Extracted

• b2b4f7b154ba5e38fa8b0a3bb346cd2b_JaffaCakes118

  .exe windows:4 windows x86 arch:x86

  2580a10c8f72873509353911244baabc

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mpr

  WNetAddConnection2A

  ws2_32

  getsockopt

  ntohs

  inet_ntoa

  inet_addr

  htons

  connect

  WSACleanup

  WSAStartup

  setsockopt

  WSASocketA

  bind

  listen

  accept

  recv

  closesocket

  socket

  send

  select

  __WSAFDIsSet

  getsockname

  ioctlsocket

  kernel32

  QueryPerformanceFrequency

  SetEnvironmentVariableA

  CompareStringW

  CompareStringA

  GetLocaleInfoW

  GetTimeZoneInformation

  SetEndOfFile

  GetUserDefaultLCID

  EnumSystemLocalesA

  IsValidCodePage

  IsValidLocale

  IsBadCodePtr

  SetUnhandledExceptionFilter

  GetStringTypeW

  GetStringTypeA

  FlushFileBuffers

  SetStdHandle

  GetFileType

  SetHandleCount

  GetEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  FreeEnvironmentStringsA

  UnhandledExceptionFilter

  ExitProcess

  CloseHandle

  CreateProcessA

  GetModuleFileNameA

  GetSystemDirectoryA

  Sleep

  LoadLibraryA

  GetLastError

  GetProcAddress

  GetModuleHandleA

  GetTickCount

  GetComputerNameA

  GetLocaleInfoA

  GetVersionExA

  CreateThread

  DeleteFileA

  OpenProcess

  GetCurrentProcessId

  CopyFileA

  SetFileAttributesA

  GetFileAttributesA

  WaitForSingleObject

  CreateMutexA

  TerminateThread

  GetTempPathA

  MoveFileA

  ExitThread

  LeaveCriticalSection

  EnterCriticalSection

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  MultiByteToWideChar

  ReadFile

  WriteFile

  TransactNamedPipe

  CreateFileA

  WideCharToMultiByte

  TerminateProcess

  DuplicateHandle

  GetCurrentProcess

  CreatePipe

  GetTimeFormatA

  GetDateFormatA

  GetFileSize

  FindClose

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  FindNextFileA

  FindFirstFileA

  SetFilePointer

  SetConsoleCtrlHandler

  WaitForMultipleObjects

  GenerateConsoleCtrlEvent

  GetLocalTime

  QueryPerformanceCounter

  FreeLibrary

  GetEnvironmentVariableW

  HeapFree

  HeapAlloc

  GetProcessHeap

  VirtualQueryEx

  ReadProcessMemory

  GetSystemInfo

  FormatMessageA

  GlobalUnlock

  GlobalLock

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingA

  SetFileTime

  GetFileTime

  ExpandEnvironmentStringsA

  lstrcmpiA

  GetExitCodeProcess

  PeekNamedPipe

  GetLogicalDrives

  GlobalMemoryStatus

  IsBadWritePtr

  IsBadReadPtr

  HeapValidate

  RtlUnwind

  InterlockedDecrement

  InterlockedIncrement

  GetStartupInfoA

  GetCommandLineA

  GetVersion

  DebugBreak

  GetStdHandle

  OutputDebugStringA

  InitializeCriticalSection

  FatalAppExitA

  HeapReAlloc

  HeapDestroy

  HeapCreate

  VirtualFree

  VirtualAlloc

  GetCurrentThreadId

  TlsSetValue

  TlsAlloc

  TlsFree

  SetLastError

  TlsGetValue

  GetCurrentThread

  GetCPInfo

  GetACP

  GetOEMCP

  RaiseException

  LCMapStringA

  LCMapStringW

  Sections

  .text

  Size: 233KB - Virtual size: 232KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 80KB - Virtual size: 718KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ