Static task
static1
Behavioral task
behavioral1
Sample
56db5819d8af9a58dc679d1dcf1f27807f925645a59149e8871c811883d784ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56db5819d8af9a58dc679d1dcf1f27807f925645a59149e8871c811883d784ad.exe
Resource
win10v2004-20220812-en
General
-
Target
56db5819d8af9a58dc679d1dcf1f27807f925645a59149e8871c811883d784ad
-
Size
755KB
-
MD5
03bdd59e303b0567ece2999bc7b78903
-
SHA1
8f6468d0d721ca75b0bd4c27244da6cf861f6830
-
SHA256
56db5819d8af9a58dc679d1dcf1f27807f925645a59149e8871c811883d784ad
-
SHA512
b71db85b669aa3847df603dd4308b8f2fc2b9055b8fbcf396e821c4c4db94024d27db046260b2af412789b3a5198da9fa3e00dd67447f1a6c9648b46de60a55f
-
SSDEEP
12288:pYXLyPX7WAWfxheWMeywdMvh4uo2gKdq9lA9rrqAvsM9NkcMn35ai7ZJps+QK2kT:eXW/4tTywO54L/KdqLA9rlY53R7W+vef
Malware Config
Signatures
Files
-
56db5819d8af9a58dc679d1dcf1f27807f925645a59149e8871c811883d784ad.exe windows x86
5e331bb1a82bef33da07eaf02dfa7e46
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetSidSubAuthority
LookupAccountNameW
RegSetValueW
RegRestoreKeyW
ConvertStringSidToSidW
GetSidIdentifierAuthority
CheckTokenMembership
AddAce
DeleteAce
SetServiceObjectSecurity
RegDeleteKeyA
RegEnumKeyA
RegSaveKeyW
RegDeleteValueA
GetAclInformation
MakeAbsoluteSD
EnumServicesStatusA
SetFileSecurityW
RegSetValueA
GetLengthSid
GetUserNameW
RegLoadKeyA
RegisterServiceCtrlHandlerW
SetServiceStatus
RevertToSelf
StartServiceW
CreateProcessAsUserW
SetEntriesInAclW
RegCreateKeyExW
LogonUserA
RegCreateKeyW
GetSecurityDescriptorGroup
LsaLookupSids
RegEnumKeyW
RegGetKeySecurity
CryptHashData
CryptGenRandom
GetSecurityDescriptorLength
LookupPrivilegeDisplayNameA
AccessCheck
BuildExplicitAccessWithNameW
CryptSetProvParam
RegEnumValueA
RegOpenKeyExA
LsaQueryInformationPolicy
RegUnLoadKeyW
OpenSCManagerA
InitializeSecurityDescriptor
GetSecurityDescriptorSacl
GetKernelObjectSecurity
RegNotifyChangeKeyValue
EqualPrefixSid
RegQueryValueExW
WriteEncryptedFileRaw
OpenServiceA
OpenServiceW
CryptGetUserKey
CryptExportKey
LsaNtStatusToWinError
RegQueryValueA
RegFlushKey
LookupPrivilegeNameA
CloseServiceHandle
LookupPrivilegeValueA
EnumDependentServicesW
SetSecurityInfo
SetSecurityDescriptorGroup
SetNamedSecurityInfoA
RegOpenKeyExW
GetTokenInformation
GetFileSecurityA
CryptEncrypt
RegCreateKeyExA
CopySid
QueryServiceConfigW
RegSaveKeyA
BuildTrusteeWithNameW
RegEnumKeyExA
GetSidSubAuthorityCount
CryptVerifySignatureA
CryptAcquireContextW
SetSecurityDescriptorControl
GetExplicitEntriesFromAclW
GetEffectiveRightsFromAclA
CryptEnumProvidersW
LsaRemoveAccountRights
CloseEncryptedFileRaw
LsaOpenPolicy
SetNamedSecurityInfoW
SetThreadToken
EqualSid
RegOpenCurrentUser
RegConnectRegistryA
AdjustTokenPrivileges
CryptGetKeyParam
ReportEventA
RegDeleteValueW
CreateServiceA
ReadEncryptedFileRaw
DeregisterEventSource
SetTokenInformation
InitiateSystemShutdownExW
CreateWellKnownSid
GetNamedSecurityInfoA
RegisterEventSourceW
LogonUserW
LookupPrivilegeValueW
RegQueryValueW
CryptReleaseContext
ChangeServiceConfigA
ConvertStringSecurityDescriptorToSecurityDescriptorW
ReportEventW
LsaLookupNames
RegDisablePredefinedCache
RegCloseKey
MapGenericMask
CryptGenKey
StartServiceA
RegUnLoadKeyA
DuplicateTokenEx
QueryServiceStatusEx
GetSecurityInfo
RegRestoreKeyA
RegQueryValueExA
DuplicateToken
ChangeServiceConfig2W
LookupAccountNameA
LsaAddAccountRights
ConvertSidToStringSidW
InitializeAcl
SetSecurityDescriptorSacl
GetSecurityDescriptorControl
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegOpenKeyW
RegQueryInfoKeyW
DeleteService
UnlockServiceDatabase
SetSecurityDescriptorDacl
RegSetValueExW
StartServiceCtrlDispatcherA
GetSecurityDescriptorOwner
IsValidSecurityDescriptor
OpenSCManagerW
CryptDeriveKey
RegisterServiceCtrlHandlerExA
LookupAccountSidA
GetAce
SetFileSecurityA
OpenEncryptedFileRawW
ImpersonateLoggedOnUser
GetUserNameA
OpenThreadToken
RegEnumKeyExW
GetSidLengthRequired
CryptDecrypt
BuildTrusteeWithSidW
FreeSid
LookupAccountSidW
ImpersonateNamedPipeClient
CryptDestroyHash
ChangeServiceConfigW
ImpersonateSelf
SetEntriesInAclA
GetFileSecurityW
QueryServiceConfigA
CryptAcquireContextA
GetNamedSecurityInfoW
QueryServiceStatus
RegisterEventSourceA
MakeSelfRelativeSD
LockServiceDatabase
RegQueryInfoKeyA
RegConnectRegistryW
CreateProcessAsUserA
StartServiceCtrlDispatcherW
LsaFreeMemory
IsValidAcl
EncryptFileW
CryptImportKey
LsaClose
RegEnumValueW
GetSecurityDescriptorDacl
IsValidSid
ControlService
RegLoadKeyW
CreateServiceW
RegDeleteKeyW
CryptCreateHash
AllocateAndInitializeSid
QueryServiceLockStatusW
RegCreateKeyA
ChangeServiceConfig2A
RegOpenKeyA
RegisterServiceCtrlHandlerA
CryptDestroyKey
RegSetValueExA
OpenProcessToken
InitiateSystemShutdownA
SetSecurityDescriptorOwner
AddAccessAllowedAce
ConvertStringSidToSidA
CryptGetHashParam
RegSetKeySecurity
InitializeSid
shell32
SHEmptyRecycleBinA
SHGetInstanceExplorer
SHGetFolderPathW
SHGetPathFromIDListW
DragFinish
SHGetSpecialFolderLocation
DuplicateIcon
SHAppBarMessage
ExtractIconW
ShellExecuteExW
SHGetFileInfoA
SHBrowseForFolderA
CommandLineToArgvW
DoEnvironmentSubstW
ord155
DragAcceptFiles
SHGetSpecialFolderPathA
ExtractIconExA
Shell_NotifyIconW
SHFreeNameMappings
DragQueryFileW
ShellExecuteExA
ShellExecuteW
SHBindToParent
SHChangeNotify
DragQueryPoint
SHCreateDirectoryExA
ExtractIconExW
SHGetFileInfoW
SHGetFolderLocation
DragQueryFileA
SHBrowseForFolderW
SHFileOperationW
SHGetDataFromIDListW
SHGetFolderPathA
Shell_NotifyIconA
FindExecutableA
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ExtractIconA
SHAddToRecentDocs
SHGetMalloc
SHGetDataFromIDListA
SHGetDesktopFolder
SHFileOperationA
ShellExecuteA
SHGetPathFromIDListA
FindExecutableW
winspool.drv
EnumPrinterDriversA
StartPagePrinter
DocumentPropertiesW
DeviceCapabilitiesA
AddPrinterA
SetPrinterA
DocumentPropertiesA
EnumFormsW
PrinterProperties
GetPrinterA
SetPrinterW
EnumPortsW
EnumJobsA
GetPrinterDriverA
ClosePrinter
FindNextPrinterChangeNotification
OpenPrinterW
EndDocPrinter
OpenPrinterA
SetJobW
StartDocPrinterA
GetFormW
DeletePrinterDriverA
GetPrinterW
FreePrinterNotifyInfo
AddPrinterDriverA
ord204
EnumPortsA
SetPrinterDataW
AbortPrinter
DeletePrinter
EndPagePrinter
GetPrinterDriverDirectoryA
DeleteFormW
EnumPrintersA
DeviceCapabilitiesW
EnumPrintersW
DeletePrintProcessorW
WritePrinter
FindFirstPrinterChangeNotification
GetJobW
StartDocPrinterW
DeletePrintProcessorA
GetJobA
EnumJobsW
AddFormW
user32
UnionRect
TrackPopupMenu
GetClassLongW
DeferWindowPos
GetSystemMetrics
MsgWaitForMultipleObjects
WinHelpW
CreateCaret
ReleaseDC
GetMenuItemInfoA
PostQuitMessage
GetCursorInfo
MsgWaitForMultipleObjectsEx
GetComboBoxInfo
LoadCursorW
DdeClientTransaction
GetWindowTextA
InvalidateRect
DefWindowProcA
CharLowerBuffA
CallMsgFilterA
DestroyIcon
GetMenuItemID
BringWindowToTop
SetRectEmpty
CreateCursor
CloseWindowStation
DispatchMessageA
DrawCaption
LoadCursorFromFileA
DefDlgProcA
SetWindowsHookExA
EnumDisplayMonitors
RegisterDeviceNotificationW
DefWindowProcW
TranslateAcceleratorA
InsertMenuItemW
SetDlgItemTextW
OpenWindowStationW
CreateIcon
DeleteMenu
DlgDirSelectComboBoxExA
DdeGetData
ModifyMenuW
GetDlgItemTextA
InSendMessage
CreateDialogIndirectParamA
ToUnicode
GetLastActivePopup
OemToCharBuffA
DrawTextExW
GetSystemMenu
LoadAcceleratorsA
DrawFrameControl
IsClipboardFormatAvailable
ChildWindowFromPointEx
SendMessageTimeoutA
GetWindowTextW
SetMenuDefaultItem
UnregisterClassW
GetKeyNameTextW
SystemParametersInfoA
IsMenu
ChildWindowFromPoint
GetDCEx
CharToOemA
RegisterClipboardFormatA
GetMenuState
IsRectEmpty
SetMessageExtraInfo
AppendMenuW
ClientToScreen
BeginPaint
ChangeDisplaySettingsA
GetMenuStringA
LoadCursorA
GetMessageW
TileWindows
SetTimer
CharPrevA
DrawIconEx
DrawStateW
IsDlgButtonChecked
ChangeClipboardChain
CharNextExA
RegisterClassW
SetWindowsHookExW
GetProcessWindowStation
GetMenuInfo
ScrollDC
SetWindowPlacement
CreatePopupMenu
CharUpperBuffA
UnregisterDeviceNotification
ToAsciiEx
SetScrollInfo
CallWindowProcW
CharNextA
IsDialogMessage
CloseWindow
HideCaret
SetUserObjectSecurity
PostThreadMessageA
RegisterClipboardFormatW
LoadIconW
GetWindowLongW
DrawAnimatedRects
TrackMouseEvent
RedrawWindow
DestroyCaret
GetScrollBarInfo
GetScrollInfo
VkKeyScanA
CheckMenuItem
CharLowerW
CreateMenu
DefFrameProcW
GetWindowWord
DdeCreateStringHandleA
CallWindowProcA
ValidateRgn
SetPropW
GetWindowPlacement
EnableMenuItem
SetMenu
CheckMenuRadioItem
CopyImage
ClipCursor
SwitchDesktop
GetWindowModuleFileNameW
PostMessageA
ShowCursor
GetIconInfo
GetSysColor
LoadMenuIndirectW
PeekMessageW
MoveWindow
MessageBoxIndirectA
PostThreadMessageW
GetWindowRgn
FrameRect
IntersectRect
SystemParametersInfoW
IsWindow
FlashWindowEx
SetClipboardData
OpenDesktopA
SetMenuContextHelpId
SubtractRect
wvsprintfW
TrackPopupMenuEx
GetMenuItemCount
GetClassInfoW
ModifyMenuA
CascadeWindows
GetClassNameA
DlgDirListComboBoxA
OemToCharA
GetCapture
DdeNameService
IsWindowUnicode
CreateAcceleratorTableA
GetMessagePos
AnimateWindow
GetClipboardViewer
CharUpperW
DlgDirListComboBoxW
CreateDesktopW
FindWindowA
GetKeyboardLayout
PtInRect
EnableScrollBar
FlashWindow
GetTitleBarInfo
CloseDesktop
CheckDlgButton
IsChild
ScrollWindowEx
GetDlgItemTextW
GetWindowLongA
DefMDIChildProcW
SetMenuItemBitmaps
DestroyMenu
EnumChildWindows
GetKeyState
DdeAccessData
SetDlgItemTextA
SendMessageA
GetPropW
SetLayeredWindowAttributes
SetFocus
LoadStringA
GetClassLongA
ToUnicodeEx
GetClassNameW
GetThreadDesktop
TranslateAcceleratorW
LoadBitmapA
PeekMessageA
CharUpperBuffW
IsCharLowerW
wvsprintfA
RemovePropA
IsCharAlphaNumericA
SetMenuItemInfoA
OpenClipboard
MonitorFromRect
CreateAcceleratorTableW
GetQueueStatus
CreateDialogParamW
DdeUninitialize
UnregisterClassA
SetWindowTextA
DdeDisconnect
OpenDesktopW
CreateIconFromResourceEx
ReleaseCapture
CreateWindowExW
RegisterWindowMessageW
RemovePropW
DragDetect
GetMenuItemInfoW
DialogBoxParamW
DdeCreateDataHandle
RealChildWindowFromPoint
GetMessageA
SetWindowPos
CreateIconFromResource
GetMenu
GetMenuDefaultItem
LoadMenuA
GetInputState
GetWindowInfo
ChangeDisplaySettingsW
ShowWindowAsync
GetScrollPos
IsCharUpperA
MessageBoxW
SetClipboardViewer
GetClassInfoExW
GetDlgCtrlID
GetCursorPos
SetMenuItemInfoW
GetScrollRange
LoadImageW
ToAscii
GetClipboardFormatNameW
EndDialog
RegisterHotKey
IsDialogMessageA
CloseClipboard
CopyAcceleratorTableA
GetLastInputInfo
CreateWindowExA
DestroyWindow
ArrangeIconicWindows
WaitForInputIdle
MapVirtualKeyExW
SetWindowTextW
GetMenuItemRect
MapDialogRect
CallNextHookEx
GetClassInfoA
RegisterClassExA
DispatchMessageW
UpdateWindow
DlgDirListA
GetWindowDC
DrawMenuBar
TranslateMessage
GetNextDlgTabItem
OffsetRect
SetWindowLongA
GetMessageExtraInfo
GetDesktopWindow
GetUserObjectInformationA
GetClipboardFormatNameA
DialogBoxParamA
DefMDIChildProcA
MapVirtualKeyExA
FindWindowW
GetMenuStringW
GetNextDlgGroupItem
SendMessageW
CopyRect
ExcludeUpdateRgn
GetUpdateRect
WindowFromDC
GetWindow
MonitorFromWindow
EnumDisplaySettingsA
CopyAcceleratorTableW
SetProcessWindowStation
GetDC
GetSubMenu
GetForegroundWindow
GetMonitorInfoW
GetKeyNameTextA
EmptyClipboard
BroadcastSystemMessage
EndPaint
GrayStringW
CreateMDIWindowW
SetForegroundWindow
IsDialogMessageW
InvertRect
TranslateMDISysAccel
SetCaretPos
GetMenuContextHelpId
GetMonitorInfoA
GetMenuCheckMarkDimensions
TabbedTextOutW
WaitMessage
SetClassLongW
DlgDirSelectExA
ScrollWindow
UnhookWindowsHookEx
InsertMenuItemA
LoadMenuIndirectA
GetDlgItem
LoadMenuW
GetWindowTextLengthW
AdjustWindowRectEx
CheckRadioButton
MapVirtualKeyA
InflateRect
MapWindowPoints
MessageBoxExA
GetClipCursor
GetUserObjectSecurity
GetKeyboardLayoutList
SetCursor
wsprintfW
EnumClipboardFormats
GetClipboardData
SetClassLongA
IsWindowEnabled
DrawStateA
HiliteMenuItem
EnumThreadWindows
DdeConnect
LoadKeyboardLayoutA
VkKeyScanExA
CreateIconIndirect
wsprintfA
SwapMouseButton
LoadAcceleratorsW
SetScrollRange
DrawFocusRect
DdeInitializeA
SetScrollPos
EnableWindow
DdeCreateStringHandleW
LoadBitmapW
SetThreadDesktop
WinHelpA
TileChildWindows
LookupIconIdFromDirectory
FindWindowExW
DdeFreeStringHandle
GetMenuBarInfo
CreateDialogParamA
ShowCaret
GetActiveWindow
ValidateRect
SetCursorPos
CreateDialogIndirectParamW
IsCharAlphaNumericW
CreateMDIWindowA
LoadStringW
IsCharLowerA
ReplyMessage
IsWindowVisible
CharLowerA
DdePostAdvise
DdeGetLastError
GetClientRect
GetParent
GetDoubleClickTime
GetWindowThreadProcessId
SetRect
CharLowerBuffW
PackDDElParam
SendDlgItemMessageW
GetWindowTextLengthA
GetClassInfoExA
DdeQueryStringA
WindowFromPoint
VkKeyScanW
UnregisterHotKey
DrawTextW
MessageBoxA
GetGUIThreadInfo
LockWindowUpdate
GetUserObjectInformationW
SetCaretBlinkTime
AttachThreadInput
GetKeyboardLayoutNameA
SendInput
SetKeyboardState
MenuItemFromPoint
MonitorFromPoint
LoadIconA
KillTimer
AdjustWindowRect
ShowScrollBar
mouse_event
EnumDesktopWindows
BeginDeferWindowPos
MessageBeep
GetDlgItemInt
EndDeferWindowPos
SetActiveWindow
GetClipboardOwner
SendMessageTimeoutW
CharNextW
IsZoomed
IsCharAlphaA
RegisterClassA
EqualRect
GetAsyncKeyState
GetKeyboardState
CharUpperA
OpenWindowStationA
DefFrameProcA
ShowOwnedPopups
CopyIcon
MapVirtualKeyW
DdeFreeDataHandle
DrawTextA
ActivateKeyboardLayout
TabbedTextOutA
SetPropA
SetWindowLongW
SendNotifyMessageW
RegisterClassExW
GetTabbedTextExtentA
ScreenToClient
OpenInputDesktop
DialogBoxIndirectParamW
SetParent
GetClassWord
GetSysColorBrush
PostMessageW
GetCursor
GetWindowContextHelpId
AllowSetForegroundWindow
GetTopWindow
SendNotifyMessageA
InsertMenuA
SetMenuInfo
SetWindowRgn
GetCaretBlinkTime
LookupIconIdFromDirectoryEx
RegisterWindowMessageA
EnumDisplaySettingsW
GetDialogBaseUnits
ShowWindow
SetCapture
NotifyWinEvent
SetDlgItemInt
DdeInitializeW
GetFocus
GetUpdateRgn
IsIconic
RemoveMenu
SendDlgItemMessageA
DrawIcon
LoadImageA
DdeQueryStringW
SetDoubleClickTime
FreeDDElParam
DestroyCursor
ReuseDDElParam
OpenIcon
DestroyAcceleratorTable
FindWindowExA
ExitWindowsEx
UnpackDDElParam
GetWindowRect
CountClipboardFormats
CharToOemBuffA
GrayStringA
InsertMenuW
LockSetForegroundWindow
DdeUnaccessData
EnumWindows
keybd_event
FillRect
DialogBoxIndirectParamA
GetCaretPos
InvalidateRgn
LoadCursorFromFileW
DrawTextExA
DrawEdge
UnhookWinEvent
SetWindowContextHelpId
GetOpenClipboardWindow
GetMessageTime
GetPropA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseColorW
ReplaceTextW
FindTextA
ChooseColorA
ReplaceTextA
ChooseFontW
PageSetupDlgA
FindTextW
GetFileTitleW
GetSaveFileNameW
PrintDlgW
GetOpenFileNameW
PrintDlgA
PageSetupDlgW
GetFileTitleA
PrintDlgExA
ChooseFontA
CommDlgExtendedError
comctl32
CreateUpDownControl
ImageList_Merge
ImageList_BeginDrag
ImageList_Remove
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_Write
PropertySheetA
PropertySheetW
CreatePropertySheetPageA
DestroyPropertySheetPage
ImageList_SetDragCursorImage
ImageList_GetDragImage
MakeDragList
ImageList_EndDrag
FlatSB_EnableScrollBar
ImageList_AddIcon
ImageList_DragMove
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_SetFlags
ImageList_GetBkColor
ImageList_Draw
ImageList_Create
ImageList_Replace
ImageList_DragLeave
ImageList_LoadImageA
DrawStatusTextW
ImageList_DrawEx
FlatSB_ShowScrollBar
ImageList_Destroy
ImageList_SetBkColor
ord17
ImageList_Copy
InitializeFlatSB
ImageList_Add
ImageList_GetImageCount
ImageList_LoadImageW
CreateStatusWindowW
ImageList_SetIconSize
ImageList_AddMasked
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_Read
ImageList_GetIcon
ImageList_SetImageCount
ImageList_LoadImage
ImageList_SetOverlayImage
CreateToolbarEx
ImageList_GetIconSize
CreatePropertySheetPageW
kernel32
SearchPathA
GetSystemDefaultLCID
FileTimeToDosDateTime
VirtualLock
LoadLibraryExW
GetModuleHandleW
SetCurrentDirectoryW
CreateFiber
ResumeThread
GetCommConfig
CreateThread
GetVolumeInformationA
TerminateProcess
GetThreadTimes
FindResourceExA
SetLocalTime
DeleteFileW
GetComputerNameExW
GetProcessAffinityMask
WinExec
GetTimeZoneInformation
CreatePipe
SetVolumeLabelW
GetFileTime
EnumResourceLanguagesW
GetProfileStringW
TlsFree
DeviceIoControl
EnumCalendarInfoExW
FlushFileBuffers
DebugBreak
GlobalMemoryStatusEx
GetStringTypeExA
GetProfileStringA
FileTimeToSystemTime
CompareStringA
CreateMutexA
GetConsoleScreenBufferInfo
GetFileAttributesExA
EnumResourceTypesA
GetDateFormatA
EnumSystemLocalesA
GetProcessTimes
FreeResource
FlushInstructionCache
BackupSeek
InitializeCriticalSectionAndSpinCount
CreateNamedPipeA
EnumLanguageGroupLocalesW
Process32FirstW
GetPrivateProfileStructA
_lwrite
GlobalGetAtomNameW
_hwrite
GetUserDefaultLangID
SizeofResource
EnumUILanguagesW
FreeEnvironmentStringsW
FindFirstFileW
GetSystemTimeAsFileTime
GetTempPathA
SetThreadPriority
DefineDosDeviceA
LockResource
TlsGetValue
GlobalFindAtomW
GetLocaleInfoA
_lread
CopyFileExA
QueryPerformanceCounter
WaitForMultipleObjectsEx
VirtualUnlock
Heap32Next
SetComputerNameW
GetThreadLocale
GetLogicalDriveStringsA
FatalAppExitA
DeleteFileA
SetCommMask
Module32Next
GetPriorityClass
FindFirstChangeNotificationW
AllocConsole
GetEnvironmentStrings
ClearCommError
OpenSemaphoreW
GetCurrentDirectoryW
VirtualProtectEx
CreateFileW
ResetEvent
FindNextVolumeW
IsBadStringPtrW
ConvertDefaultLocale
GetStringTypeW
MoveFileExA
FindVolumeClose
lstrcpyW
GetACP
ReadConsoleInputA
FindFirstFileExW
RtlUnwind
GetSystemTime
ExpandEnvironmentStringsA
lstrcpyA
SetCommConfig
GetFileAttributesExW
_hread
SetConsoleCtrlHandler
CreateSemaphoreW
Sleep
GetModuleFileNameA
GetMailslotInfo
CreateSemaphoreA
EndUpdateResourceW
SetProcessAffinityMask
ExitProcess
CreateIoCompletionPort
SetSystemTime
EnumResourceLanguagesA
VirtualFree
WriteConsoleA
SetUnhandledExceptionFilter
SetPriorityClass
QueryPerformanceFrequency
BackupWrite
CreateProcessA
GetCompressedFileSizeW
GetLogicalDriveStringsW
GetLongPathNameW
lstrcmpiA
MapViewOfFileEx
DeleteCriticalSection
IsValidLocale
WriteProcessMemory
SetEnvironmentVariableA
OpenFileMappingA
Toolhelp32ReadProcessMemory
GetVolumePathNameW
IsDebuggerPresent
Thread32Next
GlobalHandle
FindCloseChangeNotification
GetLastError
GetStdHandle
IsBadReadPtr
GetCommState
WaitCommEvent
FreeEnvironmentStringsA
OutputDebugStringW
UnmapViewOfFile
GetFullPathNameW
QueueUserWorkItem
ConnectNamedPipe
HeapCompact
GetDiskFreeSpaceExA
GetQueuedCompletionStatus
SleepEx
CreateWaitableTimerW
QueueUserAPC
GetVersion
GetFileAttributesW
PulseEvent
HeapSize
EnumCalendarInfoW
SetCurrentDirectoryA
SetFileTime
GetStartupInfoA
CreateFileMappingA
Module32NextW
GlobalFindAtomA
UnlockFileEx
WriteConsoleW
GlobalFlags
LocalHandle
GlobalDeleteAtom
ContinueDebugEvent
CommConfigDialogW
CloseHandle
GetHandleInformation
FindResourceA
SearchPathW
SwitchToThread
LocalFree
GetPrivateProfileIntW
ConvertThreadToFiber
ExpandEnvironmentStringsW
GetComputerNameW
ReleaseMutex
GetEnvironmentStringsW
IsDBCSLeadByteEx
SetProcessShutdownParameters
HeapDestroy
lstrcpynA
SystemTimeToTzSpecificLocalTime
LeaveCriticalSection
FormatMessageA
FormatMessageW
OpenProcess
SetThreadExecutionState
GetConsoleOutputCP
CreateProcessW
GetCommandLineW
DosDateTimeToFileTime
GetWindowsDirectoryA
BackupRead
TlsSetValue
WriteConsoleOutputW
OpenEventA
GetSystemDefaultLangID
VerifyVersionInfoA
SetWaitableTimer
FreeLibrary
SetProcessPriorityBoost
IsBadStringPtrA
IsBadCodePtr
WritePrivateProfileStringW
CreateMutexW
Heap32ListFirst
TransmitCommChar
GetProfileIntW
lstrlenA
LocalReAlloc
BeginUpdateResourceA
OpenMutexA
LocalSize
GetCommProperties
GetCommTimeouts
LocalUnlock
EnumCalendarInfoA
PostQueuedCompletionStatus
SetFilePointerEx
SetFilePointer
SetFileAttributesW
GetProfileSectionA
SetTapePosition
VirtualAllocEx
GetCurrentThread
lstrcmpiW
ProcessIdToSessionId
IsBadWritePtr
DeleteVolumeMountPointW
GlobalAddAtomW
MultiByteToWideChar
GetStringTypeExW
GetUserDefaultUILanguage
SetNamedPipeHandleState
CreateDirectoryW
LocalFileTimeToFileTime
TlsAlloc
VirtualProtect
RemoveDirectoryW
RtlFillMemory
OpenEventW
InterlockedExchangeAdd
CancelIo
SetFileAttributesA
GetPrivateProfileSectionA
CreateMailslotA
FindNextChangeNotification
GetExitCodeProcess
WaitForDebugEvent
GetCommModemStatus
GetCPInfoExA
EscapeCommFunction
CreateFileA
GetStringTypeA
GetTimeFormatW
GlobalFree
WaitForSingleObjectEx
LockFile
ExitThread
GetCommMask
Heap32ListNext
GetOEMCP
EnumResourceNamesW
PeekNamedPipe
GetDiskFreeSpaceW
WaitForMultipleObjects
LCMapStringA
DeleteFiber
GetVolumePathNameA
BeginUpdateResourceW
FindFirstVolumeW
HeapValidate
GetConsoleCP
QueryDosDeviceW
DuplicateHandle
CopyFileW
DisableThreadLibraryCalls
lstrcpynW
DebugActiveProcess
WideCharToMultiByte
GlobalMemoryStatus
GetCurrentThreadId
SetConsoleMode
GetDateFormatW
WritePrivateProfileSectionW
InterlockedCompareExchange
SetVolumeLabelA
WaitNamedPipeA
EnterCriticalSection
GetExitCodeThread
GetCPInfo
WritePrivateProfileStructW
LCMapStringW
lstrcmpW
CreateNamedPipeW
GetTapeParameters
IsProcessorFeaturePresent
Module32FirstW
EndUpdateResourceA
_lopen
ReadDirectoryChangesW
FreeConsole
_lclose
UpdateResourceW
lstrcmpA
GetLongPathNameA
GetEnvironmentVariableW
InterlockedDecrement
GetFileInformationByHandle
GetProcessHeap
GetTempPathW
FindNextFileA
GetAtomNameA
WaitForSingleObject
ClearCommBreak
VirtualFreeEx
InitializeCriticalSection
SetupComm
MulDiv
LoadLibraryExA
InterlockedExchange
CompareStringW
WritePrivateProfileStructA
SetProcessWorkingSetSize
CopyFileExW
Thread32First
GetConsoleMode
SetErrorMode
GlobalUnlock
GetOverlappedResult
GetTimeFormatA
GetModuleFileNameW
GetComputerNameExA
RaiseException
SetTimeZoneInformation
GetFullPathNameA
IsDBCSLeadByte
CreateEventA
SetEnvironmentVariableW
GetVolumeNameForVolumeMountPointW
EnumResourceNamesA
SetEvent
GetLocaleInfoW
LocalCompact
GetNumberFormatW
LoadLibraryA
GetLocalTime
FileTimeToLocalFileTime
EnumSystemLanguageGroupsW
ReadFile
VerifyVersionInfoW
GetLogicalDrives
OpenFileMappingW
GetFileSize
HeapFree
LoadResource
WriteProfileStringW
GetTempFileNameW
SetCommState
Process32First
IsValidCodePage
Heap32First
ReadProcessMemory
VerSetConditionMask
FindClose
MoveFileExW
HeapCreate
ReleaseSemaphore
GetProfileIntA
InterlockedIncrement
GetNumberFormatA
GetThreadPriority
AddAtomW
VerLanguageNameA
BuildCommDCBA
GetDiskFreeSpaceExW
GetStartupInfoW
SetHandleCount
SwitchToFiber
LoadLibraryW
GlobalAddAtomA
GetVersionExW
FindResourceExW
GetSystemPowerStatus
GetTempFileNameA
SetThreadLocale
GetCurrencyFormatA
WaitNamedPipeW
CopyFileA
SetMailslotInfo
WriteFileEx
_lcreat
TryEnterCriticalSection
lstrcatW
FindAtomW
GetDriveTypeA
SuspendThread
LocalLock
PurgeComm
CreateDirectoryExA
GlobalReAlloc
SetConsoleCursorPosition
CreateFileMappingW
Beep
FindResourceW
GetEnvironmentVariableA
GetShortPathNameW
AreFileApisANSI
WriteFile
VirtualAlloc
FindFirstChangeNotificationA
MoveFileW
FlushConsoleInputBuffer
HeapReAlloc
SystemTimeToFileTime
GetSystemDirectoryW
FlushViewOfFile
GetProcessHeaps
GetCommandLineA
SetHandleInformation
GetWindowsDirectoryW
WritePrivateProfileSectionA
SetThreadContext
lstrlenW
GetModuleHandleA
SetThreadAffinityMask
CompareFileTime
GetDriveTypeW
SetEndOfFile
GetProcessWorkingSetSize
GetSystemInfo
GetPrivateProfileStringA
GetProcessVersion
FindNextFileW
WritePrivateProfileStringA
GetCurrentProcess
GetPrivateProfileStringW
GetVersionExA
GetShortPathNameA
CreateDirectoryA
UnlockFile
Module32First
CreateToolhelp32Snapshot
GetSystemTimeAdjustment
GetFileType
GetUserDefaultLCID
Process32Next
OpenFile
GetVolumeNameForVolumeMountPointA
CreateEventW
Process32NextW
LockFileEx
GlobalSize
SetConsoleTitleW
FindFirstFileA
GetPrivateProfileIntA
UpdateResourceA
OpenSemaphoreA
GetCurrentProcessId
TerminateThread
OpenThread
GetTickCount
GetCurrentDirectoryA
SetCommBreak
OutputDebugStringA
lstrcatA
WriteProfileStringA
GlobalAlloc
HeapAlloc
VirtualQuery
CreateWaitableTimerA
GetDiskFreeSpaceA
GetFileAttributesA
GetVolumeInformationW
GlobalLock
SetStdHandle
_llseek
GetProcAddress
DeleteAtom
GetSystemDirectoryA
GetFileSizeEx
RemoveDirectoryA
MoveFileA
GetThreadContext
GetComputerNameA
GlobalGetAtomNameA
GetPrivateProfileSectionNamesA
SetLastError
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 481KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ