faf4fe4520d69bf99515cb43824c87db_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

faf4fe4520d69bf99515cb43824c87db_JaffaCakes118
Size

701KB
MD5

faf4fe4520d69bf99515cb43824c87db
SHA1

0915f773e0b08c15a7d8119f928c6ae8d87d6304
SHA256

2d6ee0e28f195cdad3ec4df84ffe457d1187d3dfa0bc9dbbc1032b90969a3860
SHA512

6388fa68562b82d53859f00dd6c6071550202931530a5573589f1013b90da01c6d51bfc5d7a96b03d848207ccaab8181ec57cfedb99f7f605d89b712b88e1868
SSDEEP

12288:s3IOigqJXOyAEkbYdO4ly+Sb7mcH+Gz7fKuNz7hAPzbTDyOgYPbEMEbwCn3bMOg:VOilJeyAEkbylaexuNJqb3yOgwbEMEbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf4fe4520d69bf99515cb43824c87db_JaffaCakes118

Files

faf4fe4520d69bf99515cb43824c87db_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_004008B2_5D3F_4F16_AC76_DD18C308B384
fn_0049F3FE_8939_4CB0_8A47_FA2B55BE1AA7
fn_016B717E_F0A6_4815_8662_EFF9BEA95B48
fn_01DA5F00_B11D_460F_A9E2_9AD325FA3D4D
fn_02BABB62_6A0D_4866_8B6A_7293E7FDB263
fn_0476D119_8A80_47A3_BBE8_17E84A2DE950
fn_0733A6BC_A2D2_42F2_9374_108702237D12
fn_077F866E_A277_4A93_AD18_DF9D0618376F
fn_08AEBB70_6D65_4D3A_9BC0_223A7ECADC7C
fn_0A124492_A232_411C_B715_E146C69F0D7E
fn_0A9F0E70_C554_4CD9_AA40_8E6F0C509213
fn_0BFCE8FD_2DEA_493B_8860_A5745748CC6F
fn_0D06E479_A5D3_4444_A27C_4A612675699C
fn_0D6AC400_4F63_461D_8D6D_96A08C4191C3
fn_0F1C3828_1675_44AE_8615_B72828E90A3B
fn_100ECB21_458C_4984_864B_0943A8078870
fn_10C36232_67CA_4EC5_B5C5_BF2E949C93E9
fn_10F88388_424A_48D9_8ACD_72CE77DDF398
fn_11F346B4_EE38_470D_ADB8_4CD9D5164BA6
fn_130CBEC1_FBFB_47F1_BD37_E8FA7B0F3544
fn_13D830B8_E63C_408C_859F_A5340FB0667F
fn_13DF3F26_7A72_4597_8E95_D29A6705A041
fn_13DF54FA_9595_4B67_985E_58C38FF42398
fn_1576AF5E_4231_4DEF_BD37_0820C9378CB6
fn_15F80FC7_D634_4832_A241_46E3E724B697
fn_16D8C645_1F3A_4EC6_985C_05521FE74848
fn_16EFF3EF_7E97_40B8_8ED1_1B7815AE8ED7
fn_16F73096_026A_490E_843F_ED51077ECF09
fn_17BF1844_E224_46CF_B596_E343B5BD26CD
fn_1897B08C_D6DD_4BF5_9DF7_81C51CFD1E12
fn_1A849ECD_2247_4AEE_9C8D_EF20842A4467
fn_1B22A747_BCC3_4AC6_98CC_763901A71EE0
fn_1BACFEC4_D76C_49C5_840E_C6ACB9E4D026
fn_1BE3B5F5_C160_4977_B505_3502DEC6B652
fn_1D4DEC01_5211_42A7_B1A6_7D1C68F172BA
fn_1D74D115_9C21_4B09_B757_E07A65715F59
fn_21335436_8AA0_4851_850C_EF3C922ED22C
fn_2182A786_93FF_497E_A464_65C36EEDAAE0
fn_22879F91_CEC2_4DB2_A218_E46FC4D79999
fn_22E49EEC_0F2E_4AA7_853E_C9E83AA0C872
fn_24CE22E6_8990_4A32_B109_CF64FD32F9E2
fn_24EFC65C_7607_4851_A94A_A288C5D969B7
fn_24FF71B6_D29F_4F31_84CD_CCA382E6B7C7
fn_25A7899F_01F8_4DBA_822E_496FDA35025F
fn_263AC31A_9B2F_4A5A_9DC8_C35BFA31C2EF
fn_265A87B7_906D_4CEC_8260_2D4FEA866193
fn_2812AC4E_FB2E_486F_A918_1E3E59A29A78
fn_289D3110_45E3_48CE_AA54_1DF14671567F
fn_28E2C7A6_415B_4DB2_B67A_54A3CBBDFADE
fn_292733D3_1D6E_442E_B351_07A4C47A3274
fn_2B0F53A3_D375_4079_AA44_8206C2242BAE
fn_2C98BA64_D185_4882_9A29_A155704BF1F5
fn_2DBDC42B_C187_43F8_857D_DA529BBCC103
fn_2E953D1B_6739_4500_A742_505C01EDFE3E
fn_3261E158_8271_4A70_A3AA_D0F615591171
fn_329A74CB_ABA4_473D_B327_5763FF450ACD
fn_33617C98_32F4_4F0A_96DF_205A5759C60E
fn_3406BCFF_EE1F_46CF_919B_450AA3BE1B0C
fn_341AF2F6_6918_4351_AB71_3AFD1F1589BC
fn_3637DD48_A6E6_4A5C_B618_88EAD702B3D2
fn_36861680_2BE5_4F67_808A_0D2513C56F90
fn_374894DB_BA9D_427A_A5CE_77CE9AD11511
fn_3BCA6BB0_6DE4_4458_8084_725D79730D2C
fn_3D0BF6C5_D5C8_4B70_9D56_A32193E01D42
fn_3DB8BB1A_A75B_4C5D_9C92_D25BFFE4EBD5
fn_3DDB4B9E_5076_4525_BBD3_DC345C4C2995
fn_3E91A100_4A27_4182_8F3D_93935F83D221
fn_40975C30_CD4B_4A61_9121_20460F2B6952
fn_40F3F37C_AFD9_46DE_A003_78A400246BF5
fn_44673781_F940_4E95_A6B5_04B4330D7AB9
fn_446D6E81_54D0_43BB_A330_1D6EB792D791
fn_4480BFC2_31A7_4C49_85D1_277CE91D4ACA
fn_462CB04A_9B4F_4AEE_B2B7_6DD51426C404
fn_46C030D8_C9BE_4CFE_94D7_C12B9B488C5C
fn_46C7C908_1AAE_44D9_B2B1_9D53271553CB
fn_4770052C_93A0_4B75_AF21_E26EABA96F05
fn_4ABF1A81_F8CF_4F21_95E2_1BC673A801ED
fn_4CBD01A7_A7AF_4161_9FAA_5EA408F1D21D
fn_4DD6794E_C22D_4D70_8AF8_8B9F2C16EA11
fn_4E78631B_4CBB_4B3D_BA54_993A3B4066A4
fn_4F9AFBDD_2CA6_4AA4_9701_ED3624BFA602
fn_4FE0B62C_E24D_412F_B1CA_6193D50A78F3
fn_506EBEB0_7E61_4D2C_91BC_9EB85741DAC4
fn_517D17FB_1F72_4055_B62D_103347ED366B
fn_51ECA9E3_E7CB_4447_9366_F9FC10351FEE
fn_5275C673_78C6_4F5F_930C_DA2D4F2387C5
fn_52A3F7D6_664E_495C_B830_D93EA217EC15
fn_52E083E2_41C3_4565_9C4B_F505208C4230
fn_538AB8D3_BC09_416B_BEE7_1A5546EEDD7E
fn_53CAEA6A_8298_44B0_9294_C9BA3FB99E5E
fn_53DB6A07_7B10_4BF7_8457_B1864872CCE7
fn_53FE70C6_7E91_473A_9A85_5176790BFE52
fn_54DCCFB8_81AC_4A6F_AAA1_4FA8CEB8AF09
fn_55CE3817_F010_482F_ADFB_B6AF41683CB7
fn_560D909E_8306_4594_B915_52700B558A47
fn_562F1A90_85C3_4F8F_BC91_4B1F33E4AD55
fn_57DB5249_E1FB_4C24_8934_C65BCE44D883
fn_5B1B338B_B024_455D_87DD_869C6139DCE8
fn_5B984EE5_C3B4_4043_99FD_59B28B362AD2
fn_5BCD3E85_C8EB_4B83_8757_444317D4AEE2
fn_5DC01B3B_35A6_4B40_AA00_18754EBF4FDC
fn_5E389323_E9E3_4244_8D50_1BF19E3C7A83
fn_5FD678DF_60B9_4C11_8741_2355807E05B7
fn_60E07EBE_BD59_410C_98C1_008FFA82776B
fn_61806ABA_07C8_4649_85DD_0F916E14E3E6
fn_624381BB_6B43_41AE_B38C_B6A57004066D
fn_67247519_407C_433B_89EB_D27C2C02A8DE
fn_67AFEBF5_E1CF_41B8_B385_7849B51AAA52
fn_68B79317_5416_434E_8EFE_563630695973
fn_694D0631_5309_4127_889A_6273DF7C4F48
fn_694F584A_4E9A_438F_9E54_55450B2C9B7B
fn_6A1A6727_CF2C_4622_A1BD_5471B1395754
fn_6AA4297C_B091_45FD_8295_BB326FFB52D9
fn_6BBF7824_2B55_45BE_B448_C86917639C8A
fn_6E0F57D4_2DEB_45E0_BF99_03A7BB23248A
fn_6F067985_0C7C_427E_A274_DCCAAE66DE60
fn_6F2888D0_4577_4290_AB66_B848E9B35739
fn_6F6F0B80_F682_4361_8263_066B596F7E0F
fn_6F983152_A4D7_452B_A95C_E81CA530F566
fn_71C35207_CFF9_4617_AAF1_E079F645890A
fn_71E5072D_3A26_40E0_9C71_251D268BD74E
fn_7208B78D_1557_49C4_BBCE_6293666262B3
fn_723F3AD8_0891_45B0_B038_8BE8E945AECF
fn_731C0442_983B_4511_ABB6_B263030232CC
fn_73D23E00_B4C7_4A91_B7A1_19137A832819
fn_76B5C824_6B7D_4099_8FBE_61B8E2151367
fn_7726A6D2_D75E_43A6_813D_4CFBED777DAD
fn_784ADBAD_9BCE_4D94_958E_E7A4BA5B2A28
fn_78ABDC50_9440_480D_9B3A_61570501E462
fn_78B2DC36_33E8_4BC8_A76D_912E92A3608A
fn_7A143CE8_00A4_4C39_9FD1_FE8716D3CFE1
fn_7A285D04_A24F_4E05_B1A1_D7975E0DED8C
fn_7BB57AD8_647D_4C46_9CA2_1E6852F03615
fn_7C5D41BB_D5C2_4AC2_8054_B0F64FF18F52
fn_7CAE0B67_2012_4760_A09D_220E2E0C0443
fn_7D007ECB_C04F_456E_A737_F906F0E8FB65
fn_7DB01882_9966_42AC_97CC_DA7F75057258
fn_7EEF56C2_51CA_45CC_AF1A_6271D14888C0
fn_7EFE488B_000F_4321_9830_D0BC121F5177
fn_804D5FE5_8679_42F5_A287_4B974FBCFF0C
fn_81661450_32BE_4328_8B73_6B4FDAD8D3FA
fn_82A16E92_A62D_4581_95B9_13A0F68322C8
fn_832B6FFF_BA3D_4076_BC73_C4FF8F054E6D
fn_840392E3_9BAA_4656_BED1_F0998D76445E
fn_840779C7_DE86_453A_9513_32D7CB612479
fn_8570B953_230D_4510_A435_B2DD63143CD5
fn_858F67BC_2079_492F_882E_A41911987F38
fn_867D0BD1_A9BE_4E53_A078_B4E6716B59F6
fn_86ED8283_8F4B_491A_A3DE_F137C6390D9D
fn_8798CCF3_749E_4C14_8DC8_B6E19F547E09
fn_894F1368_EFB2_4D31_A72E_0531BB051296
fn_8BBDE679_F165_41E0_AAE6_501D02E0EFB4
fn_8C045E38_EBFB_4883_970B_E2A81C78DCE6
fn_8C841DA9_82BE_4204_98DC_1F2320A2F7F6
fn_8D295B17_B273_4833_8F59_1CE73FA931A8
fn_8F7C26A9_5563_4330_870C_F8CED8CB19FD
fn_9146254F_F505_4DC8_B8E6_766734E13154
fn_93FE5947_7067_4708_BC25_C01561FC3799
fn_950B7AF8_99C5_453A_B9C8_B71ECA9F27FC
fn_95DCC4D6_BBCE_4884_AC69_6B96635AE8A3
fn_977A1F64_6FE5_4B0C_885B_5996FD6C6799
fn_9798018D_CB29_48DB_B0B9_184499049202
fn_9827E4A7_6F72_4BBE_9DFF_CAC35125AC14
fn_995EA76D_63EC_4D5C_84F0_88F404C6CFA4
fn_99C1D471_E7A9_408E_A380_B8D682C80B99
fn_99D03E3C_941C_455E_A643_6951BF21D1E3
fn_9ADF8A06_881A_4520_8A98_12BE53C172AE
fn_9D1B2772_F57E_45BE_8409_A01FA21C29F0
fn_9D3FA34F_5A3A_425F_8131_7A4218488865
fn_9E37EAAD_3624_4DF2_9E5F_CA5240898A70
fn_A0C8B31D_D7F8_4B86_BB2C_FFFFA8C09FCB
fn_A2602CE0_5B1B_47DB_8BF4_30D8B0539D29
fn_A4A75CD3_92C2_4640_92C9_FA88501EB5DF
fn_A5BD1863_5EC3_48F2_8858_414F66EDFE65
fn_A61D2F96_CABD_4BF9_81F3_1E14276F4F0B
fn_A7083F73_0E60_4E71_A013_59BA8F2CA652
fn_A8E9B65B_9D6A_4B83_B2BD_5477B05235DC
fn_AA921F53_4DBA_4352_95E3_B958EB76B917
fn_AC244130_6771_4C04_9BD2_544188F65536
fn_AC7EF0CC_BB5A_4084_BC5B_A10BE8F3DBDB
fn_AF38CA28_2DD1_4D2C_AC98_A91B054B2DE1
fn_AF999FB2_EF38_4C35_9436_6BFD7D4CE2CC
fn_B0E2C925_F18F_4B3D_9C16_62338844BACD
fn_B21FF2DF_6AD0_404E_BDAE_6C8A9E8E3B19
fn_B3D62D14_26F4_444B_8FB9_ADAA04738111
fn_B468185C_EA09_4068_AEBD_DFAF722B33FD
fn_B64A41C0_23DB_46A6_86FD_0AB4A5BEE805
fn_B8F802EF_E93C_4121_B0A4_2E79C9B419BC
fn_B91204EF_9D6B_44A4_B02A_6132C3A62CF1
fn_B941D789_6BEB_4428_A84A_56D4D089FB03
fn_BA42C19C_E0AE_4FC4_87AA_01F304D7B90A
fn_BA670EEB_541B_4E93_ACB1_EA5ADF07BBD1
fn_BBA6384F_8B87_4DA2_A0F7_41EE04BE825F
fn_BBB43C7A_5EB2_4CF4_A7D0_F73DDBBBA06E
fn_BC4D6521_1439_4EB9_A2BD_1DF2F94D9234
fn_BD2919FC_A3C4_4022_8377_67CD941E0544
fn_BFE6CF74_FA42_4AFC_8598_6FC690B6213A
fn_C051F04B_6CE3_4B0B_AFF3_F91390D49441
fn_C1B6F4F4_9D63_437B_A9A0_82605FB1DE48
fn_C371B262_8FEE_417A_8AE1_49F1F7C3A396
fn_C4ABDFE3_F3A9_46B8_8975_54C3D7ED60E0
fn_C5EE8C9F_1011_42A7_B9D9_8903E0D97CED
fn_C74D9415_CA58_40FC_BCFC_7A26F5DAE853
fn_C778F542_1E35_4BD8_B50B_2ED5FA63024E
fn_C788BF2B_9B0F_4FD4_B4F3_0E254A565FB2
fn_C7962D37_F802_4072_8870_8FD144BF8C55
fn_C7A712C8_00B7_4EDB_B0C2_938357D95A8C
fn_C8F6E465_858B_4C5F_B50D_3E06E4EAE1C3
fn_CA60CE1B_B50D_4C04_BBF2_2298768245D4
fn_CAA01C29_E263_4C2A_AD9D_ADA43E9B1831
fn_CC6D5EF0_E0ED_4EF3_AE15_60B2FE18E0AC
fn_CD4C66C6_7FF0_4920_AF80_639F6DBB774A
fn_CD593452_1879_4CCA_ABAA_165D9F97B050
fn_CDDE8E48_E123_4CFF_9445_0AEB5859D5BF
fn_D1C87633_4FB4_4BC9_B145_721BBC042A60
fn_D2DDF0E2_92AD_420A_BD92_B5B927C9DEDC
fn_D3421ACF_C120_4D08_8399_61D2D428E870
fn_D4C1F729_63A0_4573_A9B5_BE5A5C649E94
fn_D7BF5A89_E5BB_4532_8A43_86113BAF4C0F
fn_D853A2E8_10FD_42F4_BE23_BF7230926DA6
fn_D8626758_1816_43E0_AF9A_D6AD14F5FC51
fn_D86C0271_C0B9_4093_85FC_F067CEE07D44
fn_D8A64BAC_E311_4995_A769_B1C7E91EC047
fn_D9ACE166_6145_4C6B_8723_A2DDC2574AC0
fn_D9D1F621_8BAB_4960_BEE9_695B046593B3
fn_DA85A778_0427_4684_99C6_68E7C168B8C8
fn_DB2C8491_27A7_47E1_A012_88DCE4BEA50F
fn_DBD9378E_574F_4FEE_B6BD_0CA83AAD4D5F
fn_DBF4F041_641F_4D3B_B92D_5782C2F5AE18
fn_DD93BC1F_E003_4493_85E9_BCE8DC8B0664
fn_DE8EC389_20A1_4515_AF11_575E6028812C
fn_DF8A7A7A_7315_4153_9F64_3849649141BB
fn_E2828C80_482F_4959_94FA_5360CBB83653
fn_E35653FC_A569_4FC5_9E30_55E23A528C8F
fn_E637A104_AC8F_4ABE_A9AB_A6E68E33750D
fn_E6C42B35_0CD6_4F69_9A4F_3A7A995A88C7
fn_E7BBF008_2D11_4640_B19C_1AB76232A5BB
fn_E81B8C57_157D_443C_9D6A_D0752FE868C3
fn_E9C4F191_EF22_41F3_AFEB_21FF7A0C9DC7
fn_EAB2F2E7_45D8_4AD9_BB06_6B153F878229
fn_EC2ABDAE_36C5_4A4E_A21E_38D422082ECA
fn_EF2D560A_50D0_455E_A968_C091BF35E60D
fn_EF8A1D7A_23FC_435B_B8C4_7335DFF19172
fn_EFE47049_402E_4C18_A073_1CDDECD746DA
fn_F071948C_139B_4B26_8838_AE6E5A5A1BFD
fn_F0D2E97D_5944_41B6_AED1_A0EBF99F78F8
fn_F156D152_7D8B_4303_855F_AB204263D640
fn_F27CC563_C413_48D7_8938_CC59D3767316
fn_F284AC60_5D00_4CFD_BB18_0197D9676510
fn_F4AE836E_2CF2_41C6_9B7B_4595A5C54CA8
fn_F4F92134_AA34_4C6F_AD58_FD758F6AA49C
fn_F5B82C8A_C660_4734_8D09_021A74502463
fn_F6212EDC_68A8_4F16_92F0_B247F8A9BAB8

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 33KB - Virtual size: 33KB