Static task
static1
Behavioral task
behavioral1
Sample
9fbc46a265e4e621e5a5b3b415d30c55b5e5a1fd14e690bb9bc0ec3332e0f0d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9fbc46a265e4e621e5a5b3b415d30c55b5e5a1fd14e690bb9bc0ec3332e0f0d3.exe
Resource
win10v2004-20220901-en
General
-
Target
9fbc46a265e4e621e5a5b3b415d30c55b5e5a1fd14e690bb9bc0ec3332e0f0d3
-
Size
364KB
-
MD5
17b9db11d2d52b56ad39ff3c41f4af8c
-
SHA1
7e9a7412dc309b2eea5f640b9ddf860702ba4cfa
-
SHA256
9fbc46a265e4e621e5a5b3b415d30c55b5e5a1fd14e690bb9bc0ec3332e0f0d3
-
SHA512
6c7dc2cb87eb48aea1c4c88735803bb7e30e35af6ea630c5e312e39dcaa0c469e01149367c1b4088a2ce973cd1b11e0ecd0a281ece8e12fc0c8dc7ec51875d46
-
SSDEEP
6144:9QHAfQrKdCfRl5ZcgbVQ4QO5dsC+xr+0aCG1pffCkXEIj+MAQnfHv8V:9h0KdCDnvdsC+N7GzfqDIj+MAQnfHv8V
Malware Config
Signatures
Files
-
9fbc46a265e4e621e5a5b3b415d30c55b5e5a1fd14e690bb9bc0ec3332e0f0d3.exe windows x86
fed4b19808b231b6ad6b1269ea26afb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ClientToScreen
GetMenuItemCount
MsgWaitForMultipleObjects
CloseClipboard
CheckDlgButton
GetClassLongW
ToUnicode
GetUserObjectInformationW
IsDlgButtonChecked
LookupIconIdFromDirectoryEx
LoadCursorFromFileA
GetUpdateRect
CreateMenu
CharLowerA
GetCursorPos
SetWindowLongA
IsCharUpperA
DrawMenuBar
DialogBoxParamA
GetDlgItemTextW
DefFrameProcW
DdeInitializeA
SetClassLongA
CreateDialogIndirectParamA
TabbedTextOutW
GetTitleBarInfo
FindWindowA
GetNextDlgGroupItem
LoadStringW
EnumDesktopWindows
CharLowerBuffW
PeekMessageW
AllowSetForegroundWindow
WinHelpA
RemovePropW
GetLastInputInfo
GetWindowTextLengthW
GetKeyboardState
CharLowerW
SetRect
DrawIcon
RegisterClassW
wvsprintfA
GetMenuItemID
UnionRect
BeginDeferWindowPos
ChildWindowFromPointEx
GetMessageExtraInfo
RedrawWindow
SetPropW
SetCapture
LoadBitmapA
SetDlgItemTextW
EnableScrollBar
GetClipboardFormatNameW
GrayStringA
SetClipboardData
GetMenuStringA
GetKeyboardLayout
DdeCreateDataHandle
DrawFocusRect
PeekMessageA
LoadMenuW
SetWindowLongW
MapVirtualKeyA
GetMenuItemInfoW
SetScrollPos
MonitorFromRect
GetComboBoxInfo
GetWindowTextLengthA
SetMenuItemInfoW
SetScrollRange
GetDialogBaseUnits
GetWindowLongW
LoadIconW
EnumClipboardFormats
CreateIconIndirect
IsWindowEnabled
GetProcessWindowStation
FillRect
GetKeyState
DestroyCursor
ReplyMessage
InflateRect
SetPropA
DlgDirSelectExA
IsCharLowerA
DlgDirListComboBoxW
DdeInitializeW
SetUserObjectSecurity
MapVirtualKeyExW
SendNotifyMessageA
GetScrollRange
DragDetect
DdeDisconnect
CloseWindow
GetClassNameW
SetCursor
TranslateMDISysAccel
PackDDElParam
ScrollDC
MonitorFromWindow
SetMenuContextHelpId
DialogBoxIndirectParamW
IsCharAlphaA
CopyImage
CharPrevA
GetMenuContextHelpId
UnregisterClassA
LoadAcceleratorsA
IsDialogMessageW
GetWindow
CharNextW
CountClipboardFormats
TrackPopupMenuEx
ExitWindowsEx
KillTimer
GetMenu
LookupIconIdFromDirectory
RegisterClassA
GetDC
DdeCreateStringHandleA
GetWindowPlacement
ValidateRgn
EnumWindows
MapWindowPoints
ModifyMenuA
CreateAcceleratorTableW
FlashWindowEx
WaitMessage
SetActiveWindow
SetDlgItemInt
MapDialogRect
TranslateAcceleratorW
LoadIconA
DrawTextExW
InsertMenuItemA
ShowCaret
TrackPopupMenu
GetDlgItemInt
DdeGetLastError
TabbedTextOutA
GetSubMenu
IsWindowVisible
GetWindowTextA
GetNextDlgTabItem
CallMsgFilterA
RegisterWindowMessageW
ChangeDisplaySettingsA
GetMessagePos
GetQueueStatus
EnableWindow
ShowOwnedPopups
DdeFreeDataHandle
DdeGetData
GetMessageA
GetPropW
BeginPaint
WindowFromDC
CreateWindowExA
EndDialog
InsertMenuA
GetClipboardFormatNameA
EqualRect
DestroyIcon
EnableMenuItem
RegisterClassExA
CallWindowProcW
GetCaretBlinkTime
InSendMessage
ToUnicodeEx
GetDlgItem
CreateWindowExW
SetCaretBlinkTime
CopyAcceleratorTableW
GetMenuBarInfo
CreateDialogParamA
DestroyMenu
GetMessageW
GetMenuStringW
DrawTextExA
SetWindowsHookExA
GetThreadDesktop
IsZoomed
ReuseDDElParam
DialogBoxIndirectParamA
SetMenu
ShowCursor
ReleaseCapture
IsIconic
CharNextA
GetSystemMetrics
DdeFreeStringHandle
LoadAcceleratorsW
DrawCaption
AdjustWindowRectEx
DdePostAdvise
UnregisterDeviceNotification
GetClipboardData
PostThreadMessageW
OffsetRect
RemovePropA
SendDlgItemMessageW
ScrollWindowEx
SetMenuItemBitmaps
CreateCaret
GetClipCursor
GetMenuItemRect
EnumDisplayMonitors
GetClassInfoA
CharToOemA
RegisterHotKey
SetWindowPlacement
PtInRect
EmptyClipboard
VkKeyScanW
UnregisterClassW
SetCursorPos
GetCursor
SetWindowTextW
AppendMenuW
CallNextHookEx
GetKeyboardLayoutList
ChildWindowFromPoint
OpenDesktopA
CharUpperBuffW
FindWindowExW
DrawStateW
GetWindowLongA
CreateIconFromResourceEx
GetClassInfoExW
GrayStringW
GetForegroundWindow
SendMessageTimeoutA
SetParent
wsprintfW
LoadCursorW
NotifyWinEvent
ActivateKeyboardLayout
DlgDirListA
GetMonitorInfoA
CreateAcceleratorTableA
DeferWindowPos
OpenWindowStationW
GetWindowModuleFileNameW
DrawTextA
MessageBoxIndirectA
GetDlgCtrlID
OpenDesktopW
GetMenuDefaultItem
UnpackDDElParam
wsprintfA
DdeAccessData
SendNotifyMessageW
CharLowerBuffA
SetWindowRgn
DrawIconEx
RegisterClassExW
DrawEdge
DrawFrameControl
SetWindowsHookExW
SetDlgItemTextA
DdeConnect
OpenWindowStationA
GetCursorInfo
TileChildWindows
RegisterClipboardFormatW
OemToCharBuffA
LoadStringA
GetClipboardOwner
CharUpperW
GetFocus
CharToOemBuffA
GetWindowWord
RegisterDeviceNotificationW
IsMenu
DdeUninitialize
SetProcessWindowStation
CreateDesktopW
DrawStateA
CreateDialogParamW
IsDialogMessage
HideCaret
MessageBoxW
InsertMenuW
GetDoubleClickTime
VkKeyScanA
AdjustWindowRect
GetSystemMenu
GetDlgItemTextA
MapVirtualKeyExA
OemToCharA
EnumThreadWindows
LoadMenuA
SetWindowContextHelpId
GetMessageTime
MessageBoxA
DestroyCaret
GetKeyNameTextA
FlashWindow
TranslateMessage
SetMenuInfo
ValidateRect
CopyAcceleratorTableA
GetUserObjectSecurity
EnumDisplaySettingsA
GetIconInfo
CreateIconFromResource
PostQuitMessage
GetWindowTextW
GetClassInfoW
ToAscii
CreateIcon
OpenIcon
IsCharAlphaNumericW
GetClientRect
LoadMenuIndirectW
SetMenuDefaultItem
PostThreadMessageA
GetScrollPos
MessageBeep
DlgDirSelectComboBoxExA
FindWindowExA
GetAsyncKeyState
CallWindowProcA
ShowWindowAsync
GetKeyNameTextW
ModifyMenuW
CheckMenuRadioItem
GetKeyboardLayoutNameA
DrawAnimatedRects
DdeNameService
GetLastActivePopup
SetKeyboardState
UnregisterHotKey
EnumDisplaySettingsW
DefDlgProcA
CharNextExA
CharUpperBuffA
LoadBitmapW
CheckMenuItem
WinHelpW
MsgWaitForMultipleObjectsEx
CreateMDIWindowW
GetWindowDC
IntersectRect
DrawTextW
WindowFromPoint
RealChildWindowFromPoint
IsWindow
GetClipboardViewer
GetCapture
LoadCursorFromFileW
GetMenuItemInfoA
DdeUnaccessData
GetTabbedTextExtentA
TrackMouseEvent
PostMessageW
GetDesktopWindow
CreatePopupMenu
DdeQueryStringA
SetDoubleClickTime
FrameRect
RegisterWindowMessageA
wvsprintfW
MapVirtualKeyW
GetOpenClipboardWindow
DefWindowProcW
CopyRect
IsDialogMessageA
IsCharAlphaNumericA
EndDeferWindowPos
InvalidateRgn
GetUpdateRgn
CopyIcon
GetMenuState
GetScrollBarInfo
CharUpperA
SetTimer
CreateCursor
GetGUIThreadInfo
ShowScrollBar
ScrollWindow
BringWindowToTop
SetMenuItemInfoA
AttachThreadInput
InvalidateRect
SendInput
ShowWindow
FreeDDElParam
SetFocus
SetClipboardViewer
HiliteMenuItem
GetClassWord
GetActiveWindow
GetDCEx
UpdateWindow
SystemParametersInfoA
SetLayeredWindowAttributes
SwapMouseButton
LoadKeyboardLayoutA
GetUserObjectInformationA
InvertRect
FindWindowW
SetCaretPos
SetForegroundWindow
GetWindowContextHelpId
OpenInputDesktop
GetWindowThreadProcessId
GetSysColorBrush
OpenClipboard
MenuItemFromPoint
GetWindowInfo
IsRectEmpty
SendDlgItemMessageA
GetAncestor
SetRectEmpty
BroadcastSystemMessage
GetClassNameA
ToAsciiEx
LoadCursorA
SendMessageTimeoutW
MonitorFromPoint
CloseDesktop
IsChild
DdeClientTransaction
AnimateWindow
TranslateAcceleratorA
GetInputState
SetMessageExtraInfo
ClipCursor
GetScrollInfo
UnhookWinEvent
GetClassLongA
SystemParametersInfoW
IsCharLowerW
GetPropA
CheckRadioButton
ReleaseDC
ChangeClipboardChain
GetWindowRect
SendMessageA
DeleteMenu
CreateDialogIndirectParamW
IsWindowUnicode
SetClassLongW
GetParent
ScreenToClient
GetWindowRgn
MoveWindow
ChangeDisplaySettingsW
DdeQueryStringW
IsClipboardFormatAvailable
EndPaint
SetWindowTextA
GetMenuCheckMarkDimensions
DialogBoxParamW
CloseWindowStation
RemoveMenu
keybd_event
SetThreadDesktop
GetClassInfoExA
ArrangeIconicWindows
DispatchMessageA
SendMessageW
LoadMenuIndirectA
WaitForInputIdle
DdeCreateStringHandleW
mouse_event
ExcludeUpdateRgn
EnumChildWindows
DefWindowProcA
DlgDirListComboBoxA
TileWindows
InsertMenuItemW
AppendMenuA
DestroyAcceleratorTable
GetSysColor
VkKeyScanExA
SetScrollInfo
DefMDIChildProcW
CascadeWindows
SubtractRect
DefMDIChildProcA
CreateMDIWindowA
SetWindowPos
MessageBoxExA
DestroyWindow
SwitchDesktop
PostMessageA
DefFrameProcA
LockWindowUpdate
RegisterClipboardFormatA
DispatchMessageW
LockSetForegroundWindow
GetCaretPos
UnhookWindowsHookEx
GetMenuInfo
GetTopWindow
LoadImageA
winmm
midiInGetDevCapsW
mmioDescend
waveInMessage
waveInReset
PlaySoundW
timeGetDevCaps
mciSendStringA
joyGetPos
timeGetTime
mixerGetID
waveOutPause
waveInOpen
timeEndPeriod
midiOutShortMsg
waveInStop
mmioWrite
waveOutReset
waveOutGetErrorTextA
waveInClose
waveOutPrepareHeader
midiOutGetVolume
midiOutClose
waveOutOpen
sndPlaySoundA
waveInUnprepareHeader
midiInStart
mixerGetDevCapsW
waveInAddBuffer
mixerGetControlDetailsA
midiInClose
mixerGetNumDevs
mmioOpenA
waveInPrepareHeader
midiInOpen
waveOutGetPosition
waveOutGetNumDevs
timeBeginPeriod
mmioRead
mmioGetInfo
mciSendCommandA
mixerSetControlDetails
PlaySoundA
joySetCapture
mciGetErrorStringA
midiOutGetDevCapsA
mixerGetControlDetailsW
mmioClose
mciGetDeviceIDA
joyReleaseCapture
mmioSeek
waveOutWrite
timeKillEvent
waveOutUnprepareHeader
mixerGetLineInfoW
midiInGetNumDevs
timeSetEvent
mixerGetDevCapsA
midiOutGetNumDevs
mmioCreateChunk
mixerGetLineInfoA
waveInGetErrorTextA
waveOutGetDevCapsA
waveOutRestart
mciSendCommandW
midiOutOpen
waveOutGetVolume
waveOutSetVolume
waveInGetDevCapsW
mmioAscend
midiInStop
waveOutClose
mixerGetLineControlsW
mciSendStringW
mixerOpen
waveInGetNumDevs
mixerGetLineControlsA
waveInGetDevCapsA
waveOutMessage
waveInStart
waveOutSetPlaybackRate
sndPlaySoundW
mixerClose
waveOutGetDevCapsW
wsock32
WSACleanup
shlwapi
UrlUnescapeW
PathFindExtensionW
SHSetValueW
PathFindFileNameW
PathRemoveExtensionW
PathFindExtensionA
SHCopyKeyA
StrToIntA
PathRemoveExtensionA
StrFormatByteSizeW
SHDeleteValueW
PathMatchSpecW
StrCmpIW
PathIsNetworkPathW
StrTrimA
PathParseIconLocationA
PathCanonicalizeW
PathIsUNCW
UrlCanonicalizeW
PathUnquoteSpacesA
StrCmpW
PathRemoveFileSpecA
PathCreateFromUrlW
StrDupW
PathIsURLW
PathFindFileNameA
PathRelativePathToW
PathAddBackslashW
SHAutoComplete
StrStrIW
PathAppendA
SHDeleteValueA
StrToInt64ExW
StrStrW
UrlCreateFromPathW
PathStripToRootW
StrCatW
PathIsRelativeA
UrlUnescapeA
PathIsDirectoryA
PathAddBackslashA
StrToIntW
StrRetToStrW
PathCompactPathW
UrlCombineW
PathRemoveBackslashA
SHCreateStreamOnFileW
PathAppendW
PathIsRootW
PathRemoveBlanksW
PathBuildRootA
SHDeleteEmptyKeyA
PathGetCharTypeW
SHDeleteKeyA
PathIsUNCServerA
PathIsUNCServerShareA
PathRemoveFileSpecW
PathIsRootA
SHCreateStreamOnFileA
PathRenameExtensionA
PathFileExistsW
PathIsFileSpecW
StrToIntExW
PathStripToRootA
StrRetToBufW
StrCpyW
AssocQueryStringW
PathIsDirectoryEmptyW
PathIsURLA
PathRelativePathToA
PathFileExistsA
StrFormatKBSizeW
StrCmpNIW
PathIsRelativeW
PathCommonPrefixW
PathMakePrettyW
PathSkipRootA
PathIsUNCA
UrlIsW
StrStrIA
PathMakeSystemFolderW
PathSetDlgItemPathW
PathStripPathA
PathCompactPathA
PathCanonicalizeA
PathCombineW
PathCombineA
PathIsDirectoryW
PathRemoveBackslashW
PathGetDriveNumberA
StrTrimW
StrFromTimeIntervalA
PathRemoveArgsA
PathMakePrettyA
PathQuoteSpacesA
StrStrA
PathStripPathW
PathRenameExtensionW
SHDeleteKeyW
ole32
OleLoad
OleGetIconOfClass
GetRunningObjectTable
CoLockObjectExternal
CoCreateInstance
OleDuplicateData
ReleaseStgMedium
CoGetMalloc
StringFromIID
WriteClassStm
CoCopyProxy
StgCreateDocfile
CoGetClassObject
CoTaskMemRealloc
CoCreateGuid
CoRegisterClassObject
OleRegEnumVerbs
OleSave
CreateStreamOnHGlobal
OleSaveToStream
CoLoadLibrary
MkParseDisplayName
OleQueryCreateFromData
CreateFileMoniker
OleGetClipboard
CoRevokeClassObject
StgCreateStorageEx
GetHGlobalFromStream
CoInitialize
CoRegisterMessageFilter
CoUninitialize
OleCreateLinkToFile
OleRun
ReadClassStg
CreateILockBytesOnHGlobal
CoImpersonateClient
StgOpenStorage
OleCreate
StringFromCLSID
CLSIDFromProgID
FreePropVariantArray
CoResumeClassObjects
CoMarshalInterface
CoUnmarshalInterface
PropVariantClear
CoMarshalInterThreadInterfaceInStream
CoQueryProxyBlanket
StgIsStorageFile
BindMoniker
CreateGenericComposite
CoDisconnectObject
OleLockRunning
CoGetInterfaceAndReleaseStream
RevokeDragDrop
CoCreateInstanceEx
StgCreateDocfileOnILockBytes
IsAccelerator
OleIsRunning
CoTreatAsClass
WriteClassStg
OleCreateMenuDescriptor
CreateClassMoniker
RegisterDragDrop
SetConvertStg
OleSetClipboard
StgIsStorageILockBytes
CreateBindCtx
CoTaskMemFree
ReadClassStm
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
ProgIDFromCLSID
CoRegisterMallocSpy
OleQueryLinkFromData
CreateDataAdviseHolder
OleCreateLinkFromData
OleUninitialize
WriteFmtUserTypeStg
OleSetMenuDescriptor
GetHGlobalFromILockBytes
OleDraw
ReadFmtUserTypeStg
CoSetProxyBlanket
OleRegGetUserType
GetClassFile
CoRevertToSelf
CoRevokeMallocSpy
OleLoadFromStream
CreateOleAdviseHolder
DoDragDrop
CreateItemMoniker
OleIsCurrentClipboard
OleInitialize
CoGetObject
CoReleaseMarshalData
OleTranslateAccelerator
OleCreateFromData
CoInitializeSecurity
StringFromGUID2
CoSuspendClassObjects
CoInitializeEx
OleRegGetMiscStatus
OleSetContainedObject
OleCreateStaticFromData
CLSIDFromString
CoTaskMemAlloc
CoFileTimeNow
IIDFromString
OleDestroyMenuDescriptor
OleCreateFromFile
OleFlushClipboard
advapi32
ConvertSidToStringSidW
CryptGetHashParam
SetSecurityDescriptorSacl
QueryServiceConfigA
QueryServiceConfigW
CryptGenRandom
GetTokenInformation
RegOpenKeyExW
AddAccessAllowedAce
GetExplicitEntriesFromAclW
CryptGenKey
CopySid
RegisterServiceCtrlHandlerExA
RegConnectRegistryA
CryptAcquireContextA
SetEntriesInAclW
RegQueryValueA
GetSidIdentifierAuthority
UnlockServiceDatabase
GetNamedSecurityInfoW
InitiateSystemShutdownExW
LockServiceDatabase
EncryptFileW
RegQueryValueW
LsaRemoveAccountRights
LookupAccountNameW
GetSecurityInfo
InitializeAcl
GetLengthSid
SetSecurityDescriptorDacl
ReadEncryptedFileRaw
CryptEncrypt
LsaLookupSids
RegSetValueW
CryptGetKeyParam
InitiateSystemShutdownA
RegUnLoadKeyA
RegisterServiceCtrlHandlerW
LsaAddAccountRights
CryptDeriveKey
GetSecurityDescriptorOwner
RegSetValueExA
GetNamedSecurityInfoA
CreateWellKnownSid
RegEnumKeyExW
RegLoadKeyA
RegCreateKeyExA
RegCreateKeyA
GetKernelObjectSecurity
RegEnumValueW
RegFlushKey
SetThreadToken
RegSetValueA
CryptExportKey
AllocateAndInitializeSid
RegisterServiceCtrlHandlerA
RegRestoreKeyW
RegSaveKeyW
RegQueryValueExA
LookupPrivilegeDisplayNameA
GetAce
RegDeleteKeyA
SetServiceObjectSecurity
CloseEncryptedFileRaw
ChangeServiceConfigA
ConvertStringSidToSidW
QueryServiceStatus
SetFileSecurityA
CryptDestroyHash
EnumDependentServicesW
GetSecurityDescriptorLength
CryptHashData
StartServiceW
StartServiceCtrlDispatcherW
LogonUserA
WriteEncryptedFileRaw
AdjustTokenPrivileges
RegDisablePredefinedCache
CryptReleaseContext
RegEnumKeyExA
RegisterEventSourceW
DeleteAce
LookupAccountSidW
SetSecurityInfo
CryptDestroyKey
LookupAccountNameA
RegSetKeySecurity
RegEnumKeyA
InitializeSecurityDescriptor
CryptCreateHash
SetSecurityDescriptorControl
CheckTokenMembership
CryptSetProvParam
DuplicateTokenEx
ConvertStringSidToSidA
RegGetKeySecurity
GetUserNameW
SetServiceStatus
ImpersonateNamedPipeClient
SetSecurityDescriptorGroup
IsValidSecurityDescriptor
RegNotifyChangeKeyValue
RegCloseKey
CryptAcquireContextW
BuildExplicitAccessWithNameW
DeregisterEventSource
RegOpenKeyExA
LsaQueryInformationPolicy
ImpersonateLoggedOnUser
LsaNtStatusToWinError
GetSidLengthRequired
CryptImportKey
RegDeleteValueW
ControlService
GetFileSecurityA
SetTokenInformation
MakeAbsoluteSD
RegCreateKeyExW
CryptEnumProvidersW
RegCreateKeyW
RevertToSelf
RegOpenKeyA
ChangeServiceConfigW
LookupAccountSidA
CreateProcessAsUserW
LogonUserW
CreateServiceW
SetSecurityDescriptorOwner
DeleteService
GetSecurityDescriptorControl
LookupPrivilegeNameA
LookupPrivilegeValueA
ImpersonateSelf
QueryServiceLockStatusW
CryptGetUserKey
OpenSCManagerW
OpenThreadToken
RegSetValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueA
BuildTrusteeWithNameW
GetFileSecurityW
GetSidSubAuthorityCount
AccessCheck
IsValidSid
OpenProcessToken
OpenServiceA
RegisterEventSourceA
OpenEncryptedFileRawW
ChangeServiceConfig2A
RegSaveKeyA
MapGenericMask
QueryServiceStatusEx
IsValidAcl
LsaLookupNames
CreateServiceA
RegQueryValueExW
LookupPrivilegeValueW
RegLoadKeyW
RegUnLoadKeyW
RegRestoreKeyA
CryptVerifySignatureA
OpenServiceW
GetSecurityDescriptorDacl
FreeSid
CreateProcessAsUserA
BuildTrusteeWithSidW
SetEntriesInAclA
GetSecurityDescriptorGroup
RegConnectRegistryW
ReportEventA
RegOpenCurrentUser
EqualPrefixSid
RegQueryInfoKeyA
SetNamedSecurityInfoW
GetUserNameA
LsaOpenPolicy
GetSecurityDescriptorSacl
GetAclInformation
MakeSelfRelativeSD
SetNamedSecurityInfoA
ChangeServiceConfig2W
RegEnumKeyW
AddAce
RegDeleteValueA
RegOpenKeyW
GetEffectiveRightsFromAclA
EqualSid
GetSidSubAuthority
RegDeleteKeyW
CryptDecrypt
LsaClose
InitializeSid
ReportEventW
SetFileSecurityW
DuplicateToken
StartServiceCtrlDispatcherA
StartServiceA
CloseServiceHandle
OpenSCManagerA
ConvertSecurityDescriptorToStringSecurityDescriptorW
LsaFreeMemory
RegQueryInfoKeyW
EnumServicesStatusA
kernel32
Module32NextW
LockFileEx
SetCommConfig
GetModuleHandleW
GetCPInfoExA
UnmapViewOfFile
CreateWaitableTimerW
SetThreadPriority
GetConsoleScreenBufferInfo
QueryPerformanceFrequency
SetProcessPriorityBoost
InterlockedIncrement
CommConfigDialogW
CreateDirectoryW
GetUserDefaultLangID
IsValidCodePage
LocalCompact
GetFullPathNameA
WritePrivateProfileStringW
OpenMutexA
GetSystemTimeAsFileTime
DisconnectNamedPipe
GetVolumeNameForVolumeMountPointA
ConnectNamedPipe
BackupRead
WaitNamedPipeA
CreateFiber
SetCommTimeouts
GetEnvironmentStrings
GetCommState
SetProcessAffinityMask
CreateNamedPipeW
MoveFileW
MoveFileA
GetUserDefaultUILanguage
SetupComm
WriteFileEx
WritePrivateProfileStructA
FindFirstVolumeW
GetLocaleInfoA
SetConsoleMode
SetErrorMode
GetCurrentDirectoryW
CreateThread
GetSystemDirectoryW
HeapReAlloc
LocalFree
SystemTimeToTzSpecificLocalTime
ContinueDebugEvent
GetProcessHeap
VirtualProtectEx
EndUpdateResourceA
GetVersionExA
GetTempFileNameA
TlsGetValue
FindAtomW
GetFileSizeEx
HeapFree
DebugBreak
GetFileAttributesA
GetConsoleMode
SetConsoleCursorPosition
UnlockFile
CreateNamedPipeA
FindCloseChangeNotification
OpenThread
IsBadCodePtr
SwitchToFiber
BackupWrite
GlobalLock
SetUnhandledExceptionFilter
ExpandEnvironmentStringsW
LocalLock
GetSystemDefaultLCID
VirtualFreeEx
_hread
GetCurrentProcessId
OpenProcess
GetComputerNameExA
TlsSetValue
SetSystemTime
Module32FirstW
MultiByteToWideChar
ReleaseMutex
IsValidLocale
GetFileAttributesW
Thread32Next
GetVersionExW
GetLogicalDrives
VirtualAllocEx
GetPrivateProfileSectionNamesA
GetLastError
FindResourceW
TlsAlloc
GetCompressedFileSizeW
Process32Next
InitializeCriticalSectionAndSpinCount
GetThreadContext
GetLogicalDriveStringsA
SetHandleInformation
DosDateTimeToFileTime
CopyFileExA
HeapValidate
LocalFileTimeToFileTime
EnumLanguageGroupLocalesW
ConvertThreadToFiber
BackupSeek
GetCommModemStatus
PeekNamedPipe
FindFirstChangeNotificationA
Heap32Next
GetPrivateProfileStringA
GetCurrentDirectoryA
GetSystemInfo
EndUpdateResourceW
lstrcpynA
CloseHandle
GetPrivateProfileSectionA
lstrcatA
FlushConsoleInputBuffer
ReadConsoleInputA
SuspendThread
GetFileType
GetPrivateProfileStringW
DisableThreadLibraryCalls
lstrcmpA
ConvertDefaultLocale
GetOverlappedResult
FreeLibrary
SetEvent
GetTempFileNameW
GetEnvironmentStringsW
GetVolumePathNameW
FindNextChangeNotification
HeapCreate
GetFullPathNameW
GetModuleHandleA
GetVersion
BuildCommDCBA
GetConsoleOutputCP
SwitchToThread
SetCommState
DeleteCriticalSection
lstrcpyW
LoadLibraryExA
SetEndOfFile
FindResourceA
ClearCommError
GetDiskFreeSpaceW
CreateMutexW
QueryDosDeviceW
FormatMessageA
CompareStringW
HeapAlloc
GetTimeFormatA
GetSystemTimeAdjustment
SetThreadContext
DeleteVolumeMountPointA
ProcessIdToSessionId
LocalReAlloc
SetVolumeLabelA
QueueUserAPC
GetProfileStringW
VirtualQuery
EnumResourceNamesW
GlobalAddAtomW
InitializeCriticalSection
GetWindowsDirectoryA
VirtualLock
TransmitCommChar
EnumCalendarInfoA
SizeofResource
GetTimeFormatW
GetShortPathNameW
MulDiv
SetMailslotInfo
GetTimeZoneInformation
GetProcessAffinityMask
lstrcmpiW
FindNextFileA
GetLocalTime
GetProcessVersion
OpenEventW
GetDiskFreeSpaceA
CreateProcessA
SetLastError
CreateWaitableTimerA
GetUserDefaultLCID
QueueUserWorkItem
SleepEx
GlobalReAlloc
OpenFileMappingA
WaitForMultipleObjects
FileTimeToDosDateTime
ResetEvent
GetQueuedCompletionStatus
GetFileSize
GetSystemDirectoryA
FindFirstChangeNotificationW
GetComputerNameA
FreeConsole
RtlFillMemory
ClearCommBreak
PostQueuedCompletionStatus
EnumResourceLanguagesA
GlobalFindAtomW
LCMapStringA
UnhandledExceptionFilter
SetEnvironmentVariableA
DeleteFileW
GetStringTypeW
GlobalFindAtomA
Process32First
GetFileTime
FileTimeToLocalFileTime
IsDBCSLeadByteEx
CreateFileW
GetVolumeInformationA
GetThreadLocale
Sleep
Process32FirstW
FindFirstFileExW
DeviceIoControl
MoveFileExW
CreateSemaphoreA
GetModuleFileNameA
SearchPathA
GetCPInfo
GetCurrentThreadId
IsDBCSLeadByte
GetCurrentThread
TryEnterCriticalSection
GetBinaryTypeA
RtlUnwind
VirtualProtect
GetPrivateProfileStructA
CreateProcessW
Beep
LocalSize
GetACP
CopyFileExW
DeleteFileA
GetLocaleInfoW
GetNumberFormatA
EnterCriticalSection
Heap32First
lstrcmpiA
FreeEnvironmentStringsA
HeapSize
QueryDosDeviceA
GetCommProperties
CreateToolhelp32Snapshot
GetCurrencyFormatA
RaiseException
SetPriorityClass
SetFileAttributesW
CreateMutexA
GetMailslotInfo
GlobalFlags
GetExitCodeThread
IsDebuggerPresent
ReleaseSemaphore
UpdateResourceA
Heap32ListFirst
WaitForMultipleObjectsEx
LoadLibraryExW
GetComputerNameW
MapViewOfFile
WriteProcessMemory
GetDiskFreeSpaceExW
SetThreadLocale
SetComputerNameW
LoadLibraryA
ExpandEnvironmentStringsA
CreateFileA
OpenMutexW
lstrcmpW
LocalUnlock
WaitForDebugEvent
VerifyVersionInfoA
WritePrivateProfileSectionW
DuplicateHandle
GetSystemWindowsDirectoryA
GetLongPathNameA
CompareStringA
FindFirstFileW
IsBadStringPtrW
MapViewOfFileEx
VirtualQueryEx
RemoveDirectoryA
VerLanguageNameA
WriteProfileStringA
EnumUILanguagesW
AreFileApisANSI
SetCurrentDirectoryA
CopyFileA
SetTapePosition
GetProfileIntW
InterlockedExchange
UpdateResourceW
LeaveCriticalSection
_lopen
WideCharToMultiByte
FlushViewOfFile
_llseek
WaitNamedPipeW
EnumCalendarInfoExW
Module32First
ResumeThread
GetVolumeInformationW
DeleteAtom
WritePrivateProfileStructW
GetFileAttributesExW
CreateIoCompletionPort
SetThreadExecutionState
DebugActiveProcess
FindVolumeClose
EnumResourceNamesA
CreatePipe
FormatMessageW
GetCommConfig
GetStartupInfoW
CopyFileW
FindFirstFileA
WriteProfileStringW
lstrlenW
GetConsoleCP
WaitCommEvent
IsBadStringPtrA
LoadResource
VirtualAlloc
GetVolumePathNameA
OutputDebugStringW
WriteConsoleA
ReadDirectoryChangesW
CreateDirectoryA
FindResourceExW
GetEnvironmentVariableA
GetDateFormatA
SetEnvironmentVariableW
GetHandleInformation
GetPrivateProfileIntW
WaitForSingleObject
WriteConsoleOutputW
SetConsoleCtrlHandler
HeapCompact
SetFileAttributesA
FreeEnvironmentStringsW
SetHandleCount
OpenEventA
FindNextVolumeW
CreateFileMappingA
SetCommMask
InterlockedExchangeAdd
RemoveDirectoryW
GetLogicalDriveStringsW
PulseEvent
GetNumberFormatW
SetNamedPipeHandleState
HeapDestroy
GetProcessWorkingSetSize
SetFileTime
GetProfileStringA
GetCommTimeouts
CreateDirectoryExA
GetProfileIntA
CancelIo
OpenSemaphoreW
GetProcAddress
FileTimeToSystemTime
GetExitCodeProcess
SetThreadAffinityMask
GlobalHandle
GetDateFormatW
_hwrite
SetFilePointer
GetWindowsDirectoryW
CompareFileTime
Toolhelp32ReadProcessMemory
FindClose
ExitThread
LocalHandle
OpenFileMappingW
Module32Next
MoveFileExA
GetModuleFileNameW
GetPrivateProfileIntA
GetProcessHeaps
GetTickCount
VerifyVersionInfoW
SetCurrentDirectoryW
EnumSystemLocalesA
SetTimeZoneInformation
QueryPerformanceCounter
GetVolumeNameForVolumeMountPointW
SetWaitableTimer
GetCommMask
GetThreadPriority
GetProcessTimes
GetStartupInfoA
GetStringTypeExA
TerminateThread
BeginUpdateResourceW
SetProcessShutdownParameters
AllocConsole
FatalAppExitA
LoadLibraryW
IsBadReadPtr
SystemTimeToFileTime
GetAtomNameA
OutputDebugStringA
GetCommandLineW
SearchPathW
GetThreadTimes
OpenSemaphoreA
SetVolumeMountPointA
GetCommandLineA
ReadFile
WriteConsoleW
GetTapeParameters
FlushFileBuffers
SetProcessWorkingSetSize
EnumResourceLanguagesW
GetDiskFreeSpaceExA
ReadProcessMemory
FindResourceExA
GetOEMCP
WriteFile
FlushInstructionCache
CreateSemaphoreW
CreateEventW
EscapeCommFunction
LockFile
GlobalGetAtomNameW
VirtualFree
SetLocalTime
Process32NextW
InterlockedCompareExchange
GlobalAlloc
WritePrivateProfileSectionA
InterlockedDecrement
Thread32First
GetStringTypeA
CreateMailslotA
lstrcpyA
CreateEventA
_lcreat
WritePrivateProfileStringA
GetPriorityClass
lstrcatW
SetConsoleTitleW
BeginUpdateResourceA
GetCurrentProcess
CreateFileMappingW
ExitProcess
SetFilePointerEx
lstrcpynW
LCMapStringW
DeleteFiber
SetVolumeLabelW
GetSystemPowerStatus
GetEnvironmentVariableW
OpenFile
GetTempPathW
SetCommBreak
EnumSystemLanguageGroupsW
EnumResourceTypesA
GetFileInformationByHandle
LocalAlloc
IsProcessorFeaturePresent
GetStdHandle
GetDriveTypeA
_lclose
FindNextFileW
WaitForSingleObjectEx
IsBadWritePtr
FreeResource
GlobalFree
GetStringTypeExW
DefineDosDeviceA
GetSystemDefaultLangID
_lwrite
GetFileAttributesExA
TerminateProcess
VerSetConditionMask
GlobalMemoryStatusEx
GetComputerNameExW
EnumCalendarInfoW
GlobalAddAtomA
GetTempPathA
VirtualUnlock
GetProfileSectionA
TlsFree
GetDriveTypeW
_lread
GetShortPathNameA
GlobalMemoryStatus
WinExec
UnlockFileEx
GlobalGetAtomNameA
comctl32
ImageList_SetFlags
ImageList_DrawEx
ImageList_DragEnter
PropertySheetW
ImageList_AddIcon
ImageList_GetBkColor
ImageList_GetIconSize
ImageList_Copy
ImageList_EndDrag
ImageList_Read
CreateUpDownControl
ImageList_Draw
ImageList_Destroy
ImageList_SetIconSize
ImageList_DragMove
ImageList_SetImageCount
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_LoadImageA
ord17
ImageList_SetOverlayImage
CreatePropertySheetPageA
ImageList_LoadImage
InitCommonControlsEx
MakeDragList
ImageList_Replace
ImageList_Create
ImageList_GetDragImage
ImageList_Merge
ImageList_SetBkColor
ImageList_Add
ImageList_LoadImageW
InitializeFlatSB
ImageList_AddMasked
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_GetIcon
CreateStatusWindowW
DestroyPropertySheetPage
FlatSB_ShowScrollBar
FlatSB_EnableScrollBar
ImageList_BeginDrag
ImageList_Remove
ImageList_GetImageCount
CreateToolbarEx
PropertySheetA
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_Write
DrawStatusTextW
CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_DragLeave
shell32
SHGetDataFromIDListA
ShellExecuteW
Shell_NotifyIconA
SHGetFolderPathW
CommandLineToArgvW
SHBrowseForFolderA
DragAcceptFiles
DragQueryFileA
ExtractIconExW
DragQueryPoint
SHFileOperationW
SHCreateDirectoryExA
SHGetInstanceExplorer
SHGetPathFromIDListA
SHGetFileInfoW
SHBindToParent
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
ShellExecuteExA
SHBrowseForFolderW
ShellExecuteA
DragFinish
DuplicateIcon
DoEnvironmentSubstW
SHCreateDirectoryExW
SHGetPathFromIDListW
ShellExecuteExW
ord155
SHChangeNotify
SHGetMalloc
SHAddToRecentDocs
SHFileOperationA
SHFreeNameMappings
SHGetSpecialFolderPathA
ExtractIconW
SHAppBarMessage
Shell_NotifyIconW
DragQueryFileW
FindExecutableW
SHEmptyRecycleBinA
SHGetDesktopFolder
ExtractIconA
ExtractIconExA
SHGetFolderLocation
SHGetFileInfoA
SHGetDataFromIDListW
FindExecutableA
SHGetFolderPathA
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ