Extracted

• e5d0650411b0b4c0e5989d62895a35af_JaffaCakes118

  .exe windows:4 windows x86 arch:x86

  6e9e56118c4d9c71b3f8f3f2c55b51b1

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  c:\Documents and Settings\Xp\سطح المكتب\rx\Debug\rBot.pdb

  Imports

  kernel32

  ExitProcess

  CloseHandle

  CreateProcessA

  GetModuleFileNameA

  GetSystemDirectoryA

  Sleep

  LoadLibraryA

  GetLastError

  GetProcAddress

  GetModuleHandleA

  CreateThread

  DeleteFileA

  OpenProcess

  GetCurrentProcessId

  CopyFileA

  SetFileAttributesA

  GetFileAttributesA

  WaitForSingleObject

  CreateMutexA

  GetTickCount

  TerminateThread

  GetTempPathA

  MoveFileA

  GetComputerNameA

  GetLocaleInfoA

  GetVersionExA

  ExitThread

  LeaveCriticalSection

  EnterCriticalSection

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  MultiByteToWideChar

  ReadFile

  WriteFile

  TransactNamedPipe

  CreateFileA

  WideCharToMultiByte

  TerminateProcess

  DuplicateHandle

  GetCurrentProcess

  CreatePipe

  GetTimeFormatA

  GetDateFormatA

  GetFileSize

  FindClose

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  FindNextFileA

  FindFirstFileA

  SetFilePointer

  SetConsoleCtrlHandler

  WaitForMultipleObjects

  GenerateConsoleCtrlEvent

  GetLocalTime

  QueryPerformanceCounter

  QueryPerformanceFrequency

  FreeLibrary

  GetEnvironmentVariableW

  HeapFree

  HeapAlloc

  GetProcessHeap

  VirtualQueryEx

  ReadProcessMemory

  GetSystemInfo

  FormatMessageA

  GlobalUnlock

  GlobalLock

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingA

  SetFileTime

  GetFileTime

  ExpandEnvironmentStringsA

  lstrcmpiA

  GetExitCodeProcess

  PeekNamedPipe

  GetLogicalDrives

  GlobalMemoryStatus

  CompareStringW

  SetEnvironmentVariableA

  CompareStringA

  GetLocaleInfoW

  SetEndOfFile

  GetTimeZoneInformation

  IsBadCodePtr

  GetUserDefaultLCID

  EnumSystemLocalesA

  IsValidCodePage

  IsValidLocale

  GetStringTypeW

  GetStringTypeA

  InitializeCriticalSection

  FlushFileBuffers

  SetStdHandle

  InterlockedExchange

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  UnhandledExceptionFilter

  LCMapStringW

  IsBadWritePtr

  IsBadReadPtr

  HeapValidate

  GetSystemTimeAsFileTime

  RtlUnwind

  RaiseException

  GetStartupInfoA

  GetCommandLineA

  DebugBreak

  GetStdHandle

  InterlockedDecrement

  OutputDebugStringA

  InterlockedIncrement

  FatalAppExitA

  HeapReAlloc

  HeapDestroy

  HeapCreate

  VirtualFree

  VirtualAlloc

  TlsAlloc

  GetCurrentThreadId

  TlsFree

  TlsSetValue

  TlsGetValue

  SetLastError

  GetCurrentThread

  GetACP

  GetOEMCP

  GetCPInfo

  SetHandleCount

  GetFileType

  SetUnhandledExceptionFilter

  VirtualProtect

  VirtualQuery

  LCMapStringA

  ws2_32

  WSASocketA

  getsockopt

  ntohs

  inet_ntoa

  connect

  WSACleanup

  setsockopt

  ioctlsocket

  bind

  listen

  accept

  closesocket

  htons

  gethostbyname

  WSAStartup

  recv

  socket

  send

  __WSAFDIsSet

  inet_addr

  getsockname

  select

  Sections

  .text

  Size: 260KB - Virtual size: 259KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 80KB - Virtual size: 79KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 34KB - Virtual size: 673KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE