Static task
static1
Behavioral task
behavioral1
Sample
0cb7b4d58ebe15fb761ad1b8883cdfd39c9cb4e91719a571982c53ab8d94f9ec.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0cb7b4d58ebe15fb761ad1b8883cdfd39c9cb4e91719a571982c53ab8d94f9ec.exe
Resource
win10v2004-20220812-en
General
-
Target
0cb7b4d58ebe15fb761ad1b8883cdfd39c9cb4e91719a571982c53ab8d94f9ec
-
Size
784KB
-
MD5
81d5a53d4c2da0509761b6eaf0ae3256
-
SHA1
1859bcc822dcf5c7b6efc1231e58f3573490b126
-
SHA256
0cb7b4d58ebe15fb761ad1b8883cdfd39c9cb4e91719a571982c53ab8d94f9ec
-
SHA512
c15807e0a0d9438e3f4f8700f40b7296a5a7e28202e89256c3688de6852f1e5175df6426d039229f275ad51238133d3b142b56640bc8032786951224887247fc
-
SSDEEP
12288:QBlK4mQledNur7OJUHxy+Cy6rwuj+tO+Kz2tugYppsdSAp8m+07V+vosoRuRUK8:QBtJeyuURyuyHEmfcl9+2VDsMuf8
Malware Config
Signatures
Files
-
0cb7b4d58ebe15fb761ad1b8883cdfd39c9cb4e91719a571982c53ab8d94f9ec.exe windows x86
77ffe631fea869ecffbc6f9769d55c88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessW
EscapeCommFunction
GlobalFindAtomA
CancelIo
GetThreadLocale
GetFullPathNameA
UnmapViewOfFile
ClearCommError
SetMailslotInfo
SetProcessWorkingSetSize
OpenEventW
GetThreadTimes
Process32First
InitializeCriticalSection
TlsSetValue
DeleteFileW
GetThreadContext
GetFileInformationByHandle
lstrlenW
GetDriveTypeA
RaiseException
ConvertDefaultLocale
GetProfileSectionA
IsValidLocale
ConnectNamedPipe
DeleteAtom
AddAtomW
SetHandleCount
FindVolumeClose
ClearCommBreak
GetCommModemStatus
lstrcmpA
IsBadWritePtr
EnumLanguageGroupLocalesW
SetEvent
CreateThread
CreateToolhelp32Snapshot
HeapCompact
WritePrivateProfileStringA
OpenEventA
GlobalSize
SetNamedPipeHandleState
EnumCalendarInfoExW
TryEnterCriticalSection
GlobalReAlloc
ExitThread
GetSystemTimeAdjustment
GetQueuedCompletionStatus
IsDBCSLeadByte
DeviceIoControl
CreateFiber
GlobalHandle
IsValidCodePage
CreateFileW
ExpandEnvironmentStringsW
GetVersionExA
MultiByteToWideChar
LoadLibraryExA
FindResourceExW
TlsFree
Thread32First
GetFileAttributesExA
WriteConsoleA
Module32First
GlobalAddAtomW
SizeofResource
CreateProcessA
SetLocalTime
GetCommandLineA
SetFileAttributesA
LocalHandle
VerifyVersionInfoW
GetPrivateProfileSectionNamesA
GetProfileStringA
SetCurrentDirectoryA
GetVolumeInformationA
GetCompressedFileSizeW
GetEnvironmentVariableW
Heap32First
CompareStringA
SetTimeZoneInformation
GlobalGetAtomNameA
GetCurrentDirectoryA
DisconnectNamedPipe
ReadConsoleInputA
SetSystemTime
UnlockFile
GetTempFileNameA
CompareStringW
SetFileAttributesW
SetLastError
WriteProfileStringW
GetSystemInfo
DebugBreak
FlushFileBuffers
OpenFileMappingA
SearchPathA
ProcessIdToSessionId
FindCloseChangeNotification
FindNextChangeNotification
WaitForMultipleObjects
InterlockedDecrement
TlsAlloc
GetCurrentProcessId
LCMapStringA
LCMapStringW
SwitchToFiber
HeapFree
GlobalFree
EnumUILanguagesW
SetEnvironmentVariableW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetLogicalDriveStringsA
HeapDestroy
SetConsoleCtrlHandler
SetCurrentDirectoryW
Beep
WaitNamedPipeA
lstrcatA
GetDateFormatW
IsBadStringPtrA
OutputDebugStringW
GetLastError
GetSystemDefaultLCID
GetVolumeInformationW
OpenSemaphoreA
GlobalAddAtomA
GetPrivateProfileIntA
Heap32ListFirst
GetLocalTime
GlobalUnlock
SetCommConfig
CreateMutexW
lstrcatW
GetModuleHandleW
CreateEventA
CopyFileExW
WaitNamedPipeW
SetVolumeLabelA
GetFileSize
GetComputerNameW
GlobalFlags
VirtualFree
UnlockFileEx
GetSystemDirectoryW
GetProcessWorkingSetSize
WinExec
GetStartupInfoA
_lwrite
FindResourceExA
GetProcessHeaps
TlsGetValue
GetFileSizeEx
ReleaseMutex
CreateWaitableTimerA
LocalFree
FindNextFileW
WriteConsoleOutputW
FindFirstFileA
SetEnvironmentVariableA
Module32FirstW
TerminateThread
Process32FirstW
FindAtomW
QueryDosDeviceW
GetModuleFileNameW
SleepEx
HeapReAlloc
LockFileEx
GetTimeFormatA
GetAtomNameA
GetLongPathNameA
GetBinaryTypeA
_hwrite
LeaveCriticalSection
EnumCalendarInfoA
SetCommTimeouts
BackupWrite
GetPrivateProfileStringA
CompareFileTime
WriteFileEx
VirtualAlloc
GetSystemTimeAsFileTime
GetTapeParameters
GetEnvironmentStringsW
CreateSemaphoreA
WaitCommEvent
GlobalMemoryStatusEx
lstrcpynA
BeginUpdateResourceA
VirtualFreeEx
GetVolumePathNameA
GetDiskFreeSpaceW
SetThreadContext
UnhandledExceptionFilter
GetProfileStringW
DosDateTimeToFileTime
ReadDirectoryChangesW
FatalAppExitA
TerminateProcess
GetEnvironmentStrings
RtlUnwind
CreateWaitableTimerW
SetProcessPriorityBoost
ContinueDebugEvent
SetProcessShutdownParameters
QueryDosDeviceA
BackupRead
EndUpdateResourceW
Heap32Next
TransmitCommChar
CopyFileExA
SetErrorMode
WaitForSingleObjectEx
CreateIoCompletionPort
GetTimeFormatW
LoadLibraryA
IsBadReadPtr
SetCommState
IsProcessorFeaturePresent
FindResourceA
WaitForSingleObject
GetUserDefaultLangID
GetShortPathNameA
EnumSystemLocalesA
GetUserDefaultLCID
GetOEMCP
CopyFileA
lstrcpynW
GetModuleHandleA
GetComputerNameExA
GetSystemWindowsDirectoryA
GetCommProperties
GetStringTypeW
GlobalGetAtomNameW
ExpandEnvironmentStringsA
GetConsoleOutputCP
WritePrivateProfileSectionA
GetFileAttributesExW
UpdateResourceA
GetStartupInfoW
GetVersion
FindNextFileA
GetACP
UpdateResourceW
GetUserDefaultUILanguage
EnumResourceLanguagesA
DisableThreadLibraryCalls
SetTapePosition
HeapSize
BackupSeek
ReleaseSemaphore
DeleteVolumeMountPointW
MoveFileA
QueryPerformanceCounter
GetDiskFreeSpaceA
GetWindowsDirectoryA
VerLanguageNameA
LocalUnlock
GetExitCodeProcess
WriteConsoleW
GetConsoleScreenBufferInfo
OpenMutexW
FormatMessageW
CreateFileA
WritePrivateProfileStructA
SearchPathW
GetFileAttributesA
WaitForMultipleObjectsEx
GetStringTypeA
GetWindowsDirectoryW
CommConfigDialogW
CreateFileMappingA
ReadProcessMemory
OpenFile
GetModuleFileNameA
WideCharToMultiByte
SwitchToThread
FlushInstructionCache
CreateEventW
MoveFileExW
ResetEvent
SetConsoleCursorPosition
_lclose
DeleteVolumeMountPointA
SetThreadExecutionState
RemoveDirectoryA
OutputDebugStringA
GetNumberFormatW
GetProcessTimes
SuspendThread
SetConsoleMode
GetTickCount
FreeEnvironmentStringsA
FileTimeToDosDateTime
FindResourceW
PurgeComm
OpenThread
GetCurrentThread
GetVersionExW
MoveFileW
AreFileApisANSI
GetDriveTypeW
Module32NextW
ResumeThread
GetShortPathNameW
VirtualLock
MulDiv
GetNumberFormatA
LoadLibraryW
GetFileAttributesW
GetVolumePathNameW
GetStringTypeExW
Module32Next
GlobalMemoryStatus
LockFile
GetComputerNameA
GetVolumeNameForVolumeMountPointA
SystemTimeToTzSpecificLocalTime
IsBadCodePtr
CreateDirectoryW
FindFirstChangeNotificationA
GlobalLock
GetCommConfig
SetFilePointer
InterlockedIncrement
RtlFillMemory
GetSystemTime
SetUnhandledExceptionFilter
LockResource
VirtualProtectEx
Process32Next
GlobalDeleteAtom
BeginUpdateResourceW
LocalAlloc
MapViewOfFile
GetFullPathNameW
FindFirstVolumeW
OpenFileMappingW
InterlockedCompareExchange
GetProcessHeap
QueryPerformanceFrequency
EnumResourceTypesA
SetHandleInformation
PulseEvent
SetWaitableTimer
EnterCriticalSection
MapViewOfFileEx
LoadLibraryExW
InterlockedExchangeAdd
CreateDirectoryExA
lstrcmpiW
OpenProcess
GetTempPathW
DeleteCriticalSection
OpenMutexA
GetSystemDirectoryA
GetHandleInformation
InitializeCriticalSectionAndSpinCount
GetFileType
FindClose
FreeEnvironmentStringsW
GetProfileIntW
lstrlenA
GetProcessVersion
FlushViewOfFile
SetEndOfFile
GetCPInfo
InterlockedExchange
GetStdHandle
CloseHandle
FreeConsole
GetSystemDefaultLangID
QueueUserWorkItem
CopyFileW
lstrcmpiA
Toolhelp32ReadProcessMemory
_lopen
DuplicateHandle
VirtualProtect
lstrcpyW
WritePrivateProfileSectionW
FlushConsoleInputBuffer
SetComputerNameW
SetCommMask
_lcreat
CreateMailslotA
PostQueuedCompletionStatus
GetCurrentDirectoryW
SetConsoleTitleW
SetupComm
OpenSemaphoreW
EnumCalendarInfoW
GetOverlappedResult
FindFirstFileExW
GetComputerNameExW
VerifyVersionInfoA
GetConsoleCP
SetProcessAffinityMask
GetCommMask
DeleteFiber
QueueUserAPC
SetFilePointerEx
GetExitCodeThread
GetLogicalDrives
LocalCompact
GetTempFileNameW
GetPrivateProfileIntW
EndUpdateResourceA
PeekNamedPipe
DefineDosDeviceA
FreeResource
GetCommState
IsDebuggerPresent
GetCurrentThreadId
AllocConsole
ExitProcess
GlobalAlloc
LocalFileTimeToFileTime
ConvertThreadToFiber
GetLocaleInfoA
CreateNamedPipeW
GetDiskFreeSpaceExA
_llseek
CreatePipe
WriteProcessMemory
WaitForDebugEvent
EnumResourceLanguagesW
VirtualUnlock
HeapAlloc
FindFirstFileW
HeapCreate
FileTimeToSystemTime
GetCurrencyFormatA
_hread
Process32NextW
GetThreadPriority
lstrcmpW
DebugActiveProcess
VirtualAllocEx
CreateSemaphoreW
lstrcpyA
SetVolumeMountPointA
SetCommBreak
CreateNamedPipeA
SetVolumeLabelW
GetSystemPowerStatus
SetStdHandle
GetVolumeNameForVolumeMountPointW
VirtualQuery
WriteProfileStringA
GetTempPathA
FreeLibrary
GetTimeZoneInformation
GetPrivateProfileSectionA
RemoveDirectoryW
GetLogicalDriveStringsW
FileTimeToLocalFileTime
HeapValidate
SetFileTime
GetCommTimeouts
SetPriorityClass
GlobalFindAtomW
LocalReAlloc
GetPriorityClass
GetCurrentProcess
CreateDirectoryA
GetProcAddress
Thread32Next
VerSetConditionMask
GetConsoleMode
WriteFile
GetLongPathNameW
DeleteFileA
Heap32ListNext
FindFirstChangeNotificationW
GetMailslotInfo
MoveFileExA
ReadFile
CreateMutexA
LoadResource
SetThreadLocale
EnumResourceNamesW
VirtualQueryEx
GetCommandLineW
IsBadStringPtrW
GetLocaleInfoW
GetStringTypeExA
CreateFileMappingW
GetDiskFreeSpaceExW
GetProfileIntA
SetThreadAffinityMask
FindNextVolumeW
BuildCommDCBA
GetProcessAffinityMask
EnumSystemLanguageGroupsW
GetEnvironmentVariableA
EnumResourceNamesA
FormatMessageA
advapi32
RegSetKeySecurity
GetFileSecurityA
RegQueryValueExW
CryptGenKey
InitiateSystemShutdownExW
SetFileSecurityA
RegisterEventSourceA
SetSecurityDescriptorOwner
RegOpenKeyA
StartServiceCtrlDispatcherW
CryptGetUserKey
GetKernelObjectSecurity
CloseServiceHandle
RegQueryValueW
BuildTrusteeWithNameW
CryptImportKey
SetNamedSecurityInfoA
RegRestoreKeyA
EqualSid
ChangeServiceConfig2A
ControlService
RegOpenCurrentUser
LogonUserW
QueryServiceConfigA
BuildTrusteeWithSidW
GetSecurityDescriptorSacl
RegEnumValueA
DuplicateTokenEx
LookupPrivilegeNameA
EqualPrefixSid
LookupAccountNameW
RegisterEventSourceW
StartServiceW
ConvertStringSecurityDescriptorToSecurityDescriptorW
LsaQueryInformationPolicy
LookupAccountSidW
InitializeSid
RegQueryInfoKeyW
RegUnLoadKeyA
RegLoadKeyA
MapGenericMask
GetSecurityInfo
ReportEventW
CreateProcessAsUserA
CryptVerifySignatureA
WriteEncryptedFileRaw
GetNamedSecurityInfoW
LogonUserA
LookupAccountNameA
OpenServiceA
RegisterServiceCtrlHandlerExA
RegConnectRegistryW
RegCreateKeyExA
RegFlushKey
EncryptFileW
OpenSCManagerW
SetThreadToken
RegOpenKeyExW
GetAclInformation
AddAce
GetSecurityDescriptorLength
GetEffectiveRightsFromAclA
RegDisablePredefinedCache
ImpersonateLoggedOnUser
RegEnumKeyW
LsaOpenPolicy
QueryServiceStatus
CryptAcquireContextA
RegOpenKeyW
ConvertStringSidToSidA
IsValidSid
ImpersonateSelf
LsaRemoveAccountRights
ChangeServiceConfigA
SetSecurityDescriptorControl
RegNotifyChangeKeyValue
LookupPrivilegeValueA
MakeSelfRelativeSD
OpenServiceW
LookupPrivilegeDisplayNameA
CryptExportKey
RegSetValueExA
EnumDependentServicesW
RegEnumKeyA
RegRestoreKeyW
MakeAbsoluteSD
CryptDecrypt
InitiateSystemShutdownA
GetSecurityDescriptorDacl
CryptGenRandom
RegDeleteValueA
CryptDeriveKey
CreateServiceW
OpenThreadToken
ChangeServiceConfig2W
RegEnumKeyExW
InitializeSecurityDescriptor
RegSetValueExW
CreateProcessAsUserW
FreeSid
ConvertSidToStringSidW
CryptSetProvParam
GetSecurityDescriptorGroup
StartServiceCtrlDispatcherA
RegQueryInfoKeyA
SetTokenInformation
LsaNtStatusToWinError
ConvertSecurityDescriptorToStringSecurityDescriptorW
CryptGetKeyParam
GetNamedSecurityInfoA
DeleteAce
CryptAcquireContextW
RegisterServiceCtrlHandlerW
GetSidIdentifierAuthority
OpenSCManagerA
IsValidSecurityDescriptor
QueryServiceStatusEx
GetFileSecurityW
RegCreateKeyW
IsValidAcl
SetEntriesInAclW
AllocateAndInitializeSid
ConvertStringSidToSidW
GetTokenInformation
UnlockServiceDatabase
ChangeServiceConfigW
CloseEncryptedFileRaw
SetFileSecurityW
RegSetValueW
RegQueryValueExA
OpenProcessToken
CryptDestroyKey
SetSecurityDescriptorDacl
GetUserNameW
RegDeleteKeyA
DeleteService
AdjustTokenPrivileges
RegLoadKeyW
LsaFreeMemory
DeregisterEventSource
ImpersonateNamedPipeClient
GetAce
RegDeleteValueW
RegisterServiceCtrlHandlerA
RegDeleteKeyW
GetLengthSid
GetSidSubAuthorityCount
LsaClose
SetServiceStatus
RegSaveKeyW
GetExplicitEntriesFromAclW
CryptEnumProvidersW
SetSecurityInfo
EnumServicesStatusA
LockServiceDatabase
ReportEventA
AddAccessAllowedAce
RegSaveKeyA
GetSidLengthRequired
DuplicateToken
CopySid
LookupPrivilegeValueW
CryptDestroyHash
RegEnumKeyExA
RegConnectRegistryA
RegOpenKeyExA
CryptEncrypt
GetSecurityDescriptorControl
CreateWellKnownSid
RevertToSelf
RegUnLoadKeyW
BuildExplicitAccessWithNameW
AccessCheck
SetSecurityDescriptorGroup
StartServiceA
SetEntriesInAclA
RegCreateKeyExW
CheckTokenMembership
SetSecurityDescriptorSacl
CryptReleaseContext
ReadEncryptedFileRaw
RegGetKeySecurity
LsaLookupSids
LsaAddAccountRights
RegQueryValueA
SetServiceObjectSecurity
LsaLookupNames
GetUserNameA
CreateServiceA
RegCreateKeyA
CryptCreateHash
GetSecurityDescriptorOwner
LookupAccountSidA
GetSidSubAuthority
RegCloseKey
InitializeAcl
QueryServiceConfigW
CryptHashData
RegSetValueA
SetNamedSecurityInfoW
QueryServiceLockStatusW
RegEnumValueW
OpenEncryptedFileRawW
CryptGetHashParam
comctl32
PropertySheetW
ImageList_Read
ImageList_Draw
ImageList_DragShowNolock
ImageList_DrawIndirect
PropertySheetA
ImageList_SetImageCount
ImageList_GetIconSize
_TrackMouseEvent
ImageList_AddMasked
ImageList_LoadImageA
ImageList_Replace
DrawStatusTextW
CreateUpDownControl
ImageList_Duplicate
ImageList_DragMove
CreatePropertySheetPageW
MakeDragList
CreateToolbarEx
ImageList_DragEnter
DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_GetIcon
FlatSB_ShowScrollBar
ImageList_GetDragImage
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_BeginDrag
ord17
CreatePropertySheetPageA
ImageList_DragLeave
ImageList_AddIcon
ImageList_LoadImage
ImageList_EndDrag
InitCommonControlsEx
ImageList_Copy
ImageList_Merge
ImageList_Create
ImageList_Destroy
ImageList_LoadImageW
ImageList_GetBkColor
InitializeFlatSB
ImageList_GetImageCount
ImageList_Add
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_Remove
ImageList_ReplaceIcon
CreateStatusWindowW
ImageList_Write
ImageList_SetDragCursorImage
FlatSB_EnableScrollBar
ImageList_SetFlags
ole32
OleRun
CoSuspendClassObjects
StgCreateDocfile
CoCopyProxy
OleSave
ReadFmtUserTypeStg
CLSIDFromProgID
OleRegGetUserType
CoRevertToSelf
CoLoadLibrary
CoCreateGuid
CoImpersonateClient
OleDestroyMenuDescriptor
ReadClassStg
StgCreateStorageEx
OleCreate
CreateBindCtx
PropVariantClear
GetClassFile
CoGetInterfaceAndReleaseStream
CreateILockBytesOnHGlobal
CoCreateInstanceEx
CoUninitialize
OleRegGetMiscStatus
OleGetClipboard
StgIsStorageFile
ReleaseStgMedium
GetRunningObjectTable
CreateDataAdviseHolder
CoGetClassObject
WriteFmtUserTypeStg
FreePropVariantArray
OleRegEnumVerbs
CreateItemMoniker
CoQueryProxyBlanket
StgOpenStorageOnILockBytes
CoDisconnectObject
OleDraw
CoLockObjectExternal
StgCreateDocfileOnILockBytes
GetHGlobalFromILockBytes
OleLoadFromStream
CoMarshalInterThreadInterfaceInStream
OleCreateMenuDescriptor
OleCreateFromData
CoRegisterMallocSpy
CoRevokeClassObject
CoCreateInstance
OleLoad
IsAccelerator
CoInitialize
CreateClassMoniker
OleGetIconOfClass
SetConvertStg
ProgIDFromCLSID
OleSetContainedObject
OleCreateLinkFromData
StringFromGUID2
CreateGenericComposite
OleLockRunning
OleQueryLinkFromData
OleFlushClipboard
WriteClassStg
CoRevokeMallocSpy
MkParseDisplayName
CreateOleAdviseHolder
IIDFromString
CreateStreamOnHGlobal
CoReleaseMarshalData
OleUninitialize
CoInitializeEx
OleIsRunning
CoGetObject
CoRegisterMessageFilter
GetHGlobalFromStream
OleSaveToStream
StringFromIID
CoTaskMemFree
OleDuplicateData
StringFromCLSID
OleSetClipboard
DoDragDrop
CoGetMalloc
OleInitialize
ReadClassStm
StgIsStorageILockBytes
CoSetProxyBlanket
OleCreateFromFile
CoFileTimeNow
OleIsCurrentClipboard
OleCreateLinkToFile
CreateFileMoniker
CoResumeClassObjects
CoTaskMemRealloc
CoTreatAsClass
CoMarshalInterface
OleCreateStaticFromData
RegisterDragDrop
OleSetMenuDescriptor
CoInitializeSecurity
RevokeDragDrop
CoRegisterClassObject
CoTaskMemAlloc
CoFreeUnusedLibraries
BindMoniker
OleQueryCreateFromData
StgOpenStorage
CLSIDFromString
WriteClassStm
OleTranslateAccelerator
CoUnmarshalInterface
oleaut32
LoadTypeLi
shell32
ExtractIconA
ShellExecuteExW
Shell_NotifyIconA
ShellExecuteExA
SHGetFileInfoA
DragQueryFileA
DragQueryPoint
SHGetSpecialFolderLocation
DragAcceptFiles
SHGetPathFromIDListW
ord155
SHGetMalloc
SHGetDesktopFolder
SHFreeNameMappings
SHCreateDirectoryExA
SHGetFolderPathW
SHBrowseForFolderW
Shell_NotifyIconW
ExtractIconW
SHAppBarMessage
ShellExecuteA
DoEnvironmentSubstW
FindExecutableA
ExtractIconExW
SHGetSpecialFolderPathA
SHGetPathFromIDListA
SHEmptyRecycleBinA
SHGetDataFromIDListA
SHGetDataFromIDListW
ExtractIconExA
SHBindToParent
CommandLineToArgvW
ShellExecuteW
SHAddToRecentDocs
SHFileOperationW
SHBrowseForFolderA
DuplicateIcon
SHGetSpecialFolderPathW
DragFinish
SHGetInstanceExplorer
SHFileOperationA
SHChangeNotify
SHCreateDirectoryExW
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathA
FindExecutableW
DragQueryFileW
user32
VkKeyScanW
ValidateRect
wsprintfW
CreateIconFromResource
OpenInputDesktop
GetDlgItem
SetScrollRange
GetWindowDC
LoadStringW
LoadStringA
GetClassLongW
mouse_event
CreateAcceleratorTableW
CloseClipboard
SendMessageA
IsDialogMessageW
CharNextExA
SetMenu
GetSysColorBrush
GetWindowRgn
DlgDirListComboBoxW
ToUnicodeEx
GetUserObjectSecurity
SetCapture
GetTabbedTextExtentA
GetClassLongA
GetWindowWord
ClientToScreen
CreateWindowExW
GetScrollInfo
BroadcastSystemMessage
CreatePopupMenu
UpdateWindow
GetKeyboardLayoutNameA
AppendMenuW
GetQueueStatus
EnableWindow
DestroyIcon
SetRectEmpty
CloseDesktop
DrawMenuBar
SetParent
TrackMouseEvent
ToAscii
CheckMenuRadioItem
DefDlgProcA
CharUpperW
RemovePropA
InsertMenuItemA
MapVirtualKeyA
ShowScrollBar
CharPrevA
PostMessageW
LoadCursorW
SetFocus
SetWindowTextA
BeginDeferWindowPos
GetMessageExtraInfo
SetActiveWindow
GetScrollBarInfo
CharToOemBuffA
DdeCreateStringHandleA
LoadMenuIndirectW
GetAsyncKeyState
LoadIconA
GetPropW
GetWindowThreadProcessId
SetScrollPos
DrawTextW
LookupIconIdFromDirectory
MapVirtualKeyExA
CharUpperBuffA
CheckDlgButton
SystemParametersInfoA
GetWindowTextLengthA
TranslateAcceleratorW
IsDialogMessage
IsCharAlphaNumericA
CreateAcceleratorTableA
OffsetRect
GetMessagePos
keybd_event
SetClassLongA
IsDlgButtonChecked
GetLastActivePopup
PackDDElParam
CharLowerW
DdeDisconnect
GetMonitorInfoW
DlgDirSelectExA
UnpackDDElParam
WinHelpW
FindWindowW
CharLowerA
FreeDDElParam
ShowOwnedPopups
ReplyMessage
GetComboBoxInfo
TrackPopupMenu
LoadCursorFromFileA
UnregisterClassA
LoadCursorA
NotifyWinEvent
RegisterClipboardFormatW
EndDeferWindowPos
SetScrollInfo
DestroyAcceleratorTable
MapWindowPoints
ReuseDDElParam
GetKeyNameTextA
DeferWindowPos
ClipCursor
WaitForInputIdle
IsRectEmpty
LockSetForegroundWindow
SetWindowLongW
GetAncestor
ReleaseCapture
SetMenuDefaultItem
DdeAccessData
GetWindowPlacement
TileChildWindows
GetClassInfoExA
SetClassLongW
GetClipboardFormatNameA
OpenIcon
DrawEdge
HideCaret
GetMenuContextHelpId
GetMenuItemInfoW
GetKeyNameTextW
EnumDisplaySettingsW
DdeQueryStringA
wsprintfA
IsIconic
FillRect
GetMenuItemRect
CreateDialogIndirectParamW
LoadImageA
RegisterClassExW
MonitorFromWindow
ArrangeIconicWindows
GetDoubleClickTime
DragDetect
DrawIconEx
DestroyMenu
LoadMenuA
InSendMessage
EnumChildWindows
EnableMenuItem
CreateDialogParamW
EnumClipboardFormats
GetSystemMetrics
SetThreadDesktop
SwitchDesktop
GetDesktopWindow
ActivateKeyboardLayout
IsChild
PostThreadMessageA
IsCharAlphaA
GetNextDlgGroupItem
FlashWindowEx
GetCursorPos
SetMenuItemBitmaps
GetWindowTextW
InvalidateRgn
GetMenuState
GetFocus
DdeInitializeA
WaitMessage
DrawFocusRect
GetClassInfoW
MsgWaitForMultipleObjects
CharNextA
WindowFromDC
DdeCreateStringHandleW
DdePostAdvise
MoveWindow
SendNotifyMessageW
FindWindowExW
OpenWindowStationA
DefWindowProcA
GrayStringA
OpenWindowStationW
GetDialogBaseUnits
GetScrollRange
GetMenuInfo
GetMenu
GetMessageTime
TabbedTextOutW
KillTimer
SetWindowLongA
DdeUninitialize
ChildWindowFromPoint
FrameRect
IsDialogMessageA
MapDialogRect
CharLowerBuffW
SetDlgItemTextW
PeekMessageA
CreateDesktopW
GetUserObjectInformationW
GetClassInfoA
AppendMenuA
CreateMenu
UnregisterDeviceNotification
InflateRect
SwapMouseButton
ScrollWindow
CountClipboardFormats
CopyIcon
GetInputState
UnhookWindowsHookEx
SetLayeredWindowAttributes
AllowSetForegroundWindow
DdeNameService
SetCaretBlinkTime
GetActiveWindow
RegisterHotKey
FindWindowExA
CallWindowProcW
LoadKeyboardLayoutA
LoadMenuW
DeleteMenu
IsClipboardFormatAvailable
GetUpdateRgn
OpenDesktopA
CreateIconFromResourceEx
TranslateMessage
UnregisterClassW
GetProcessWindowStation
SendInput
LookupIconIdFromDirectoryEx
BeginPaint
SetMessageExtraInfo
CharLowerBuffA
IsWindow
DefMDIChildProcW
DlgDirListA
SendMessageW
ChangeDisplaySettingsA
GetWindowRect
DdeFreeStringHandle
LoadImageW
EndDialog
FindWindowA
CharToOemA
SetWindowPlacement
BringWindowToTop
LoadIconW
UnhookWinEvent
SetPropW
DefMDIChildProcA
GetMenuBarInfo
LoadMenuIndirectA
DestroyCursor
GetCursorInfo
AdjustWindowRectEx
MapVirtualKeyExW
SetWindowsHookExA
OpenClipboard
RegisterClassExA
GetSysColor
GetKeyboardState
CheckRadioButton
ModifyMenuA
GetClipboardData
VkKeyScanExA
CloseWindowStation
SetProcessWindowStation
IsWindowUnicode
GetCursor
SetCursorPos
GetPropA
ScrollDC
PostQuitMessage
DdeQueryStringW
InsertMenuA
RegisterClassA
CallNextHookEx
RegisterWindowMessageW
SetDoubleClickTime
DdeCreateDataHandle
IsCharAlphaNumericW
GetUpdateRect
EnumDisplayMonitors
GetForegroundWindow
DispatchMessageA
DefFrameProcW
DrawFrameControl
UnionRect
FlashWindow
PtInRect
WindowFromPoint
TranslateMDISysAccel
DlgDirSelectComboBoxExA
SetWindowsHookExW
GetClassNameW
GetClassNameA
GetMessageA
MessageBoxIndirectA
EqualRect
PeekMessageW
GetDlgItemInt
GetCaretPos
SetRect
LoadBitmapA
IsWindowVisible
GetKeyboardLayout
CreateMDIWindowW
GetMenuCheckMarkDimensions
wvsprintfA
DrawAnimatedRects
GetSubMenu
DrawTextExA
GetDC
SetTimer
LockWindowUpdate
GetMessageW
MessageBoxA
GetDlgItemTextW
SetPropA
SendMessageTimeoutA
EnumThreadWindows
RemovePropW
CreateWindowExA
DrawCaption
ToAsciiEx
LoadBitmapW
PostThreadMessageW
GetCapture
DdeClientTransaction
GetClipboardViewer
SendDlgItemMessageW
DdeConnect
EndPaint
GetWindowInfo
GetClipCursor
SetMenuItemInfoW
wvsprintfW
CharNextW
SetKeyboardState
ShowCaret
CreateDialogIndirectParamA
UnregisterHotKey
DialogBoxParamW
OemToCharA
CharUpperBuffW
GetSystemMenu
MessageBeep
AdjustWindowRect
HiliteMenuItem
ChildWindowFromPointEx
GetKeyState
CallWindowProcA
IntersectRect
DlgDirListComboBoxA
EnumWindows
ValidateRgn
CreateIconIndirect
DispatchMessageW
ReleaseDC
SetCursor
IsZoomed
SetMenuContextHelpId
GetMenuItemID
GetNextDlgTabItem
EnableScrollBar
CreateCursor
SetWindowPos
IsWindowEnabled
OpenDesktopW
DrawTextExW
InvertRect
DrawIcon
CreateMDIWindowA
DdeGetData
GetOpenClipboardWindow
GetDlgCtrlID
ScreenToClient
RegisterClassW
ModifyMenuW
SetClipboardViewer
SetWindowRgn
SendNotifyMessageA
ExitWindowsEx
MapVirtualKeyW
EnumDisplaySettingsA
GetWindowLongW
MonitorFromRect
DialogBoxParamA
DdeInitializeW
SetDlgItemInt
GetWindowTextA
AnimateWindow
MsgWaitForMultipleObjectsEx
PostMessageA
GetWindow
SendMessageTimeoutW
DestroyCaret
GetWindowContextHelpId
ShowWindowAsync
SetWindowContextHelpId
SetCaretPos
DestroyWindow
CheckMenuItem
GetClipboardOwner
CopyAcceleratorTableW
OemToCharBuffA
DrawTextA
GetScrollPos
RegisterWindowMessageA
MessageBoxExA
CreateDialogParamA
IsCharLowerA
GetCaretBlinkTime
TabbedTextOutA
GetLastInputInfo
SystemParametersInfoW
MessageBoxW
GetMenuItemCount
GetDlgItemTextA
EnumDesktopWindows
DdeFreeDataHandle
TranslateAcceleratorA
SetMenuItemInfoA
EmptyClipboard
GetWindowLongA
DefWindowProcW
GetKeyboardLayoutList
CreateIcon
ChangeClipboardChain
GetIconInfo
CascadeWindows
DrawStateW
AttachThreadInput
GetTopWindow
MenuItemFromPoint
SetWindowTextW
DialogBoxIndirectParamA
DrawStateA
MonitorFromPoint
SetClipboardData
GetGUIThreadInfo
GetParent
RedrawWindow
VkKeyScanA
SendDlgItemMessageA
IsCharLowerW
GetMenuStringA
ShowWindow
GetTitleBarInfo
DdeGetLastError
IsMenu
GetThreadDesktop
ToUnicode
GetClassInfoExW
IsCharUpperA
LoadAcceleratorsW
GetMonitorInfoA
SetDlgItemTextA
GetUserObjectInformationA
SetForegroundWindow
ExcludeUpdateRgn
GetClassWord
ScrollWindowEx
RegisterClipboardFormatA
SubtractRect
GrayStringW
CallMsgFilterA
SetMenuInfo
InvalidateRect
CloseWindow
ChangeDisplaySettingsW
CopyAcceleratorTableA
CharUpperA
TrackPopupMenuEx
DialogBoxIndirectParamW
DdeUnaccessData
CopyRect
DefFrameProcA
RemoveMenu
ShowCursor
CopyImage
GetWindowTextLengthW
RegisterDeviceNotificationW
InsertMenuItemW
GetMenuItemInfoA
GetWindowModuleFileNameW
LoadAcceleratorsA
GetDCEx
LoadCursorFromFileW
WinHelpA
GetMenuStringW
CreateCaret
TileWindows
GetClientRect
InsertMenuW
SetUserObjectSecurity
RealChildWindowFromPoint
Sections
.text Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 492KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ