A<��^�l�U�ͬ_�2�i{�_j�>l2ƏeQ>��U7����^� �B� ��`��@�����P+A P ę� �L{N��b٣�Z�3a�[�#��sރ�'��)��44��l�L���c�����u�-�f��Qc��E����2���"6{��fq��9p��ۆ�Ey���/\)����%5���?� ��ٿ��̀����������Nz�$/�K}@�M�s�gu��]#�D� �4'�|��v:�_�8��%��~� r��c ۙpXΖ������[�}cF�X � ��7��oOZ�o�����v�ݢ�7i��;v���x�lC�B�P�R�w�n|lۜ ������ā�\�i������?ہ�� GQ�5 ?9.��6 ����-�\K:l��Q O�K�yF8��<h�d) o�� �(����w�7~P�>[�r���x�!??��7Tq���s%��g]��sN�I��%��:��cW���Ae��5��J!��=7��9�D�i~ c�V���e҉ F8�dS,�<���l�I 3�N-}+�V��� �E � ��}�5{��F�N>G3���>�G���� V�O����g��b�uV�%90-����vP;�>N>kc<ւ$F3<�%L s�b�U�N�U�;--���M�ēv��i&":����E�_O�д �=���;�,�L#����XL��k�Q��L���-�l���� ��QXs�5��H hn?>O�t������Efl�� I���!<��Y�� :��, .w9��:�M���u ud�(w � �o �k��Fx �U?�e_�� ��}@XY�ow��~������8��� bB���H��c�N1t�%VD�]�<%��E������ϖ,/n��q�F�9ʼr�o�>T5�p���jF�FwJNЫ8m���������Qˀ�p���UNb�F�*��Ub���ԅ�wj&�̐�i�����u�� 2f}�C� �9@[�G$�zc��(�����7�A�"�����N}��"�W���刺��2-�Wx�V �x��it(�1ܒ, ��3��Ez@@$�Fh6��w[��2@�{St]��� #}��r� :��7le徆�E�@f���r�9Ḍ�A+�rh3����>mJ�rl�9�ڮw��zr ��h�͢���O(cb���O�J�'�'���[�f���%�&̴7�!�K����b6 Nv$ � J�2(��f��,3�� �*��tx0R �*�.���{ � ��bV(�Y{���e^�)J�L"� ��~Y�? ݹ��� ��Mm#+-�\�B���$������m����j� ��ͱ)�m1�3%S�!����WД�!�W���k����b��4A\ 5��K�\gc�b}6(hC���/���9�����59w���U��v��t�Qy�H|�k�d�f$�ٟ R�ݬ� ���.��E�,����y��o�� ��A/��C�I)A� "I��%�yvK���9.�� �Rd>Ev �h:� '��N�Y��������<"Z�XDJ� � {����,7c�^������\�D�n �t�e�R�&����H�Y̠���1�:� 35����� ����Uo F����n�2���j� �h�<9U�Ccn�sa�� /ʣx�fD L��ZÆ��C1D�:Ԟɪ���x�����Kc��E�Rf|RM��S���k���� (�9,����?��r��S N4A|t`Fv2� t�K�A}�8DxǬ9��֜ �7��\�d��#o�.�Z�L�'w��B{+�K���.�� �(�~� ����y ��8|���p\qL0E�Я[uЦ�W3��~��_ڄ tS��� i b>!�b�8 Z�h����������$�-�$��'�z�͖�H���t��/ ���6�~��cA G �_�Z0|�觾 <�����R�p6.<J`����Y�=��^� x���8�� i (�6�4����h�>�f�ud��\��6�[��`���G���y��q�R��Iʪ��x�p����.� �_��FV��a�Fo[�z����/Sz+�g;���H�m����g�6�}��00rZz�$_�q��xM�w� �$|��������-�++��S�����^|9U���}D��/�:G�� �ǁ�&�mZi��/������@��l������vl��Q����s��1^XtVw��4�����5��;��ّY���nK%u����� <�2 ���}����p��֓����kh�gP�_�T�G���f��9��w;o �Q�3�:ڲq9���m��%����S����c����W�� z53९��j��Ail�i��W�K �Գ�e�מ��� P� ������C�m��T�I��E�Ǣ�/d ��_ȇx������A��3�^�@���w����,&}��B&�����u6G"�j3Ӗ6"�n��5��uWhJ�`0�>���֕�g����g�/����/��\����1Os�H��|W7w¹3�V��}�yvWA�2��׆�üޤ��<hj?��N(.� � & ��j���^ py� �<I��cu"\�����4G��]�Ȉ������} ��O�7���]+N�ņ_��V�����E�o����-� ��C�^[��d�Ľ�b� �q��� �:�_�/%���]����{s�@�����f�2��+���\CÌ�[0ܢ���X Cta'l��+F��Jʯ��d&�r�1��{}� u��f 1k�<>F�X3���m�V�P@fk�~o� ���C��:�����{]�h�n����M�7�T�� �:l�|z@��u&�cZ�D�v�⦬�a��)��Cv����g����?Z�n�(<�ה��bM���X�|Ϛ�%@��+����ɓ�L��.��� n���-gB/�FZ���8h$L��N���7x( ��~\��P7}�Ԛ���PG�c� WU�P�iq9�bƼo�G�̌y��{[��}��1Y��9�#FZCEϲ:9]m�KԤ��#�Z��6}_;��͘)2N^��$��ͩ�?�����Sі�]�c ���: 6F%L>Jy��o[qN��c^#�%�MxS �Z.ci��t}�$�O]�4�w�=f����������ln� &.��^lR{�� � �+�e0� �[
Static task
static1
Behavioral task
behavioral1
Sample
bff6dbd69153569a63ee5f825024dc541ed362d566d45a539c8ccbce84c19252.exe
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral2
Sample
bff6dbd69153569a63ee5f825024dc541ed362d566d45a539c8ccbce84c19252.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
General
-
Target
bff6dbd69153569a63ee5f825024dc541ed362d566d45a539c8ccbce84c19252
-
Size
827KB
-
MD5
26edc4a0a1926d4e5ee7ff953c15b260
-
SHA1
fa14ea0a9dfe62864e8e2fa9eb223bc1ab99cc22
-
SHA256
bff6dbd69153569a63ee5f825024dc541ed362d566d45a539c8ccbce84c19252
-
SHA512
8d5b3cf51c2b7c92ef31e4806ab99275a66897e3950c71b5bf99a99013af0e1bb64ca2013e9a88e6c5bfe571c916158afb49fd02fdbd21a1b569f6fbf430915e
-
SSDEEP
12288:OYdLgeerbef+d756NnOfognccGsOaY7rGXVYn+x7Tstxut:OYd0eelKxMHncDbaY2A+x0tY
Malware Config
Signatures
Files
-
bff6dbd69153569a63ee5f825024dc541ed362d566d45a539c8ccbce84c19252.exe windows x86
91d4394b4afaefda1606b3845029ef47
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetKeyboardLayoutNameW
GetMonitorInfoW
SetMenuContextHelpId
SetRect
GetSystemMenu
CreateCursor
SetScrollRange
RealGetWindowClassW
SetWindowRgn
IsWindowVisible
GetInputDesktop
GetTabbedTextExtentA
IsCharAlphaA
SetDoubleClickTime
FindWindowExA
IsDlgButtonChecked
UpdateLayeredWindow
SetMenuItemInfoW
SetScrollPos
GetDCEx
ChildWindowFromPoint
BroadcastSystemMessageExW
GetWindowLongW
GetCursorInfo
CascadeChildWindows
MonitorFromWindow
GetScrollRange
GetLastActivePopup
DefDlgProcW
GetGUIThreadInfo
CharNextW
GetWindowTextLengthW
SetClipboardData
SendNotifyMessageW
GetDlgItemTextA
GetSystemMetrics
GetGuiResources
RegisterClassW
ToUnicode
DragDetect
SetActiveWindow
EditWndProc
CharToOemW
GetAsyncKeyState
ChangeDisplaySettingsExA
FillRect
MessageBoxTimeoutA
DlgDirSelectExW
CallWindowProcA
GetMessagePos
SendMessageA
GetMenuItemInfoA
MessageBeep
GetDlgItemTextW
LoadAcceleratorsA
UnlockWindowStation
CreateDialogParamW
OpenDesktopW
GetScrollBarInfo
GetDialogBaseUnits
MessageBoxIndirectW
ChildWindowFromPointEx
GetWindowTextW
wsprintfW
PeekMessageW
SetMenuInfo
GetWindowRgnBox
GetDlgItemInt
DrawTextExW
SetThreadDesktop
SetMenu
CharLowerBuffW
SetProcessWindowStation
AlignRects
GetPropW
DefDlgProcA
DrawFrameControl
SendMessageTimeoutW
DefFrameProcA
MoveWindow
UnionRect
DrawFrame
IsCharLowerA
PaintDesktop
GetClassInfoExW
EnumWindowStationsW
GetClassInfoA
RegisterClipboardFormatW
UnloadKeyboardLayout
SetCursorContents
GetKeyNameTextA
SystemParametersInfoW
SendInput
GetMenuItemCount
GetWindowThreadProcessId
WaitMessage
LoadKeyboardLayoutEx
SendMessageCallbackW
DispatchMessageW
GetMenuBarInfo
EnumDesktopWindows
SetWindowsHookA
DrawTextA
CreateIconIndirect
GetLastInputInfo
PeekMessageA
ScrollWindowEx
CharNextExA
SwapMouseButton
GetPropA
GetMenuItemID
AttachThreadInput
MapVirtualKeyExW
GetUserObjectInformationW
PostThreadMessageA
IsDialogMessageW
DrawStateW
FindWindowW
DeleteMenu
IsIconic
DialogBoxParamA
LoadAcceleratorsW
RegisterHotKey
GetMenuItemInfoW
EnumDisplaySettingsW
GetClipboardViewer
GetClipboardFormatNameW
EqualRect
RedrawWindow
CreateMDIWindowW
SetPropA
LoadKeyboardLayoutA
ActivateKeyboardLayout
OffsetRect
GetSysColorBrush
CascadeWindows
OpenClipboard
SetCaretBlinkTime
InflateRect
GetScrollInfo
ShowWindowAsync
SetTimer
SetCapture
GetCaretBlinkTime
KillTimer
GetClipboardFormatNameA
CheckDlgButton
ScreenToClient
LoadKeyboardLayoutW
GetUpdateRgn
EnumPropsW
EnableMenuItem
GetAltTabInfoW
MessageBoxExW
EnumPropsExW
FindWindowExW
GetWindowTextA
BringWindowToTop
TranslateMessageEx
ExitWindowsEx
CheckRadioButton
BroadcastSystemMessageW
LoadBitmapW
CreateDialogIndirectParamA
IsGUIThread
RegisterClipboardFormatA
ValidateRgn
GetThreadDesktop
LoadStringW
SetFocus
DrawCaption
GetClipboardData
ChangeMenuW
IsZoomed
MonitorFromRect
GetMenuItemRect
SubtractRect
DrawEdge
GetKeyState
SetMenuDefaultItem
CharPrevExA
HideCaret
MenuWindowProcA
PostMessageW
GetWindowRect
OemToCharBuffW
OpenIcon
WinHelpA
IsCharAlphaNumericW
RegisterClassExW
DrawIconEx
GetIconInfo
MessageBoxTimeoutW
MapDialogRect
SetScrollInfo
SetWindowPlacement
GetParent
CopyAcceleratorTableW
MapVirtualKeyExA
GetInputState
ChangeDisplaySettingsA
SendMessageW
EnumDisplaySettingsExW
IsCharAlphaNumericA
TileChildWindows
RemovePropW
BlockInput
CharNextA
TabbedTextOutA
DrawCaptionTempA
InsertMenuItemA
PrivateExtractIconExA
GetMenuStringW
LoadCursorFromFileA
SetLastErrorEx
IsMenu
AnimateWindow
CopyImage
CloseWindowStation
CheckMenuRadioItem
ScrollChildren
EnumDesktopsA
GetForegroundWindow
ModifyMenuW
SetDlgItemTextW
GetClassLongA
GetDC
PostThreadMessageW
DrawMenuBarTemp
GetActiveWindow
GetClassInfoW
CreateMDIWindowA
PtInRect
MessageBoxA
CloseWindow
SwitchDesktop
CreateIconFromResource
GetCaretPos
EnumClipboardFormats
GetClassLongW
GrayStringW
DlgDirListA
GetMenuState
CreateDialogIndirectParamW
SetRectEmpty
TrackPopupMenu
SetCursorPos
SetSystemCursor
EnumDisplayMonitors
GetKeyboardState
RegisterWindowMessageA
EnableWindow
GetSubMenu
InsertMenuW
GetMessageW
wvsprintfA
EndMenu
GetWindowRgn
DestroyCursor
IsRectEmpty
MonitorFromPoint
AllowForegroundActivation
GetWindowTextLengthA
UpdateWindow
GetInternalWindowPos
FlashWindowEx
GetCursorPos
wvsprintfW
InvalidateRect
PrintWindow
RemoveMenu
TranslateMessage
FrameRect
CharUpperW
UnregisterClassW
LoadCursorFromFileW
DrawAnimatedRects
GetMenuDefaultItem
IsCharUpperW
MapWindowPoints
CreatePopupMenu
CreateMenu
GetAltTabInfoA
OpenDesktopA
ShowStartGlass
GetAncestor
GetMenuStringA
GetSysColor
MenuItemFromPoint
MessageBoxIndirectA
RemovePropA
SetWindowPos
SetParent
CharToOemBuffA
CreateIconFromResourceEx
GetClipCursor
AppendMenuW
ShowCaret
RegisterClassExA
GetKeyNameTextW
EnumPropsExA
DrawTextW
GetMenu
SetClassWord
GetWindowInfo
GetAltTabInfoA
IsWindowVisible
CharUpperBuffA
ChangeMenuA
ole32
OleRun
UtConvertDvtd32toDvtd16
GetConvertStg
CoUnloadingWOW
CoInitializeEx
CoIsHandlerConnected
CoImpersonateClient
OleConvertOLESTREAMToIStorageEx
OleSetContainedObject
IsValidInterface
UtGetDvtd32Info
CoPushServiceDomain
CoRevokeClassObject
OleSetClipboard
OleTranslateAccelerator
UtGetDvtd16Info
WriteOleStg
CoInitializeWOW
CoFileTimeToDosDateTime
CoDisconnectObject
CreateBindCtx
CoTaskMemRealloc
HPALETTE_UserFree
CoIsOle1Class
StgGetIFillLockBytesOnILockBytes
StgOpenStorageOnHandle
SetDocumentBitStg
CoAddRefServerProcess
CoTaskMemFree
StgCreateDocfileOnILockBytes
OleCreateLinkEx
HICON_UserSize
PropVariantClear
OleCreateLinkFromData
IsEqualGUID
HBITMAP_UserFree
ReadOleStg
HMETAFILE_UserUnmarshal
CoRetireServer
StringFromIID
CoGetCancelObject
CoGetCurrentLogicalThreadId
CoLoadLibrary
PropVariantCopy
IsValidIid
HWND_UserSize
comdlg32
ReplaceTextW
GetOpenFileNameA
WantArrows
ReplaceTextA
PageSetupDlgA
PrintDlgExA
ChooseColorW
ChooseFontW
GetOpenFileNameW
GetFileTitleA
FindTextW
PrintDlgW
PrintDlgA
GetSaveFileNameA
PageSetupDlgW
GetFileTitleW
GetSaveFileNameW
LoadAlterBitmap
ChooseFontA
FindTextA
dwLBSubclass
CommDlgExtendedError
ChooseColorA
oleaut32
VarUI8FromDate
VarDateFromR8
VarCyFromStr
VarBstrFromUI2
VariantInit
BSTR_UserFree
OleLoadPictureEx
VarBoolFromI4
VarI2FromI1
VarI8FromStr
VarI1FromDate
VarI8FromCy
VarCat
VarI2FromR4
VarUI4FromI4
VarI2FromR8
VarUI4FromR8
VarI1FromUI2
VarFormatFromTokens
VarCyCmp
VarUI4FromBool
VarUI8FromI2
LoadTypeLib
VarUI2FromI1
SafeArrayGetIID
VarNumFromParseNum
VarCyRound
VarI8FromUI2
SafeArrayLock
VarI4FromDisp
UnRegisterTypeLib
VarCyFromUI1
VarUI4FromI1
VariantCopy
VarI2FromStr
VarUI2FromR4
VarUI4FromI8
VarUI2FromDec
VarI4FromDate
SafeArraySetIID
VarI2FromUI1
VarUI1FromI8
VarXor
VarDecFromDate
VarR8FromI1
OleLoadPictureFileEx
VarCyMulI4
VARIANT_UserMarshal
VarR4FromI8
SysStringByteLen
OleTranslateColor
VarBstrFromCy
LHashValOfNameSysA
VarDecAbs
VarUI8FromI1
VarTokenizeFormatString
VarR4FromI4
SafeArrayCreateVector
VarUI8FromR8
shell32
Shell_NotifyIcon
FindExecutableW
SHOpenFolderAndSelectItems
StrStrA
SHFileOperation
StrCmpNIW
SHGetSpecialFolderPathA
StrRChrA
SHHelpShortcuts_RunDLLA
SHBrowseForFolderA
StrRChrW
SHGetDiskFreeSpaceExW
SHBrowseForFolderW
PrintersGetCommand_RunDLL
RegenerateUserEnvironment
SHGetNewLinkInfo
SHGetUnreadMailCountW
SHGetDataFromIDListA
SHFileOperationW
SHEnumerateUnreadMailAccountsW
ExtractAssociatedIconExW
ShellExec_RunDLLA
StrRStrIW
FindExecutableA
DllGetClassObject
StrChrW
SHCreateDirectoryExA
Control_RunDLLAsUserW
StrNCmpIA
ShellExec_RunDLL
StrRStrA
DragQueryFile
SheGetDirA
Control_RunDLLA
SHChangeNotifySuspendResume
SHEmptyRecycleBinW
DragQueryFileAorW
ShellAboutA
SHGetDiskFreeSpaceExA
ExtractIconA
StrNCmpW
Control_RunDLLW
SHHelpShortcuts_RunDLL
SHGetFileInfo
SHPathPrepareForWriteW
ExtractAssociatedIconExA
Options_RunDLL
SheSetCurDrive
SHEmptyRecycleBinA
RealShellExecuteW
SHGetMalloc
SHCreateProcessAsUserW
StrStrIA
SHFormatDrive
SHCreateLocalServerRunDll
Options_RunDLLW
RealShellExecuteExA
StrCmpNA
DragFinish
SHGetDataFromIDListW
SHAddToRecentDocs
SHHelpShortcuts_RunDLLW
StrChrA
ShellExec_RunDLLW
SHGetPathFromIDList
OpenAs_RunDLL
ShellAboutW
DllInstall
InternalExtractIconListA
SHBrowseForFolder
ShellHookProc
StrNCmpA
SHGetSettings
DoEnvironmentSubstA
PrintersGetCommand_RunDLLW
PrintersGetCommand_RunDLLA
SHGetFolderLocation
ExtractIconExA
StrRChrIW
SHGetFileInfoW
ExtractIconEx
CommandLineToArgvW
StrCmpNW
ExtractIconExW
SHLoadInProc
DllUnregisterServer
SHCreateShellItem
InternalExtractIconListW
advapi32
InitializeSecurityDescriptor
GetFileSecurityA
AddAccessAllowedAce
QueryServiceStatus
RegEnumKeyA
IsTokenRestricted
SetTokenInformation
WmiQuerySingleInstanceMultipleW
GetTrusteeNameW
BuildImpersonateTrusteeA
GetLengthSid
LsaSetForestTrustInformation
WmiNotificationRegistrationA
LsaLookupPrivilegeValue
CryptEnumProvidersW
CredRenameA
ConvertAccessToSecurityDescriptorW
WmiCloseBlock
CryptGetUserKey
RegOpenUserClassesRoot
GetMultipleTrusteeOperationA
RemoveUsersFromEncryptedFile
CryptSetProviderExW
SetAclInformation
QueryServiceConfigA
LsaEnumerateAccountsWithUserRight
LsaSetSecurityObject
GetNamedSecurityInfoW
RegDeleteValueA
LsaGetUserName
GetWindowsAccountDomainSid
CryptEncrypt
GetTrusteeTypeA
LsaICLookupSidsWithCreds
RegSetValueExA
BuildTrusteeWithObjectsAndNameW
DuplicateTokenEx
RegisterEventSourceW
LsaOpenPolicy
RegisterTraceGuidsA
BuildTrusteeWithNameA
ConvertSDToStringSDRootDomainA
WmiQuerySingleInstanceW
RegOpenKeyExA
MD4Final
CryptGenKey
LogonUserW
LogonUserExW
GetSecurityDescriptorControl
SaferiSearchMatchingHashRules
RegQueryInfoKeyW
RegEnumValueA
ImpersonateLoggedOnUser
SetNamedSecurityInfoW
CloseEventLog
RevertToSelf
LsaLookupPrivilegeDisplayName
LookupPrivilegeNameA
LsaOpenTrustedDomainByName
LsaSetInformationPolicy
CryptEnumProviderTypesW
CredIsMarshaledCredentialW
ControlTraceW
WmiEnumerateGuids
FreeEncryptionCertificateHashList
ObjectDeleteAuditAlarmW
LsaRetrievePrivateData
GetTrusteeTypeW
RegOpenKeyA
AdjustTokenGroups
GetSecurityDescriptorOwner
SetInformationCodeAuthzLevelW
CryptGetDefaultProviderA
LsaClose
RegFlushKey
CredProfileLoaded
ReadEncryptedFileRaw
RegSetValueW
CredpDecodeCredential
MakeAbsoluteSD
CredEnumerateA
CryptExportKey
FreeSid
LsaSetTrustedDomainInformation
ControlTraceA
ObjectCloseAuditAlarmA
AccessCheck
CreateCodeAuthzLevel
TraceEventInstance
BuildTrusteeWithObjectsAndSidW
CredWriteDomainCredentialsW
MSChapSrvChangePassword
QueryServiceConfig2W
FlushTraceW
ImpersonateAnonymousToken
CreatePrivateObjectSecurityWithMultipleInheritance
EnumServicesStatusExA
LsaCreateTrustedDomain
ElfOpenEventLogW
SetNamedSecurityInfoExW
LsaOpenTrustedDomain
LookupPrivilegeDisplayNameA
RegisterServiceCtrlHandlerW
UnregisterTraceGuids
CredIsMarshaledCredentialA
LsaQueryTrustedDomainInfoByName
ConvertToAutoInheritPrivateObjectSecurity
SetPrivateObjectSecurity
WmiSetSingleItemA
SetThreadToken
gdi32
GdiDeleteLocalDC
EngReleaseSemaphore
GetViewportOrgEx
FixBrushOrgEx
GetTextCharset
BRUSHOBJ_hGetColorTransform
GdiSwapBuffers
CreateColorSpaceA
SetDIBits
GdiConvertAndCheckDC
CreateMetaFileW
PolyPatBlt
CreatePolygonRgn
ColorCorrectPalette
BitBlt
EngGetDriverName
SetSystemPaletteUse
CloseMetaFile
GetEnhMetaFilePixelFormat
GetCharWidthFloatW
AbortDoc
GetTextExtentPoint32W
PlayMetaFileRecord
PolyPolyline
UpdateICMRegKeyW
EngDeleteSurface
GdiPlayJournal
GetTextExtentExPointA
bInitSystemAndFontsDirectoriesW
CreateSolidBrush
EudcLoadLinkW
CLIPOBJ_cEnumStart
EngCreateClip
GetTextExtentExPointWPri
GetTextExtentPointI
GetDIBits
CreatePalette
Escape
EnumICMProfilesA
SetPaletteEntries
ScaleViewportExtEx
UnloadNetworkFonts
GdiConvertToDevmodeW
RoundRect
GetCharWidthA
GetGlyphOutline
GetTransform
RemoveFontResourceA
GetETM
EnumObjects
SaveDC
SetLayout
RemoveFontResourceTracking
RemoveFontMemResourceEx
EnumFontsA
CreateFontW
CloseFigure
gdiPlaySpoolStream
GetCharacterPlacementA
GetObjectType
GdiGetPageHandle
EngCreateDeviceBitmap
EndPage
GdiPlayPageEMF
GdiConvertBrush
DeleteMetaFile
RemoveFontResourceExA
AddFontResourceW
CombineRgn
GetMetaFileBitsEx
EngCopyBits
ResizePalette
AnimatePalette
PatBlt
GdiRealizationInfo
XLATEOBJ_piVector
RectInRegion
version
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA
VerLanguageNameW
VerFindFileW
GetFileVersionInfoSizeW
VerLanguageNameA
VerQueryValueA
VerQueryValueW
VerInstallFileA
wtsapi32
WTSVirtualChannelPurgeOutput
WTSSetSessionInformationA
WTSSetUserConfigW
WTSQueryUserToken
WTSWaitSystemEvent
WTSSendMessageW
WTSVirtualChannelClose
WTSEnumerateServersW
WTSVirtualChannelRead
WTSShutdownSystem
WTSCloseServer
WTSSendMessageA
WTSEnumerateSessionsW
WTSLogoffSession
WTSOpenServerA
WTSUnRegisterSessionNotification
WTSVirtualChannelWrite
WTSFreeMemory
WTSQuerySessionInformationA
WTSEnumerateSessionsA
WTSQueryUserConfigA
WTSEnumerateProcessesW
WTSDisconnectSession
WTSEnumerateProcessesA
WTSRegisterSessionNotification
WTSVirtualChannelOpen
WTSQuerySessionInformationW
ws2_32
WSASendDisconnect
WSALookupServiceBeginW
WSAGetServiceClassInfoW
gethostname
setsockopt
WSARemoveServiceClass
WSAHtonl
getservbyport
WSCEnumProtocols
WSASendTo
WSAEnumNetworkEvents
WSAAsyncGetProtoByName
bind
WSAEnumProtocolsW
WSASetServiceA
WSAUnhookBlockingHook
WSADuplicateSocketW
WSCGetProviderPath
WSCInstallNameSpace
htons
WSCInstallProvider
WSASetBlockingHook
WSACancelAsyncRequest
WSAWaitForMultipleEvents
freeaddrinfo
WSAEnumProtocolsA
inet_addr
WSALookupServiceNextW
getprotobyname
WSAGetServiceClassNameByClassIdA
WSASetServiceW
WSAResetEvent
WSARecvFrom
WSALookupServiceBeginA
WSASetLastError
inet_ntoa
getnameinfo
WSCDeinstallProvider
WSAAddressToStringA
getaddrinfo
WPUCompleteOverlappedRequest
select
WSAEnumNameSpaceProvidersA
WSAStringToAddressW
WSALookupServiceNextA
WSAGetLastError
WSAHtons
WSAStringToAddressA
WSAEventSelect
WSAGetOverlappedResult
WSARecv
accept
getsockname
getprotobynumber
WSAInstallServiceClassA
recvfrom
WSAProviderConfigChange
WSAAddressToStringW
ntohs
WSCWriteNameSpaceOrder
WSCUpdateProvider
WSAConnect
htonl
WSCEnableNSProvider
comctl32
ImageList_DragEnter
ImageList_GetBkColor
DrawInsert
ImageList_GetImageInfo
CreatePropertySheetPageA
CreateMappedBitmap
ImageList_Write
InitializeFlatSB
GetEffectiveClientRect
ImageList_GetImageCount
UninitializeFlatSB
ImageList_BeginDrag
ImageList_Duplicate
FlatSB_GetScrollProp
FlatSB_GetScrollRange
DllGetVersion
PropertySheetW
CreatePropertySheetPage
ImageList_GetIcon
ImageList_GetImageRect
CreateStatusWindowW
ImageList_Draw
PropertySheetA
FlatSB_SetScrollPos
ImageList_Remove
FlatSB_ShowScrollBar
ImageList_SetFlags
ImageList_DrawIndirect
ImageList_AddIcon
InitMUILanguage
ImageList_DragLeave
ImageList_AddMasked
ImageList_LoadImage
ImageList_Merge
CreateToolbarEx
DrawStatusText
ImageList_SetOverlayImage
ShowHideMenuCtl
ImageList_DragShowNolock
DestroyPropertySheetPage
ImageList_DragMove
FlatSB_GetScrollPos
ImageList_Replace
MenuHelp
FlatSB_EnableScrollBar
ImageList_SetIconSize
CreateStatusWindow
CreatePropertySheetPageW
MakeDragList
ImageList_EndDrag
ImageList_GetFlags
CreateToolbar
ImageList_Add
InitCommonControlsEx
FlatSB_SetScrollRange
DrawStatusTextW
ImageList_SetBkColor
kernel32
SetEvent
GetThreadLocale
CreateDirectoryExW
GetLogicalDrives
RegisterWaitForInputIdle
ScrollConsoleScreenBufferW
SetVolumeMountPointA
GetTapeParameters
GetCommModemStatus
ReadConsoleA
DeleteTimerQueueTimer
GetNumberOfConsoleMouseButtons
GetAtomNameA
VerifyVersionInfoA
DeleteCriticalSection
GetNumberOfConsoleFonts
ReadConsoleOutputCharacterW
GetModuleHandleExW
TransactNamedPipe
PeekConsoleInputW
WriteFileEx
GetConsoleHardwareState
CreateProcessA
SetUserGeoID
EnumCalendarInfoExW
GetSystemPowerStatus
GetCurrentConsoleFont
LZCreateFileW
FindNextVolumeMountPointA
FindNextFileW
GetPrivateProfileIntW
Heap32First
GetNumberFormatW
GlobalLock
WriteConsoleOutputA
CreateFileW
EnumResourceTypesW
GetDefaultCommConfigA
GetLargestConsoleWindowSize
GetProcessTimes
EnumSystemGeoID
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
LocalCompact
GetLongPathNameW
QueueUserWorkItem
GetStringTypeA
GlobalFindAtomA
SetComputerNameW
LZOpenFileA
GlobalReAlloc
CompareFileTime
GetTimeFormatW
GetCPInfoExW
LockFile
DisableThreadLibraryCalls
EnumCalendarInfoA
CreateWaitableTimerW
CopyFileExA
GetConsoleCursorInfo
SetSystemPowerState
RtlFillMemory
GetUserDefaultLCID
PeekNamedPipe
WriteFile
GetCurrencyFormatA
FindFirstVolumeMountPointA
HeapUnlock
GetCommMask
FindFirstChangeNotificationA
SetTapePosition
GlobalDeleteAtom
TryEnterCriticalSection
MapViewOfFileEx
EnumLanguageGroupLocalesW
GetConsoleInputExeNameA
FindFirstChangeNotificationW
LocalReAlloc
OpenWaitableTimerA
lstrcmpA
MultiByteToWideChar
SetPriorityClass
TlsFree
EnumResourceNamesA
WriteProfileSectionA
RtlMoveMemory
SetUnhandledExceptionFilter
SetThreadExecutionState
GetConsoleDisplayMode
lstrcpynA
GetTapeStatus
TerminateJobObject
BuildCommDCBA
BeginUpdateResourceA
DeleteAtom
MoveFileW
GetEnvironmentStringsW
WriteTapemark
GetBinaryTypeW
GlobalGetAtomNameW
EnumUILanguagesA
GetCalendarInfoW
GetDiskFreeSpaceExA
UnhandledExceptionFilter
SetFilePointer
WaitForSingleObject
GetCurrentThread
GetConsoleTitleW
HeapDestroy
RaiseException
GetDateFormatA
lstrcatA
SetFileAttributesW
lstrcmpi
GetPrivateProfileStringA
EnumTimeFormatsA
ExpandEnvironmentStringsA
QueryPerformanceCounter
MapUserPhysicalPages
FindFirstVolumeA
CreateSemaphoreW
CreateDirectoryW
GetConsoleAliasesW
ReleaseActCtx
GetSystemTime
ReadConsoleOutputCharacterA
TransmitCommChar
WriteProfileStringA
ChangeTimerQueueTimer
GetFullPathNameA
GlobalMemoryStatusEx
IsBadHugeWritePtr
ReadConsoleW
BackupSeek
GetLogicalDriveStringsW
WaitCommEvent
GetThreadContext
SetSystemTime
LocalHandle
IsBadWritePtr
GetCurrentDirectoryW
LZOpenFileW
HeapAlloc
OutputDebugStringA
WritePrivateProfileStructA
LZStart
GetConsoleTitleA
GetCommState
GetVersionExA
FindVolumeMountPointClose
HeapReAlloc
VirtualFree
CreateJobObjectA
GetProfileIntW
CreateEventA
GetStdHandle
CreateTimerQueueTimer
SetCurrentDirectoryA
SetLocaleInfoA
GetVersion
ScrollConsoleScreenBufferA
FatalAppExitW
lstrcpyn
GetCurrentActCtx
GetDriveTypeA
lstrlenA
CreateMemoryResourceNotification
GetConsoleAliasesA
GetProfileIntA
LoadModule
GetPrivateProfileIntA
GetVolumePathNameA
WriteConsoleOutputCharacterA
WriteProfileSectionW
SetHandleInformation
LockResource
PeekConsoleInputA
CreateNamedPipeW
SetProcessWorkingSetSize
CancelDeviceWakeupRequest
GetThreadPriority
RtlUnwind
GlobalCompact
ProcessIdToSessionId
LockFileEx
OpenMutexW
InterlockedExchange
CopyLZFile
OpenEventW
GlobalUnWire
GlobalFindAtomW
RtlCaptureContext
Heap32ListFirst
lstrcpy
SetCalendarInfoA
CreateActCtxA
CompareStringW
CreateActCtxW
FillConsoleOutputCharacterA
Beep
TzSpecificLocalTimeToSystemTime
LocalSize
WriteConsoleInputA
CommConfigDialogW
RegisterWaitForSingleObject
SetThreadPriorityBoost
FindVolumeClose
CreateThread
BuildCommDCBW
GetProcessAffinityMask
VirtualLock
GetProcessHeap
MoveFileWithProgressW
BackupWrite
GetStartupInfoW
FatalAppExitA
GetNamedPipeHandleStateA
GetConsoleKeyboardLayoutNameW
GetUserDefaultLangID
GetCurrentDirectoryA
WriteConsoleOutputCharacterW
FreeLibrary
QueryInformationJobObject
FreeResource
GetPrivateProfileSectionW
GetTempPathW
LZCloseFile
CreateDirectoryExA
SystemTimeToFileTime
CreateHardLinkA
WritePrivateProfileStringW
ResetEvent
GetProfileStringA
SetProcessShutdownParameters
GetEnvironmentStrings
EnumResourceTypesA
CloseProfileUserMapping
WaitNamedPipeA
GetCPInfoExA
SetStdHandle
CallNamedPipeA
lstrcmp
lstrcatW
FatalExit
LZClose
InitializeCriticalSection
PrivMoveFileIdentityW
WriteConsoleOutputW
GetFileAttributesW
GetGeoInfoA
GetComPlusPackageInstallStatus
GetConsoleInputWaitHandle
IsProcessorFeaturePresent
GetSystemDefaultLCID
OpenFileMappingA
FreeUserPhysicalPages
GetTimeFormatA
EnumSystemCodePagesA
FindNextChangeNotification
IsValidLocale
HeapSetInformation
GetShortPathNameW
GlobalGetAtomNameA
FlushInstructionCache
FileTimeToDosDateTime
VerifyVersionInfoW
WritePrivateProfileStructW
SetEndOfFile
GetExpandedNameW
ReadFileScatter
SetVolumeLabelW
ExitThread
lstrcpyW
EnumCalendarInfoW
GetThreadTimes
SetProcessAffinityMask
DosDateTimeToFileTime
ClearCommBreak
CopyFileA
VerifyConsoleIoHandle
HeapSize
CreateSemaphoreA
HeapQueryInformation
IsBadHugeReadPtr
GlobalUnfix
ReadConsoleInputExW
GetConsoleProcessList
CallNamedPipeW
CreateNamedPipeA
SetMailslotInfo
ActivateActCtx
FindCloseChangeNotification
FindFirstVolumeW
SetCriticalSectionSpinCount
FoldStringA
SetComputerNameExW
RegisterWowExec
GetNumberFormatA
RestoreLastError
SetDefaultCommConfigW
GetProcessHeaps
TlsSetValue
CancelTimerQueueTimer
MoveFileWithProgressA
FindNextVolumeW
GetProfileSectionA
GetProcessShutdownParameters
WriteFileGather
LoadResource
GetThreadSelectorEntry
GetConsoleCharType
FindActCtxSectionGuid
FlushFileBuffers
InterlockedDecrement
SetFileAttributesA
LZInit
SetEnvironmentVariableA
EnumSystemLanguageGroupsA
UpdateResourceW
InvalidateConsoleDIBits
GetCommProperties
FindFirstFileA
FindFirstFileExA
ReadConsoleOutputW
IsBadStringPtrW
SetFilePointerEx
FindFirstVolumeMountPointW
SetHandleCount
CancelIo
DeleteVolumeMountPointA
FindResourceExW
lstrcmpW
FindClose
ReplaceFile
DeleteTimerQueueEx
SetFileValidData
SetVolumeLabelA
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableW
ResetWriteWatch
RtlCaptureStackBackTrace
ReadConsoleOutputA
EnumResourceLanguagesW
TerminateProcess
DeactivateActCtx
EnumCalendarInfoExA
VirtualQuery
VirtualQueryEx
GlobalFree
LoadLibraryA
GetModuleHandleW
GetModuleHandleA
LocalAlloc
CopyFileW
VirtualUnlock
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Exports
Exports
Sections
CODE Size: 503KB - Virtual size: 503KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 729B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ