFromAnsi
rtcCompareBstr
BASIC_DISPINTERFACE_GetTypeInfo
TipCreateInstanceEx
EbLibraryUnload
__vbaI4Sgn
__vbaLateMemCallSt
__vbaRecAssign
rtcMacId
__vbaI2ForNextCheck
__vbaNextEachCollAd
__vbaVarErrI4
__vbaPrintObj
__vbaAryMove
rtcGetDayOfWeek
_CIatan
__vbaStrToAnsi
__vbaR8ForNextCheck
rtcIsDate
__vbaVarTstGe
__vbaCyStr
__vbaVarDup
user32
PostMessageA
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE