Static task
static1
Behavioral task
behavioral1
Sample
f27f9460837aedc5cc79855ff4e36394b81bf5f54a456b374168273416a552e1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f27f9460837aedc5cc79855ff4e36394b81bf5f54a456b374168273416a552e1.exe
Resource
win10v2004-20221111-en
General
-
Target
f27f9460837aedc5cc79855ff4e36394b81bf5f54a456b374168273416a552e1
-
Size
328KB
-
MD5
4fa5e4e42ed04f5818418ce8d961be40
-
SHA1
a57c17dade196d6f44955a101a1cc4b71cdf657c
-
SHA256
f27f9460837aedc5cc79855ff4e36394b81bf5f54a456b374168273416a552e1
-
SHA512
80bce42f5b353236df6e5e17811ccffdf1b298155b0a4104a77df69e08f2585b3877ab87f5da7a9e0887b67b23764b8a352bca14c9f8c5c62707d8682758ddf5
-
SSDEEP
6144:2rv9DLt9zL4OV5BLvLEmHI75avHvyG2l3V37R41i:2xD/LPVvvLEwHvyG2xVri
Malware Config
Signatures
Files
-
f27f9460837aedc5cc79855ff4e36394b81bf5f54a456b374168273416a552e1.exe windows x86
557f472476585b7b24a6cf37d00462a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PrintDlgW
GetOpenFileNameW
PrintDlgExA
ChooseFontA
CommDlgExtendedError
GetFileTitleW
PageSetupDlgA
FindTextW
ReplaceTextA
GetOpenFileNameA
GetFileTitleA
ReplaceTextW
ChooseColorA
PrintDlgA
ChooseFontW
GetSaveFileNameA
ChooseColorW
FindTextA
PageSetupDlgW
GetSaveFileNameW
advapi32
DeleteService
GetUserNameA
RegisterServiceCtrlHandlerExA
CryptAcquireContextW
SetSecurityInfo
SetEntriesInAclA
BuildTrusteeWithNameW
RegQueryValueA
AdjustTokenPrivileges
GetKernelObjectSecurity
RegSetKeySecurity
RegQueryInfoKeyW
DuplicateTokenEx
EqualSid
GetFileSecurityA
OpenProcessToken
SetTokenInformation
RegSaveKeyA
ReadEncryptedFileRaw
ReportEventA
GetSecurityDescriptorSacl
EqualPrefixSid
RegOpenKeyExW
LogonUserA
BuildTrusteeWithSidW
ImpersonateLoggedOnUser
LsaQueryInformationPolicy
CryptCreateHash
OpenSCManagerA
OpenEncryptedFileRawW
RegNotifyChangeKeyValue
RegEnumKeyA
RegisterEventSourceA
RegCreateKeyExA
CopySid
GetSecurityInfo
InitializeAcl
RegEnumKeyW
RegQueryValueW
CryptGetHashParam
EncryptFileW
StartServiceCtrlDispatcherW
ControlService
GetAclInformation
InitiateSystemShutdownExW
CheckTokenMembership
CryptSetProvParam
RegQueryValueExA
RegRestoreKeyA
LookupPrivilegeNameA
CryptAcquireContextA
FreeSid
RegDeleteValueW
GetSecurityDescriptorGroup
RegConnectRegistryW
LsaLookupSids
RegCreateKeyExW
LsaAddAccountRights
CreateProcessAsUserW
RegSetValueExA
EnumServicesStatusA
BuildExplicitAccessWithNameW
LsaLookupNames
AddAccessAllowedAce
CloseServiceHandle
SetNamedSecurityInfoW
RegDeleteKeyW
OpenThreadToken
RegDisablePredefinedCache
CryptReleaseContext
RegEnumKeyExA
CreateWellKnownSid
WriteEncryptedFileRaw
LogonUserW
IsValidAcl
LookupPrivilegeDisplayNameA
OpenSCManagerW
SetSecurityDescriptorSacl
RegOpenKeyA
ChangeServiceConfig2W
CryptGetUserKey
GetTokenInformation
RevertToSelf
LsaFreeMemory
CloseEncryptedFileRaw
CryptEnumProvidersW
AccessCheck
ImpersonateNamedPipeClient
LsaNtStatusToWinError
RegFlushKey
LockServiceDatabase
GetNamedSecurityInfoA
SetServiceStatus
RegOpenKeyW
ChangeServiceConfigW
DeleteAce
StartServiceA
CryptGetKeyParam
GetFileSecurityW
IsValidSecurityDescriptor
OpenServiceA
CryptVerifySignatureA
RegDeleteKeyA
GetSidSubAuthorityCount
QueryServiceStatus
LookupAccountSidA
GetSecurityDescriptorOwner
QueryServiceConfigW
ChangeServiceConfig2A
RegSaveKeyW
RegUnLoadKeyA
RegLoadKeyA
EnumDependentServicesW
AddAce
OpenServiceW
SetFileSecurityW
LookupAccountNameW
CryptGenRandom
GetExplicitEntriesFromAclW
ConvertStringSidToSidW
CreateServiceA
RegLoadKeyW
RegCreateKeyW
GetSidLengthRequired
RegSetValueA
InitiateSystemShutdownA
MakeAbsoluteSD
RegisterServiceCtrlHandlerW
LookupAccountNameA
LsaRemoveAccountRights
CryptHashData
CryptDeriveKey
GetNamedSecurityInfoW
LookupPrivilegeValueW
RegQueryValueExW
CryptEncrypt
MakeSelfRelativeSD
RegSetValueW
LookupAccountSidW
QueryServiceLockStatusW
RegGetKeySecurity
RegSetValueExW
RegOpenKeyExA
ChangeServiceConfigA
SetFileSecurityA
SetServiceObjectSecurity
GetSecurityDescriptorLength
LsaOpenPolicy
RegRestoreKeyW
StartServiceCtrlDispatcherA
RegEnumValueA
GetSecurityDescriptorDacl
LsaClose
GetSidIdentifierAuthority
RegCreateKeyA
RegEnumValueW
RegisterServiceCtrlHandlerA
SetSecurityDescriptorOwner
GetEffectiveRightsFromAclA
DeregisterEventSource
CryptDecrypt
UnlockServiceDatabase
RegQueryInfoKeyA
InitializeSid
AllocateAndInitializeSid
QueryServiceConfigA
RegUnLoadKeyW
SetSecurityDescriptorControl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSidToSidA
GetAce
RegCloseKey
CryptImportKey
MapGenericMask
ConvertSidToStringSidW
QueryServiceStatusEx
ReportEventW
ImpersonateSelf
RegEnumKeyExW
SetNamedSecurityInfoA
GetSidSubAuthority
CryptDestroyHash
GetSecurityDescriptorControl
DuplicateToken
SetSecurityDescriptorGroup
CryptExportKey
IsValidSid
CryptDestroyKey
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegOpenCurrentUser
GetLengthSid
GetUserNameW
CryptGenKey
CreateProcessAsUserA
RegisterEventSourceW
CreateServiceW
RegDeleteValueA
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetEntriesInAclW
RegConnectRegistryA
StartServiceW
SetThreadToken
LookupPrivilegeValueA
comctl32
FlatSB_EnableScrollBar
DrawStatusTextW
ImageList_SetIconSize
ImageList_SetImageCount
CreateStatusWindowW
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Draw
ImageList_DragMove
ImageList_Merge
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_LoadImageA
ImageList_Destroy
ImageList_Remove
ImageList_DrawEx
ImageList_Read
ImageList_Replace
ImageList_ReplaceIcon
ImageList_Create
CreatePropertySheetPageW
ImageList_Write
_TrackMouseEvent
DestroyPropertySheetPage
ImageList_DragLeave
ImageList_BeginDrag
FlatSB_ShowScrollBar
ImageList_GetDragImage
ImageList_LoadImageW
ImageList_SetOverlayImage
CreateToolbarEx
ImageList_SetDragCursorImage
CreateUpDownControl
PropertySheetA
ImageList_DragShowNolock
ImageList_GetIconSize
ImageList_Copy
PropertySheetW
ImageList_EndDrag
ImageList_GetBkColor
InitializeFlatSB
ImageList_AddIcon
ord17
ImageList_SetBkColor
ImageList_GetImageInfo
ImageList_Duplicate
ImageList_DragEnter
MakeDragList
ImageList_Add
ImageList_GetIcon
ImageList_SetFlags
CreatePropertySheetPageA
ImageList_LoadImage
shlwapi
SHCreateStreamOnFileW
PathIsRelativeA
StrStrIW
UrlIsW
PathRenameExtensionW
StrRetToStrW
UrlCanonicalizeW
PathMakePrettyA
PathSetDlgItemPathW
SHDeleteKeyW
PathQuoteSpacesA
PathRelativePathToW
PathRemoveBlanksW
SHCopyKeyA
PathGetCharTypeW
PathIsUNCServerShareA
PathFindFileNameW
PathBuildRootA
PathIsUNCA
StrTrimA
PathRemoveBackslashW
PathFindFileNameA
StrToInt64ExW
UrlCombineW
PathStripToRootW
PathGetDriveNumberA
StrCmpW
StrStrA
StrStrIA
PathRemoveBackslashA
PathCanonicalizeA
SHDeleteValueA
PathStripPathW
StrFromTimeIntervalA
StrFormatKBSizeW
SHSetValueW
PathStripPathA
PathRemoveExtensionA
PathRemoveExtensionW
PathCreateFromUrlW
PathRenameExtensionA
PathMakeSystemFolderW
PathRelativePathToA
PathCompactPathA
UrlUnescapeW
PathIsRootA
PathCanonicalizeW
StrStrW
PathIsRelativeW
SHDeleteValueW
PathIsDirectoryA
SHAutoComplete
PathAddBackslashA
StrCpyW
PathCombineW
StrCmpIW
PathUnquoteSpacesA
UrlUnescapeA
PathAppendW
PathFindExtensionA
PathIsFileSpecW
StrToIntA
PathIsURLW
PathAppendA
PathIsNetworkPathW
StrTrimW
StrCmpNIW
UrlCreateFromPathW
SHDeleteEmptyKeyA
PathRemoveFileSpecA
PathIsURLA
PathIsUNCServerA
PathFileExistsA
PathMatchSpecW
PathCompactPathW
PathSkipRootA
AssocQueryStringW
StrToIntW
PathIsUNCW
SHDeleteKeyA
PathIsDirectoryW
PathFindExtensionW
PathIsRootW
PathParseIconLocationA
PathRemoveArgsA
StrRetToBufW
PathFileExistsW
PathIsDirectoryEmptyW
PathCommonPrefixW
StrToIntExW
PathCombineA
PathMakePrettyW
SHCreateStreamOnFileA
StrFormatByteSizeW
StrCatW
PathAddBackslashW
StrDupW
PathRemoveFileSpecW
PathStripToRootA
user32
GetClipboardFormatNameW
TrackMouseEvent
ChildWindowFromPointEx
SystemParametersInfoW
DdeQueryStringW
IsZoomed
WaitMessage
PostThreadMessageA
GetOpenClipboardWindow
CharUpperBuffW
GetCursorInfo
BeginDeferWindowPos
DefWindowProcA
FlashWindowEx
GetClipboardData
GetDlgItem
LockWindowUpdate
SetLayeredWindowAttributes
GetMenuStringW
CreateWindowExA
ChildWindowFromPoint
CharLowerBuffA
SetCapture
SendMessageA
EnumThreadWindows
ShowCaret
CreateDialogParamW
CountClipboardFormats
MapVirtualKeyExA
PostMessageW
GetWindowLongW
MessageBeep
RegisterWindowMessageA
GetKeyNameTextW
DdeClientTransaction
MapVirtualKeyW
CreateAcceleratorTableW
DdeCreateDataHandle
LoadCursorW
AppendMenuW
SetMenu
DlgDirSelectExA
GetPropW
PostQuitMessage
IsCharAlphaA
DdeAccessData
LookupIconIdFromDirectory
DispatchMessageW
RegisterClassA
UnionRect
GetCursor
PackDDElParam
SetCursorPos
GetKeyboardState
IsDialogMessageA
GetDC
GetDesktopWindow
CreateIconFromResourceEx
GetThreadDesktop
SetCaretBlinkTime
CharToOemBuffA
OffsetRect
FindWindowA
CallWindowProcA
GetWindowContextHelpId
GetMenuStringA
UnregisterClassW
DialogBoxIndirectParamA
LookupIconIdFromDirectoryEx
EndPaint
InsertMenuItemW
WinHelpW
GetLastActivePopup
GetNextDlgGroupItem
DestroyWindow
CheckMenuItem
DdeFreeDataHandle
GetGUIThreadInfo
SetWindowPos
SwitchDesktop
wvsprintfW
TabbedTextOutW
LoadBitmapA
RegisterClipboardFormatW
InsertMenuW
SetMenuContextHelpId
CharLowerW
OemToCharA
GetMenuInfo
IsCharAlphaNumericW
CharUpperW
PostMessageA
SetScrollPos
BringWindowToTop
SetDlgItemTextW
ValidateRect
RegisterClassExA
DrawCaption
DrawIcon
DrawTextExW
SetCursor
DrawFrameControl
GetKeyboardLayoutNameA
TranslateAcceleratorA
SetParent
SetKeyboardState
CharNextExA
CreateIcon
SendMessageTimeoutW
GetQueueStatus
DrawIconEx
ExcludeUpdateRgn
GetUserObjectSecurity
SetScrollRange
keybd_event
SetThreadDesktop
GetClipboardViewer
CreateDesktopW
ScreenToClient
UnhookWindowsHookEx
EndDeferWindowPos
LoadCursorFromFileW
VkKeyScanW
CheckRadioButton
GetMenuBarInfo
LoadMenuW
InsertMenuA
DdeUnaccessData
DrawFocusRect
RegisterDeviceNotificationW
MoveWindow
MapDialogRect
GetDlgItemInt
GetWindowWord
GetClipCursor
MonitorFromRect
GrayStringW
VkKeyScanA
GetClipboardOwner
DrawTextExA
CopyIcon
SetMenuItemBitmaps
CopyAcceleratorTableA
SendNotifyMessageA
GetDCEx
DdeGetData
RegisterClipboardFormatA
PostThreadMessageW
GetTopWindow
SetWindowTextW
GetDialogBaseUnits
DefMDIChildProcW
UpdateWindow
GetClassInfoW
SendDlgItemMessageA
SetMenuInfo
DefWindowProcW
EnableMenuItem
DestroyCaret
MapWindowPoints
ToAsciiEx
MessageBoxW
OpenDesktopA
MessageBoxExA
EnableWindow
DdeInitializeW
GetMonitorInfoW
DrawTextA
TranslateAcceleratorW
DeleteMenu
ToAscii
WindowFromDC
FindWindowExA
PtInRect
GetActiveWindow
DialogBoxParamA
LoadMenuA
DdeFreeStringHandle
RemovePropA
CharToOemA
GetWindowTextA
CharPrevA
GetMenu
GetDlgCtrlID
IsIconic
GetMenuDefaultItem
ReleaseDC
SystemParametersInfoA
MapVirtualKeyExW
GetKeyNameTextA
IsChild
DdeCreateStringHandleW
SetRect
ScrollWindow
RegisterClassW
LoadImageW
SetDlgItemTextA
CreateWindowExW
SendNotifyMessageW
EnumWindows
ClientToScreen
SetPropW
FrameRect
GetMenuItemInfoW
ChangeDisplaySettingsW
IsWindowVisible
ActivateKeyboardLayout
IsWindowUnicode
CreateIconIndirect
ReplyMessage
LoadCursorFromFileA
CreateDialogIndirectParamA
RemovePropW
GetWindowTextLengthW
CreateMDIWindowW
AppendMenuA
GetClipboardFormatNameA
GetNextDlgTabItem
LoadAcceleratorsW
SendDlgItemMessageW
DestroyAcceleratorTable
UnregisterHotKey
RealChildWindowFromPoint
GetMessageA
SetWindowRgn
GetKeyboardLayout
SetWindowTextA
DrawEdge
GetClassInfoA
GetIconInfo
CallMsgFilterA
SetForegroundWindow
GetScrollInfo
SendMessageW
CharLowerBuffW
RegisterHotKey
IsWindowEnabled
SubtractRect
InflateRect
DefMDIChildProcA
GetWindowModuleFileNameW
GetScrollRange
CharNextA
LoadIconA
RemoveMenu
FindWindowW
GetClientRect
LoadIconW
CopyRect
CreateDialogParamA
SwapMouseButton
IsClipboardFormatAvailable
GetMenuItemInfoA
TabbedTextOutA
wvsprintfA
CreateDialogIndirectParamW
GetMenuState
GetCaretBlinkTime
GetMessageW
OpenIcon
EnableScrollBar
PeekMessageW
CallWindowProcW
CreateCursor
GetMenuContextHelpId
GetScrollPos
GetWindowRect
DestroyMenu
SetClipboardViewer
SetWindowsHookExW
IsCharAlphaNumericA
WaitForInputIdle
RedrawWindow
GetAncestor
HideCaret
GetKeyboardLayoutList
ClipCursor
DrawMenuBar
EmptyClipboard
AdjustWindowRectEx
GetSysColor
GetMenuItemID
IsMenu
ShowOwnedPopups
CreateIconFromResource
GetMessageExtraInfo
CloseClipboard
ShowCursor
SetClassLongA
GetFocus
CharUpperBuffA
DlgDirListA
GetMenuItemCount
GetUpdateRgn
TranslateMDISysAccel
GetCursorPos
WindowFromPoint
OpenWindowStationW
InvertRect
GetWindowTextLengthA
LoadStringW
DrawTextW
SetDlgItemInt
GetUpdateRect
DlgDirSelectComboBoxExA
SetWindowLongA
SetActiveWindow
DdeConnect
SetRectEmpty
SetMenuDefaultItem
wsprintfA
FlashWindow
SendInput
NotifyWinEvent
mouse_event
IntersectRect
ReuseDDElParam
OpenInputDesktop
InsertMenuItemA
PeekMessageA
ChangeClipboardChain
SetWindowContextHelpId
DdeUninitialize
LoadKeyboardLayoutA
GetSystemMetrics
ShowWindow
LoadCursorA
TrackPopupMenuEx
UnpackDDElParam
IsRectEmpty
ShowWindowAsync
GetClassLongW
MonitorFromPoint
GetClassInfoExW
OemToCharBuffA
SetClassLongW
GetWindowThreadProcessId
DdeQueryStringA
ScrollDC
GetForegroundWindow
DefDlgProcA
UnregisterDeviceNotification
CallNextHookEx
DrawAnimatedRects
ToUnicodeEx
ScrollWindowEx
UnregisterClassA
DialogBoxIndirectParamW
CreateAcceleratorTableA
InSendMessage
SetMenuItemInfoW
RegisterWindowMessageW
DispatchMessageA
KillTimer
EndDialog
SetTimer
GetLastInputInfo
CharLowerA
GetComboBoxInfo
InvalidateRect
GetAsyncKeyState
GetWindowDC
EqualRect
BeginPaint
TileChildWindows
GetDoubleClickTime
EnumClipboardFormats
SendMessageTimeoutA
ToUnicode
GetTitleBarInfo
GetMessagePos
CloseWindow
GetMessageTime
GetWindowLongA
MsgWaitForMultipleObjects
CreateCaret
ExitWindowsEx
LoadImageA
GetScrollBarInfo
LoadMenuIndirectW
DragDetect
SetMenuItemInfoA
GetClassNameW
DefFrameProcW
SetDoubleClickTime
IsCharUpperA
DdeDisconnect
CopyAcceleratorTableW
GetClassLongA
MapVirtualKeyA
DlgDirListComboBoxA
LoadAcceleratorsA
GetWindowTextW
LoadBitmapW
MsgWaitForMultipleObjectsEx
DdePostAdvise
GetDlgItemTextA
ChangeDisplaySettingsA
DefFrameProcA
SetMessageExtraInfo
GetPropA
GetClassNameA
TranslateMessage
IsDialogMessageW
LoadStringA
SetPropA
InvalidateRgn
GetClassInfoExA
GetUserObjectInformationW
AnimateWindow
GetCapture
CloseDesktop
FillRect
TrackPopupMenu
GetWindowInfo
GetUserObjectInformationA
DialogBoxParamW
BroadcastSystemMessage
TileWindows
DdeGetLastError
GetKeyState
CreatePopupMenu
CheckMenuRadioItem
SetWindowLongW
DestroyIcon
OpenWindowStationA
GetWindow
UnhookWinEvent
SetClipboardData
GetMenuCheckMarkDimensions
MessageBoxIndirectA
FreeDDElParam
ValidateRgn
ModifyMenuW
ReleaseCapture
DrawStateW
RegisterClassExW
GetCaretPos
DdeNameService
SetWindowPlacement
DdeCreateStringHandleA
CheckDlgButton
AttachThreadInput
SetProcessWindowStation
CopyImage
AdjustWindowRect
GetProcessWindowStation
SetWindowsHookExA
GetSystemMenu
SetUserObjectSecurity
GetSysColorBrush
EnumDisplaySettingsA
HiliteMenuItem
CascadeWindows
LockSetForegroundWindow
MenuItemFromPoint
DlgDirListComboBoxW
GetTabbedTextExtentA
AllowSetForegroundWindow
EnumDesktopWindows
WinHelpA
CreateMDIWindowA
GetWindowPlacement
CharNextW
SetScrollInfo
CharUpperA
IsWindow
IsCharLowerA
DrawStateA
IsDialogMessage
IsCharLowerW
CloseWindowStation
SetFocus
GetMenuItemRect
DeferWindowPos
EnumChildWindows
GetDlgItemTextW
LoadMenuIndirectA
EnumDisplayMonitors
GetClassWord
IsDlgButtonChecked
GetMonitorInfoA
FindWindowExW
GetWindowRgn
MonitorFromWindow
ModifyMenuA
EnumDisplaySettingsW
CreateMenu
GetParent
GetSubMenu
VkKeyScanExA
GrayStringA
ArrangeIconicWindows
OpenDesktopW
ShowScrollBar
MessageBoxA
DdeInitializeA
GetInputState
wsprintfW
DestroyCursor
kernel32
VirtualAllocEx
ConnectNamedPipe
FindFirstChangeNotificationA
OutputDebugStringW
Process32First
GetProfileSectionA
InitializeCriticalSectionAndSpinCount
SearchPathA
OpenProcess
RemoveDirectoryA
GetDiskFreeSpaceExW
GetCommMask
SuspendThread
SetErrorMode
LocalUnlock
_lclose
GetStringTypeExA
EnumResourceTypesA
GetStdHandle
GetCPInfoExA
WaitForMultipleObjectsEx
_hwrite
SetCommTimeouts
GetConsoleMode
GetLongPathNameW
GetLocaleInfoW
GetThreadTimes
lstrcatW
LocalHandle
EnumUILanguagesW
GetProcessAffinityMask
_lwrite
GetFileSizeEx
GlobalReAlloc
FreeConsole
FindFirstVolumeW
GetTapeParameters
RemoveDirectoryW
IsDebuggerPresent
OpenFile
_hread
GlobalFree
EscapeCommFunction
GetPrivateProfileSectionNamesA
IsDBCSLeadByteEx
GetACP
BeginUpdateResourceA
EnterCriticalSection
FindResourceA
DosDateTimeToFileTime
GetStringTypeW
VirtualProtect
UnlockFile
LoadLibraryExA
DebugBreak
DebugActiveProcess
PulseEvent
VerLanguageNameA
Sleep
GetProcessHeaps
GlobalFindAtomA
GetDriveTypeW
PeekNamedPipe
SetHandleCount
GetCurrencyFormatA
LocalFileTimeToFileTime
GetUserDefaultUILanguage
CommConfigDialogW
GetSystemDefaultLangID
_lread
ReleaseMutex
OpenMutexA
MultiByteToWideChar
WriteProfileStringW
DeleteFileW
IsBadReadPtr
GetProfileIntW
GetTempFileNameW
Process32Next
FileTimeToSystemTime
VirtualProtectEx
SetCommBreak
CreateProcessA
GlobalMemoryStatusEx
SetEvent
RtlUnwind
FindClose
HeapCompact
Beep
ClearCommError
SetConsoleCtrlHandler
GetPrivateProfileSectionA
EnumResourceNamesA
SetCommConfig
GetProcAddress
CopyFileW
SetVolumeMountPointA
GetProfileIntA
GetModuleHandleA
CompareStringA
GetSystemTimeAsFileTime
ClearCommBreak
SetLocalTime
GetComputerNameA
OpenFileMappingW
HeapValidate
CreateFileA
GlobalSize
SetProcessAffinityMask
GetThreadLocale
IsProcessorFeaturePresent
lstrcmpA
DisconnectNamedPipe
FindResourceW
ReadFile
GetNumberFormatW
GetLongPathNameA
InterlockedDecrement
GetFullPathNameA
QueryPerformanceFrequency
VirtualAlloc
Heap32ListFirst
SetEnvironmentVariableA
LocalLock
GetShortPathNameW
WritePrivateProfileSectionA
GetOverlappedResult
SetComputerNameW
GetVolumePathNameA
GetCommandLineW
LoadLibraryW
TerminateThread
SetTimeZoneInformation
GetVolumeNameForVolumeMountPointA
GetPrivateProfileStructA
InterlockedCompareExchange
GetDateFormatW
GetTimeFormatA
Module32NextW
OpenThread
HeapCreate
GetModuleFileNameA
FindCloseChangeNotification
WaitNamedPipeW
FindFirstFileExW
WritePrivateProfileStringA
PurgeComm
LocalAlloc
FindAtomW
SetFilePointerEx
DeleteFileA
FindVolumeClose
GetVolumeNameForVolumeMountPointW
OutputDebugStringA
CreatePipe
SetVolumeLabelA
RaiseException
ReadDirectoryChangesW
MoveFileExW
FatalAppExitA
WriteConsoleOutputW
GetDateFormatA
GetExitCodeProcess
HeapAlloc
GetThreadPriority
GlobalLock
CopyFileExA
WriteProcessMemory
GetDiskFreeSpaceA
SetEnvironmentVariableW
InitializeCriticalSection
WritePrivateProfileStringW
GetVolumeInformationW
ExitProcess
GetTickCount
GetPrivateProfileStringW
GetSystemPowerStatus
AllocConsole
GetCurrentProcess
GetFullPathNameW
GetConsoleScreenBufferInfo
SetThreadPriority
GetProcessTimes
GetFileType
GlobalAlloc
lstrlenA
CompareFileTime
FlushConsoleInputBuffer
GetLogicalDrives
GetCompressedFileSizeW
TransmitCommChar
GetMailslotInfo
GlobalHandle
AddAtomW
GetTempFileNameA
GetProfileStringA
SwitchToThread
MapViewOfFile
CreateMutexW
GetCurrentThreadId
GetDiskFreeSpaceExA
EnumCalendarInfoW
CreateEventW
TryEnterCriticalSection
IsBadCodePtr
EnumResourceNamesW
SetMailslotInfo
EnumCalendarInfoExW
ReadConsoleInputA
lstrcpyW
GetCommandLineA
DisableThreadLibraryCalls
GetPrivateProfileIntA
LockFileEx
SetConsoleCursorPosition
GlobalUnlock
WriteConsoleA
GetFileAttributesW
GetPrivateProfileStringA
EnumResourceLanguagesW
DeleteFiber
GetCurrentDirectoryA
CreateFileMappingA
DeleteVolumeMountPointW
SetProcessWorkingSetSize
CreateMailslotA
GetVolumeInformationA
GetComputerNameW
GetCurrentDirectoryW
FreeLibrary
ResumeThread
SetPriorityClass
CreateEventA
GlobalAddAtomA
TlsFree
GetThreadContext
SetTapePosition
VirtualLock
LeaveCriticalSection
GetLastError
lstrcmpW
WriteProfileStringA
GetSystemTimeAdjustment
GetEnvironmentStringsW
SetFileTime
SetThreadExecutionState
SetConsoleMode
EnumSystemLanguageGroupsW
FormatMessageW
FindResourceExA
GlobalGetAtomNameA
SetSystemTime
VirtualFreeEx
GetFileAttributesA
Module32FirstW
TerminateProcess
FreeEnvironmentStringsA
GetCommState
GetFileAttributesExW
UpdateResourceW
Thread32First
CreateFiber
GetUserDefaultLangID
FindResourceExW
LockFile
UpdateResourceA
TlsGetValue
GetFileAttributesExA
IsBadWritePtr
GetLocalTime
GetStringTypeExW
DeviceIoControl
ProcessIdToSessionId
SetUnhandledExceptionFilter
OpenSemaphoreW
ReleaseSemaphore
GetShortPathNameA
QueryDosDeviceW
GetSystemWindowsDirectoryA
OpenFileMappingA
LockResource
FindNextFileA
VirtualFree
BeginUpdateResourceW
SwitchToFiber
Module32Next
Heap32Next
UnmapViewOfFile
GetEnvironmentVariableA
CreateToolhelp32Snapshot
WaitNamedPipeA
EndUpdateResourceA
InterlockedExchangeAdd
HeapDestroy
GetConsoleOutputCP
OpenEventA
CreateFileW
GetHandleInformation
DeleteCriticalSection
QueryPerformanceCounter
SizeofResource
SetCurrentDirectoryW
GetVersion
CloseHandle
SetCurrentDirectoryA
GetProcessWorkingSetSize
GetLogicalDriveStringsW
SetWaitableTimer
CreateSemaphoreW
GetProfileStringW
SetThreadLocale
VirtualQueryEx
VerSetConditionMask
GetBinaryTypeA
VirtualUnlock
GetTimeZoneInformation
GlobalAddAtomW
LocalSize
EndUpdateResourceW
CreateDirectoryA
FreeEnvironmentStringsW
Process32FirstW
SetProcessShutdownParameters
BuildCommDCBA
CreateNamedPipeW
OpenMutexW
BackupWrite
GetPriorityClass
GetTimeFormatW
GetNumberFormatA
CreateMutexA
WideCharToMultiByte
SystemTimeToFileTime
WaitForDebugEvent
GetStartupInfoW
IsDBCSLeadByte
GetFileTime
MoveFileExA
TlsSetValue
GetLocaleInfoA
EnumSystemLocalesA
WaitForSingleObjectEx
GetExitCodeThread
ContinueDebugEvent
QueueUserWorkItem
IsValidLocale
PostQueuedCompletionStatus
FindFirstFileA
GetSystemDirectoryA
GetOEMCP
lstrcmpiA
FindNextFileW
SetFileAttributesA
EnumLanguageGroupLocalesW
FlushInstructionCache
Heap32ListNext
lstrcpynW
GetProcessHeap
lstrcmpiW
FormatMessageA
Toolhelp32ReadProcessMemory
GlobalFindAtomW
GetSystemInfo
CreateProcessW
IsBadStringPtrA
DuplicateHandle
LocalReAlloc
SetEndOfFile
VerifyVersionInfoA
SetThreadContext
FreeResource
GetVersionExA
WritePrivateProfileSectionW
SetConsoleTitleW
WaitCommEvent
CreateNamedPipeA
GetDriveTypeA
SetLastError
WaitForSingleObject
SetCommMask
HeapFree
ResetEvent
FindNextChangeNotification
CreateIoCompletionPort
LoadResource
GetModuleFileNameW
GetTempPathA
SetHandleInformation
lstrcatA
SystemTimeToTzSpecificLocalTime
CreateDirectoryExA
lstrlenW
GetVolumePathNameW
_lcreat
SetupComm
GetEnvironmentVariableW
WriteFileEx
GetVersionExW
WriteConsoleW
DeleteVolumeMountPointA
BackupSeek
CreateThread
TlsAlloc
LCMapStringW
WriteFile
GetCommProperties
GetQueuedCompletionStatus
WaitForMultipleObjects
AreFileApisANSI
CopyFileA
GetCPInfo
GetProcessVersion
UnhandledExceptionFilter
LCMapStringA
QueueUserAPC
ConvertDefaultLocale
GetPrivateProfileIntW
SleepEx
GetStartupInfoA
MapViewOfFileEx
CreateWaitableTimerA
EnumCalendarInfoA
LocalFree
SetVolumeLabelW
GetSystemDirectoryW
GetCommModemStatus
_lopen
GetUserDefaultLCID
OpenSemaphoreA
MulDiv
SetFileAttributesW
GetComputerNameExA
GetSystemTime
EnumResourceLanguagesA
CopyFileExW
GetSystemDefaultLCID
QueryDosDeviceA
GetCommTimeouts
ExpandEnvironmentStringsW
GetCurrentProcessId
WritePrivateProfileStructA
ReadProcessMemory
CancelIo
Heap32First
GlobalDeleteAtom
MoveFileA
WritePrivateProfileStructW
GlobalMemoryStatus
GetWindowsDirectoryW
FileTimeToLocalFileTime
Process32NextW
GetModuleHandleW
DeleteAtom
WinExec
RtlFillMemory
IsValidCodePage
FileTimeToDosDateTime
FindNextVolumeW
LocalCompact
LoadLibraryExW
IsBadStringPtrW
GetCommConfig
CompareStringW
GetComputerNameExW
SetFilePointer
InterlockedExchange
ExpandEnvironmentStringsA
GetFileSize
CreateFileMappingW
lstrcpynA
OpenEventW
GetStringTypeA
CreateWaitableTimerW
SetProcessPriorityBoost
FlushFileBuffers
HeapReAlloc
SetCommState
GetEnvironmentStrings
LoadLibraryA
lstrcpyA
UnlockFileEx
SearchPathW
FlushViewOfFile
Thread32Next
GetCurrentThread
CreateDirectoryW
FindFirstFileW
HeapSize
BackupRead
ExitThread
GetDiskFreeSpaceW
GetLogicalDriveStringsA
SetThreadAffinityMask
FindFirstChangeNotificationW
GetAtomNameA
VerifyVersionInfoW
GlobalFlags
DefineDosDeviceA
VirtualQuery
SetStdHandle
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ