ff9c9479217111d0c02b536ea59ee861_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ff9c9479217111d0c02b536ea59ee861_JaffaCakes118
Size

701KB
MD5

ff9c9479217111d0c02b536ea59ee861
SHA1

d2b240761a9cbe4186c5f7f27e56fea1b9266a54
SHA256

9981a3ee724ffa5ea4af7bfe125333959a1f9172fdbe9bb376d5251b54cb661f
SHA512

a37bc8d62e43fae256a083eb8fb9030458b160303cc40dd7fc325db537387fac0711c3edb07085c76e78fa7a23b92789de995859fd8260b2f109f8e2ad28bf02
SSDEEP

12288:Gaou4gq/IeCX1CL9NpJl3+CErW8H+Gz7fKuNz7RAPzbjDyOgYPUKP6ZNtpWFVxB1:Au4l/FCX1CL3ldZxuN5qbHyOgwUKP6Zw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff9c9479217111d0c02b536ea59ee861_JaffaCakes118

Files

ff9c9479217111d0c02b536ea59ee861_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
FlushInstructionCache
SetLastError
CreateFileW
GetFileSize
SetFilePointer
ReadFile
ExitThread
WaitForMultipleObjects
QueryDosDeviceW
GetLogicalDriveStringsW
ResumeThread
GetVersionExW
ResetEvent
SetEvent
CreateEventW
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
WaitForSingleObject
GetExitCodeProcess
OpenProcess
RaiseException
LeaveCriticalSection
lstrcmpiW
GetLastError
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
SetThreadPriority
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessId
WideCharToMultiByte
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
FormatMessageW
LocalFree
WriteFile
GetFileAttributesExW
CopyFileW
FlushFileBuffers
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
OpenMutexW
CloseHandle
GetCommandLineW
GetLocaleInfoW
GetEnvironmentVariableW
GetVolumeInformationW
GetWindowsDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetLocalTime
GetTimeZoneInformation
MulDiv
lstrcmpW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateThread

user32

ReleaseDC
GetDC
InvalidateRect
InvalidateRgn
FillRect
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetSysColor
GetClassNameW
GetDlgItem
GetFocus
IsChild
EndPaint
BeginPaint
GetWindowTextW
GetWindowTextLengthW
GetDesktopWindow
OpenClipboard
EmptyClipboard
LoadImageW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
EndDialog
SetWindowLongW
DialogBoxParamW
GetActiveWindow
SetFocus
SetForegroundWindow
GetWindow
DestroyAcceleratorTable
PostMessageW
CallWindowProcW
CreateWindowExW
RegisterWindowMessageW
GetClassInfoExW
GetCursorPos
TrackPopupMenuEx
IsWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
SetCursor
LoadCursorW
CloseClipboard
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
OffsetRect
ReleaseCapture
MoveWindow
IsRectEmpty
PtInRect
SetCapture
GetSubMenu
LoadMenuW
ShowWindow
DestroyWindow
DefWindowProcW
CharNextW
SetRectEmpty
LoadStringW
MessageBoxW
SetClipboardData
GetWindowLongW

ole32

CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
OleInitialize
StringFromCLSID
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
SysFreeString
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysAllocStringLen

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps

shell32

CommandLineToArgvW
ord155
SHOpenFolderAndSelectItems
ord190
Shell_NotifyIconW

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Exports

Exports

fn_006CF0F2_8C2E_44B0_9036_AE653397EC18
fn_00B02619_39E6_49C6_B133_15D5DDF447B9
fn_06EED998_F139_4EE9_B7EB_CFD028682BD5
fn_0723006A_3846_45FB_8C5A_FDB1AA1F28B0
fn_0772F7DF_CC14_481A_8B70_0C5C99DCF496
fn_07E70ED2_3178_4CBD_9B4C_2E07828F806A
fn_085813CC_4761_4B0B_82D2_FB02981DECFD
fn_08672AAF_2534_438F_BF1E_A6373610E90C
fn_09FB880D_7DCE_4C50_BC8F_8DE453DAAFB7
fn_0C4E623F_CBD1_4341_9FC7_8EB5021246E2
fn_0CCB9CF2_EC46_47B9_BED1_CFB83F0809A3
fn_0D265086_9ACB_4982_AA54_A180EA5E392C
fn_0D39E9E1_7CAC_474F_8483_75EA2133A50C
fn_0E4E5A92_1F04_4E5E_B51E_64F3E659BB6F
fn_0F58B325_8950_47EA_AB54_5F7D97C29612
fn_0F6D3139_18BF_4124_9E2C_81CF51080ADD
fn_1124EB76_6822_47E9_942D_329CEB353C7F
fn_112CAFF6_473C_470B_A67E_C6463ABBF755
fn_119D3F3F_F7ED_4CB4_825A_DEB6F9D5FDF5
fn_138B75A1_D71B_4E6E_AAE8_1CEB388B06F7
fn_16C454A3_C038_446A_896C_EC0348740350
fn_16F4F440_9E9A_4EF2_877D_8E241B8C22D9
fn_1712FDEA_533A_4748_8EA6_AB676CF87275
fn_172E28DF_8B90_4EAD_95CE_B2BD1727ED05
fn_1808CD7B_BD25_4386_82F6_7E6173BC4827
fn_18BD6102_8C4C_46A1_95AA_DEE58FE9859F
fn_18F216E2_14E0_46D4_BDC0_A269A8B93450
fn_19665161_D393_4FFA_996E_DED522E4358E
fn_19A1D0BB_86F4_4CF8_AFA1_B3582304FB9B
fn_1AEFEF82_C261_46DE_A227_AC20B26D0DEB
fn_1AF729A2_6D60_4657_B27F_FD2685FFDB23
fn_1C4C97F5_A824_4238_B1F5_E82540608BAC
fn_1CAA0C1F_397C_4AF3_BF14_472B51BB6296
fn_1F8532B0_28A1_470B_916E_D3D0D9AC9C08
fn_210FB512_61FA_4BEF_BB7F_99EA219C0671
fn_22D3577C_B584_4618_9BE3_108586B53C59
fn_22E02AD7_C4E0_4077_A36C_EA285AF3855E
fn_253CB5C0_8744_4BD8_858B_962D03438DCB
fn_2700BF38_C335_4B52_84E9_393A7FA13E71
fn_2738F77F_2D5E_43A9_9781_D636BAB32C45
fn_277EDB44_60AF_4065_AA99_7624CAD5C430
fn_29B65092_5BE8_4322_B19B_9465F430C131
fn_2B3CD6A8_FE1B_4E1A_BB4B_BD29C36AD4AD
fn_2B781C14_4E50_4531_8B4D_0C17E3216776
fn_2B95BEB9_DE24_4448_AE31_EAC03913689C
fn_2FF48F9B_9C4F_4B1B_9F82_68F77D9DDC26
fn_304B2E16_C1D0_4A82_A59A_FFA54958DF32
fn_30A831A9_A74D_4E13_8898_2D8B2FE59CD4
fn_30E093ED_A157_496C_BEFA_FC24170D0362
fn_30EEB33D_B8FF_4295_9F1A_0832F2FE394A
fn_31114D15_FC7E_4ABF_A304_EB980FF900CC
fn_3361D42C_E8FC_4579_8215_FC139AB3B513
fn_33FCF867_6259_4B5D_B249_7150ECA85B0F
fn_376F3800_79D5_443B_888D_D2A778FB33FF
fn_38E6A2BC_4744_4A19_AE1E_6440A92FCC9D
fn_3971612C_3F62_432C_9804_C92D4C6EDC9C
fn_39BBF333_3E22_4E69_8660_A9E16E794AD0
fn_39FFAF2A_CC96_495F_9202_89B1663B1DDA
fn_3BC2861F_2F7B_40AA_B5B5_D37940F02D74
fn_3C74E86A_92EA_4C06_98D0_D9777D6FA0F0
fn_3C8D6BC9_6E37_4D62_A8C7_67F1C6481013
fn_3DC1D7A4_BB08_465A_ACC4_BA8BA75A728A
fn_3DE5BA62_1D16_4B22_BAC8_EA5238D4BE37
fn_3E15DBF8_C5B3_4859_B264_5FF4E20A74FA
fn_3E90E6C9_EBB7_4B77_BDF1_8995AC8B4F50
fn_3ECF3BAD_225F_48C3_AAAA_982E7A4FAA15
fn_404DDB62_DA3C_4CA1_BCC5_4897B4D1E2FB
fn_41EDCF97_537D_46FA_8001_A86D266AABB4
fn_41F4FFA9_A728_40BB_8324_CB6697D65FA1
fn_4346BCC4_854D_4869_968F_62DDF933D110
fn_4364A876_54C5_4431_BC4A_88E335473E5D
fn_43A6D0ED_E212_4FC0_BF57_446BD67AC565
fn_44067AA3_92E3_42D7_ACEA_E38E906DBCD4
fn_44C75609_736E_4083_A423_74570C921B29
fn_45CAF925_F016_4052_A4CC_F4E2A66FCBFF
fn_472ECCF4_AD31_4835_BD1B_FAB65E22861A
fn_474E0F73_B874_484F_BA22_92AC1588967D
fn_4860C962_2293_4FB1_AF46_346F8F6644DB
fn_4860E0F4_7DE7_4DE0_AF5C_FE988CFA8AC7
fn_4933A936_356C_4390_95D1_65F8B5ED63E5
fn_4AD5D96D_9EB0_4F3C_B807_47B59B7A9EC9
fn_4C3732E1_AF15_42CC_A757_D89A3749BD7D
fn_4D4EFC1E_2305_428B_B9B5_BA125C1484E2
fn_52BE375A_FB66_48AE_8746_529CAEA93AD1
fn_52C00841_CE6B_4B3B_A8C0_D8AB2681BA0C
fn_53ECFF8A_F4BB_413B_9834_2220815387E7
fn_54757468_35F5_44A5_ADC0_825148AA9158
fn_551A964A_F0DC_47FD_B7B8_4D3A5BC91238
fn_55CE3EF7_E78B_4562_AE3B_78F461B1A32C
fn_55D5F902_F478_4360_915A_DF21120684BA
fn_57BD4023_E4AA_4542_A293_C0CA9CABEC9D
fn_586356EE_FAD7_42BA_B2DB_F28784368EF5
fn_59161DF6_E7CB_40B6_8CEF_F0821F35FF33
fn_595ACAD6_6C1D_4ACD_AE0A_C35D8D109290
fn_5AA7AE98_560E_47D8_813C_824F1A308388
fn_5CBFFFFA_8698_4393_889B_A6B78CA3C6C7
fn_61175F23_4D06_4891_AF03_DCE9D0089893
fn_61FF39F5_0C58_40CF_BDB2_540A3853D56C
fn_62A84636_5F04_4E2C_8F25_3D5A7FB0E00A
fn_65BBA26C_A567_4F5F_89AB_9A61DC8B7CFC
fn_65FD7E81_4B62_41D8_A9EC_FB008160C6DD
fn_6988A9C9_F104_4E41_AB8B_CB1435F263D1
fn_69F6A717_CB13_4FDE_87A4_3826B3D3947B
fn_6B4478CD_37EE_4EDA_8485_64579E028D8F
fn_6DAC353D_A369_4253_B503_4FC9BE01F259
fn_703D572D_5326_4774_B2CD_DCE146F5C5AA
fn_70F4C016_4BFF_4ED8_AE5B_29D563C10718
fn_711E2E7F_6147_4671_B21D_EFE11A40AA8B
fn_722096AA_2377_4F62_9298_98A09E452E38
fn_73A55E12_F694_4041_84CD_E0DF476E2805
fn_74308E79_1E50_454E_8E96_376A83DF57FB
fn_74E497A8_ACB9_4072_9916_45DD36F18FC7
fn_75EFCDD3_584C_4F4A_940A_30C2BAA717BF
fn_7612DE82_A022_4E18_BC5C_97CD202254A0
fn_77106EC5_BA6D_47F8_A691_E307071F762A
fn_778DCF3C_319D_45EA_BBCF_A4ED39AE07A5
fn_785E92BF_BFC4_4939_9A3C_E78447115F27
fn_7934E7CA_FA27_4789_B500_345DE745FAB1
fn_793AA7C8_EF2D_4B4C_9915_372CDFDAB17E
fn_7A67BD89_BE7B_463E_97A8_547778F7E724
fn_7C091E6B_E25C_4919_9003_2B63C587F105
fn_7C75E91E_E9C8_4ECB_9AF7_4510E8E9783A
fn_7CFB21D6_0657_40EE_97C1_61E7DD7E33B6
fn_7D4C6B37_7B76_4058_98F7_E2A97AB6AA54
fn_7DE011C7_C8BE_4032_83DF_37D77484B00A
fn_7E17BBAA_DAC6_44E7_A88E_4A95555A8E5D
fn_7E825769_8221_4888_B6F4_E3D543E0F7D1
fn_7ED9A1D9_4C54_480A_9D16_799185D6474E
fn_8177F321_757D_435C_9583_3FA34DCFA103
fn_81A414C1_73B9_44C9_929B_FEB2871DBF93
fn_81BE47DB_CD93_454F_A890_54248329A976
fn_825D0AD7_EACA_42DF_944C_0ED3E4E1D2FA
fn_835F50DB_AE5E_43F4_8846_B3A7193FAD6E
fn_83759C19_FE16_48E4_9977_BAAD43FA9C5D
fn_83948500_570B_4A62_870F_8729D8588054
fn_83C8D630_7A0D_48FC_B16A_5259293EB48E
fn_840CA773_4E4E_4FA9_BE33_4F3F6B9AA035
fn_86D019EC_4483_4BF6_89A0_E05F97FFF006
fn_872A4467_86F4_4FEB_BC5C_8110F9C57BE0
fn_89B7EEC6_A426_4CC7_B8B3_B040278522F1
fn_8A42F66C_62F8_4D09_AE25_1963FBF3B5F8
fn_8B20077A_35B0_4B7D_9265_4F6E7CFEADCC
fn_8BF5888A_19FC_4A9B_A89C_2DB20ADC2A71
fn_8F327972_8EC0_4993_B288_457CFB2A8F50
fn_8FB6C0C9_B71A_4649_A2D1_8C406FFE6BCE
fn_90840D76_F8BD_4D97_BBDE_B06A9174F51C
fn_91494DAB_9384_4060_B7D6_6A418B219AE2
fn_91BC9D86_BA4D_444A_8B2D_8D88550E55D2
fn_9407901E_5E9F_4C3E_9444_B5E46730A58F
fn_94CF45B6_798E_4285_A900_B22955D79398
fn_954C75E4_46BC_4C74_9D29_261C06AD70E2
fn_9629F557_2105_4359_9310_7BB725FDB2F7
fn_9648874B_EC2E_43B5_B2A4_8DFCDEFA95C1
fn_96561BB0_DBD1_4050_90CA_123046E44856
fn_96945759_4AD6_4EF5_90D9_97DF8A819652
fn_98107B2E_7708_4E0C_BE9F_816E97467039
fn_9834BB1E_FD16_4718_8E28_A9DCE0AA17EF
fn_986065AA_D1C8_498C_B566_5592384F1E11
fn_9AE49C55_911E_47F4_BA2F_31C1EBF9327E
fn_9B4D8991_3A1E_4D2A_8073_5FBFF5E32CD9
fn_9BB3F229_1868_4D58_998D_881F9AF5721D
fn_9CD54D77_2951_4385_9442_5EDE5F1826BD
fn_9DE0D9D3_D7FA_44F0_A61F_07DDC4F1DF89
fn_A00A2229_567D_45D8_98A6_D356F31C637D
fn_A1E37458_5973_4776_8CEC_C0C0F2245EBE
fn_A1E93916_D3E1_4A10_A7B6_ADCEA4414405
fn_A32EFAC9_33FA_490D_A01F_9F40BF3FFDCD
fn_A3F03309_0B48_46C6_83B2_1D6A04EC0DA3
fn_A4ED0618_1D3F_4203_8A59_16C3D541693B
fn_A6C27839_9E78_49A0_A5D4_7E50995ED2B3
fn_A8D8F8A4_8611_4999_9F3E_775A6A90AD4D
fn_A9219AF0_8BE9_4E5E_8569_58BDFAE76533
fn_AC04DDCE_EFC0_4208_8B2B_AFC7F1153A05
fn_ACFE56D5_721D_400B_AD12_7B1FABA0776E
fn_AD96DBB1_D6D1_46F1_A51C_B8626DBF459C
fn_AE4E5934_691A_4FB2_AE36_F4416A05564D
fn_B07FF753_1497_4FE6_84F3_D1E18BC9875D
fn_B2DF9F2A_A149_4CE6_B0B4_DE656176F00B
fn_B3010152_1881_43BF_8A34_EDE5392C82C2
fn_B6E08F1C_967A_4E4C_A9AC_CA2190CEECBE
fn_B99759CB_1E1B_41FD_8B25_1B3415C41B80
fn_B9E99DE7_8366_4C9B_9BAF_F44938DDAB8B
fn_BBB167F5_A858_47C3_BC3C_7A6C7B6AF755
fn_BBCC5B1A_408C_4278_BBBB_65ED21D287E5
fn_BC333B1F_B7C2_4ADA_93E3_D625D45AB4EF
fn_BC7564D8_EB15_4F4E_9620_59BF89A96D66
fn_BCC3A090_4A84_493B_AF93_35C17F751205
fn_BDADB1FA_A81E_4308_9748_40C7FA6D9763
fn_BE3B394C_1F5C_4461_9802_3C296AAF4BFB
fn_BFFC5479_1282_40FF_BFE6_0222B328743D
fn_C086468F_3AF6_4E16_A3D2_1A6887CE367F
fn_C0CAC12C_E584_473F_8530_01AB91DF2D6E
fn_C2077D0D_2846_4587_AD24_E9A1417CB0D2
fn_C4060C80_CC68_4316_AB1C_0E90AD0DE9E3
fn_C55D45FD_6215_4661_B49D_F56546569EAD
fn_C6A26263_37A3_441D_A801_28F96A7DE499
fn_C894CECA_77EC_4B70_B787_9F3B049A3911
fn_CADF0700_130F_4AA1_BD69_1A09A07DAEA3
fn_CB6AD2EF_6361_4276_8CD6_97D5E532E80E
fn_CBD2FEEC_70B5_4FDA_9276_69B2DFF5D4D3
fn_CF9F71D5_2443_4C28_B834_3F41517570B8
fn_D08B777C_FB65_4483_8F57_A76345B24DE5
fn_D1120EA5_0895_4D1F_BE40_5EC2470AB9EB
fn_D132F611_A283_417C_A304_5B8C340949E8
fn_D170AB42_08EB_4152_B0AF_2FD019872C6E
fn_D1C42CE9_53CE_459C_932A_9703432D8D59
fn_D324B4B5_820E_40F4_B503_A8D5D699B4DC
fn_D41871A9_85A2_41B2_8001_16333F775C8E
fn_D5FCBF47_8EB2_47D5_B409_F514E3F586AC
fn_D694B10A_2A5A_4020_983A_1960A85F0EF0
fn_DA557C53_02E1_42F7_A9E6_D6223DC922CA
fn_DCB416DA_7438_47D7_982C_56F4599222DA
fn_DCC287E8_11C8_4434_B7E4_5FF2D8BC41A9
fn_DE4A6FA5_BDFE_49C6_8E1D_53A68E87C935
fn_DEAB434D_A4DB_4160_B43A_E4F411BD9068
fn_DF47B885_9DCC_4CC8_832B_C9C6DE32E5A2
fn_DF5AA6C4_8A40_4910_81CC_F6694A1645A2
fn_DF95ECCC_0710_46B1_919D_3B39E9C8F918
fn_E00B8856_DF2C_4CE8_9B9B_9CF69DEDFFFD
fn_E0AE02B4_7F28_4CC6_84A1_5EDCAA4D9B2D
fn_E14233BD_3279_442C_B95D_40A8B87F8F9B
fn_E21A34EE_F975_4267_8BB0_0E4A8176AA56
fn_E37EF588_85C4_4C5B_88D9_FC82FDDEFD79
fn_E413A722_E772_42B7_87EC_7CBB95D44E06
fn_E4199D38_0F6F_48E6_9B87_8C5217777225
fn_E52707A7_0703_40BF_AF9E_8D3A95D6B421
fn_E69AA15E_33DC_4A88_A759_8D05A51A2381
fn_E76B7838_C3E2_4028_905D_3C594B13D958
fn_E801CE66_2B76_4758_9C7C_21E8B233533E
fn_EA7A7CF7_121A_48A8_9410_A5717EDC8544
fn_EAE944B6_177A_45E2_8341_E18EE414169B
fn_EC407394_A78C_4935_AAFF_DF63B8679DF7
fn_EC8A7F9B_7130_4ED5_9998_DF5E901FB089
fn_EDD62089_CE69_4BBE_AAED_1F7341271D81
fn_EDDE6786_4D74_4BB9_9E6C_D082D54C301F
fn_EE14CDEA_1335_48A9_8346_17156D89F758
fn_EE33DCF8_4042_435D_9032_0BBC33BD6DF4
fn_EE582456_F3ED_4E12_9EB4_A59575D5EAE3
fn_EF90C914_15D8_441F_BD92_8807C08EA429
fn_EFAFD17A_1C0B_4738_BCF6_B25FC0B64429
fn_F2B1054D_B66F_4AE0_A01D_999DFCEF0337
fn_F2B7C023_0DCE_48C4_87E4_000BDF52A232
fn_F43CA908_DBB8_4AC2_9449_EA5750044655
fn_F617CFD9_98F0_437B_B8FA_8ED2BB3BC1E1
fn_F640A855_715C_4F1A_9A0C_4830DC018C02
fn_F8BEFB7D_F75E_4EB1_BC53_E701A0DEBC65
fn_F9563A49_8059_44A9_A437_FDB1C2965EFC
fn_F9974BA7_0C13_4725_A543_41BF70967498
fn_FB79044B_7FF6_48C2_92A9_EB4519EB679C
fn_FC8704EF_9D0D_40E0_98C8_6D6382F703EA
fn_FCE5CC99_4C7A_4C8B_AFF5_A199BE3059BE
fn_FD21D929_DB77_4FE9_B722_93112B8A6497
fn_FE320B2A_9040_461B_9509_9DF74825ACB1

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29aeebac2d7429005ea7625691db385

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

comctl32

version

gdi32

shell32

psapi

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 33KB - Virtual size: 33KB