Behavioral task
behavioral1
Sample
e8b3ac98e69547eecd1ddd5fbae0d7964134dbd73becb7ecd82fd3cca13f739b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8b3ac98e69547eecd1ddd5fbae0d7964134dbd73becb7ecd82fd3cca13f739b.exe
Resource
win10v2004-20221111-en
General
-
Target
e8b3ac98e69547eecd1ddd5fbae0d7964134dbd73becb7ecd82fd3cca13f739b
-
Size
716KB
-
MD5
6ddd25a1c83932e96d00711de32cd2f2
-
SHA1
a80be598acc480156ceac10d9223fb0765f864dc
-
SHA256
e8b3ac98e69547eecd1ddd5fbae0d7964134dbd73becb7ecd82fd3cca13f739b
-
SHA512
ada28a32c8ba919c5559ba00cedb9c821505bdf096fb48646f9b2c07599e03c0effb6f9854ca7331c8d13eb3d884b4c58f8acd528d8656545e762a249da181da
-
SSDEEP
12288:r6hqYwwwwwwwwwwwwwwB6Dmik75so+buFWGlgLnMRFoKBW5u/SKHgMUEcpj/2nb0:EqG6Dmik7yo+qFWiRFhBVNHbcpj/2nb0
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
e8b3ac98e69547eecd1ddd5fbae0d7964134dbd73becb7ecd82fd3cca13f739b.exe windows x86
c1865058e61dd01f13a13a133343306b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetSecurityDescriptorDacl
SetNamedSecurityInfoA
CreateProcessAsUserA
LsaAddAccountRights
SetSecurityInfo
RegisterServiceCtrlHandlerW
InitializeSid
EnumDependentServicesW
CryptEnumProvidersW
RegisterServiceCtrlHandlerExA
RegCloseKey
RegCreateKeyExW
QueryServiceStatus
LogonUserW
GetSidLengthRequired
CryptDeriveKey
LsaNtStatusToWinError
ChangeServiceConfigA
AddAccessAllowedAce
IsValidAcl
DeleteService
CreateWellKnownSid
CryptExportKey
RegConnectRegistryA
StartServiceCtrlDispatcherA
LsaQueryInformationPolicy
SetSecurityDescriptorDacl
RegQueryInfoKeyW
RegSetValueExA
CloseServiceHandle
SetFileSecurityA
StartServiceCtrlDispatcherW
GetUserNameA
LockServiceDatabase
CloseEncryptedFileRaw
CryptHashData
GetAce
QueryServiceConfigA
CryptCreateHash
RegEnumKeyExA
GetSecurityDescriptorLength
GetSidSubAuthorityCount
ImpersonateLoggedOnUser
RegEnumKeyA
RegDeleteValueW
InitializeAcl
CreateServiceW
RegDeleteKeyW
CryptVerifySignatureA
GetFileSecurityW
RegEnumKeyW
CopySid
QueryServiceStatusEx
CreateProcessAsUserW
DuplicateToken
RegEnumValueA
LsaLookupSids
RegOpenKeyA
GetAclInformation
RegSetValueExW
RegOpenKeyExW
ImpersonateSelf
LsaClose
RegCreateKeyExA
CryptDestroyHash
ConvertSidToStringSidW
LookupPrivilegeNameA
CryptAcquireContextA
QueryServiceConfigW
CryptGenKey
LsaFreeMemory
LsaRemoveAccountRights
GetSecurityInfo
OpenSCManagerA
RegisterServiceCtrlHandlerA
SetSecurityDescriptorOwner
GetUserNameW
RegLoadKeyW
RegCreateKeyW
SetThreadToken
EqualPrefixSid
RegNotifyChangeKeyValue
OpenServiceW
MapGenericMask
LookupPrivilegeDisplayNameA
SetServiceStatus
CheckTokenMembership
RegisterEventSourceW
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegSetKeySecurity
CryptReleaseContext
CryptGenRandom
RegEnumKeyExW
LsaOpenPolicy
WriteEncryptedFileRaw
GetExplicitEntriesFromAclW
SetSecurityDescriptorSacl
InitiateSystemShutdownA
GetTokenInformation
IsValidSecurityDescriptor
SetEntriesInAclA
BuildExplicitAccessWithNameW
OpenServiceA
AddAce
GetKernelObjectSecurity
FreeSid
DeleteAce
InitiateSystemShutdownExW
DeregisterEventSource
EncryptFileW
IsValidSid
RegQueryValueExW
RegQueryInfoKeyA
AllocateAndInitializeSid
CryptImportKey
CryptEncrypt
CryptSetProvParam
ConvertStringSidToSidA
RegisterEventSourceA
GetLengthSid
SetTokenInformation
ImpersonateNamedPipeClient
CryptGetHashParam
SetSecurityDescriptorGroup
ChangeServiceConfig2A
RegQueryValueExA
AdjustTokenPrivileges
RegGetKeySecurity
StartServiceA
OpenThreadToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptDestroyKey
GetFileSecurityA
RegFlushKey
UnlockServiceDatabase
ReportEventA
SetNamedSecurityInfoW
DuplicateTokenEx
GetSecurityDescriptorOwner
LookupAccountNameA
RegSetValueA
LookupPrivilegeValueW
RegSaveKeyA
LookupPrivilegeValueA
OpenEncryptedFileRawW
GetEffectiveRightsFromAclA
RegOpenKeyExA
RegDeleteValueA
GetNamedSecurityInfoW
RegSaveKeyW
EqualSid
GetSecurityDescriptorGroup
GetSecurityDescriptorControl
SetEntriesInAclW
RegRestoreKeyW
GetSecurityDescriptorSacl
SetFileSecurityW
BuildTrusteeWithSidW
OpenProcessToken
RegConnectRegistryW
RegUnLoadKeyW
ConvertStringSidToSidW
OpenSCManagerW
QueryServiceLockStatusW
EnumServicesStatusA
SetServiceObjectSecurity
GetSidSubAuthority
MakeAbsoluteSD
AccessCheck
RegOpenKeyW
RevertToSelf
StartServiceW
LookupAccountSidA
RegEnumValueW
RegQueryValueA
RegDeleteKeyA
RegLoadKeyA
GetNamedSecurityInfoA
RegQueryValueW
ChangeServiceConfigW
MakeSelfRelativeSD
RegUnLoadKeyA
ChangeServiceConfig2W
ReadEncryptedFileRaw
RegSetValueW
LookupAccountNameW
RegDisablePredefinedCache
ReportEventW
RegRestoreKeyA
GetSidIdentifierAuthority
RegCreateKeyA
LsaLookupNames
CryptAcquireContextW
ControlService
InitializeSecurityDescriptor
CreateServiceA
CryptGetKeyParam
RegOpenCurrentUser
LookupAccountSidW
BuildTrusteeWithNameW
SetSecurityDescriptorControl
CryptDecrypt
LogonUserA
CryptGetUserKey
comctl32
ImageList_SetIconSize
ImageList_ReplaceIcon
ImageList_SetOverlayImage
ImageList_SetBkColor
_TrackMouseEvent
FlatSB_EnableScrollBar
ImageList_GetImageInfo
ImageList_Duplicate
ImageList_BeginDrag
ImageList_Write
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_EndDrag
ImageList_GetDragImage
ImageList_DrawEx
ImageList_SetDragCursorImage
DestroyPropertySheetPage
ImageList_AddIcon
CreatePropertySheetPageA
ImageList_DragMove
ImageList_DragShowNolock
PropertySheetW
ImageList_Destroy
ImageList_GetIcon
ImageList_Read
ImageList_SetFlags
ImageList_LoadImage
ImageList_SetImageCount
ImageList_Replace
ord17
ImageList_GetBkColor
ImageList_GetIconSize
ImageList_GetImageCount
MakeDragList
ImageList_Create
ImageList_Remove
CreateUpDownControl
InitCommonControlsEx
DrawStatusTextW
PropertySheetA
ImageList_Copy
FlatSB_ShowScrollBar
ImageList_Add
ImageList_DragLeave
CreateStatusWindowW
CreateToolbarEx
InitializeFlatSB
CreatePropertySheetPageW
ImageList_Merge
ImageList_LoadImageW
ImageList_Draw
ImageList_AddMasked
ImageList_DragEnter
shell32
ShellExecuteW
FindExecutableA
Shell_NotifyIconW
SHEmptyRecycleBinA
FindExecutableW
DragFinish
SHFileOperationA
SHAppBarMessage
DragQueryFileW
SHGetSpecialFolderPathW
Shell_NotifyIconA
SHBrowseForFolderW
SHGetFileInfoA
CommandLineToArgvW
ExtractIconExW
SHGetInstanceExplorer
SHGetDataFromIDListA
ShellExecuteExA
SHGetSpecialFolderPathA
SHChangeNotify
SHCreateDirectoryExW
SHGetMalloc
DragAcceptFiles
SHGetFolderPathW
ord155
SHFileOperationW
SHFreeNameMappings
ExtractIconExA
DragQueryFileA
SHGetPathFromIDListW
SHGetFolderLocation
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetFileInfoW
SHBrowseForFolderA
SHCreateDirectoryExA
SHBindToParent
SHGetDesktopFolder
DuplicateIcon
ExtractIconA
SHGetPathFromIDListA
DoEnvironmentSubstW
SHGetDataFromIDListW
ShellExecuteA
SHGetFolderPathA
ExtractIconW
SHAddToRecentDocs
DragQueryPoint
user32
TranslateMDISysAccel
TranslateAcceleratorA
EqualRect
LoadCursorA
DdeConnect
SetMenuContextHelpId
ChildWindowFromPoint
wsprintfA
SetRect
GetWindowTextW
DlgDirSelectComboBoxExA
CreateWindowExA
GetPropW
EnableWindow
GetMenuItemID
CharPrevA
LoadIconW
ScreenToClient
FindWindowExW
GetCursorPos
GetPropA
BroadcastSystemMessage
SendNotifyMessageW
DestroyMenu
DestroyCaret
LoadImageW
LoadMenuIndirectW
GetMenuStringW
SetWindowTextA
DefWindowProcW
DrawStateW
DialogBoxIndirectParamW
EnableMenuItem
DeleteMenu
EnumWindows
SetCaretBlinkTime
SetCursorPos
CreateIconIndirect
GetParent
SetForegroundWindow
ShowWindowAsync
CreateAcceleratorTableA
CharLowerBuffW
ReleaseDC
DestroyAcceleratorTable
GetFocus
SetCursor
GetClassNameA
IsCharAlphaNumericW
DrawIcon
PostMessageA
CopyAcceleratorTableA
GetLastInputInfo
ToUnicode
MapVirtualKeyExW
CheckRadioButton
CopyImage
LoadAcceleratorsW
DrawTextExA
IsCharLowerW
GetMenuItemInfoA
DrawEdge
ActivateKeyboardLayout
GetKeyNameTextA
GetMenuInfo
TranslateMessage
HideCaret
wsprintfW
GetClassInfoA
RegisterDeviceNotificationW
MonitorFromWindow
SetMenu
DefDlgProcA
DdeCreateStringHandleA
UnionRect
SetUserObjectSecurity
GetWindow
ModifyMenuA
CharUpperBuffW
MapWindowPoints
IsWindowUnicode
OpenWindowStationW
SetMenuItemInfoW
DispatchMessageA
InsertMenuItemW
MapVirtualKeyExA
IsIconic
SetRectEmpty
OpenClipboard
GetWindowTextLengthW
SetClipboardViewer
SetWindowPos
DestroyIcon
GetMonitorInfoW
FlashWindow
ArrangeIconicWindows
TrackPopupMenuEx
CharLowerW
InvertRect
OpenDesktopA
GetWindowPlacement
TileWindows
CloseWindow
DlgDirListA
WaitMessage
IsMenu
GetWindowLongW
CallMsgFilterA
CopyRect
CopyIcon
GetSystemMenu
DdeCreateStringHandleW
EndDialog
GetKeyboardLayout
DefMDIChildProcA
GetSysColor
UnregisterHotKey
GetKeyboardLayoutList
MessageBoxW
CountClipboardFormats
FlashWindowEx
ShowScrollBar
IsWindow
DlgDirListComboBoxA
SetDoubleClickTime
InSendMessage
GetIconInfo
wvsprintfW
DlgDirSelectExA
ToAsciiEx
CreateAcceleratorTableW
UnregisterClassW
InvalidateRgn
CloseDesktop
MoveWindow
SendDlgItemMessageA
CascadeWindows
SetMessageExtraInfo
DdeClientTransaction
GetMessagePos
RemovePropA
VkKeyScanExA
GetKeyboardLayoutNameA
GetMessageExtraInfo
GetUserObjectInformationA
GetClipCursor
SetMenuItemBitmaps
EndDeferWindowPos
ChangeClipboardChain
GetComboBoxInfo
CloseClipboard
SwitchDesktop
SystemParametersInfoW
CreateDialogParamA
SetFocus
SetWindowLongA
RegisterClipboardFormatA
SubtractRect
GetDlgCtrlID
ChildWindowFromPointEx
GetDC
IsWindowVisible
GetSystemMetrics
SetMenuDefaultItem
SetWindowsHookExA
GetKeyState
SetScrollPos
MessageBoxIndirectA
DdeCreateDataHandle
RegisterWindowMessageW
GetMonitorInfoA
ScrollWindow
DdeFreeStringHandle
GetClassInfoExA
ReleaseCapture
BeginPaint
SetWindowPlacement
DrawCaption
IsRectEmpty
GetClassNameW
GetScrollPos
RemovePropW
LoadBitmapA
WinHelpW
GetClientRect
GetDlgItemTextW
IsClipboardFormatAvailable
SetScrollRange
EmptyClipboard
ReuseDDElParam
FrameRect
GetWindowRgn
CreateIconFromResourceEx
UnregisterDeviceNotification
IsDialogMessageW
DdeQueryStringW
AnimateWindow
CreateMDIWindowA
GetKeyboardState
DdeUnaccessData
SetPropA
UpdateWindow
SetClassLongA
LoadMenuW
TabbedTextOutA
ExcludeUpdateRgn
GetNextDlgGroupItem
DrawMenuBar
IsWindowEnabled
DlgDirListComboBoxW
EndPaint
CheckMenuItem
GetMenuStringA
MsgWaitForMultipleObjects
DefMDIChildProcW
GetCapture
RealChildWindowFromPoint
GetWindowContextHelpId
SetWindowLongW
LoadMenuA
ShowCursor
GetGUIThreadInfo
GetClassLongW
GetUserObjectInformationW
CharNextW
ExitWindowsEx
GetWindowInfo
DialogBoxParamA
GetCursor
TileChildWindows
CheckMenuRadioItem
RegisterClassA
CharLowerA
SetDlgItemInt
EnumDisplaySettingsA
LoadBitmapW
GetClassWord
DdeQueryStringA
GetMenu
GetClipboardFormatNameA
GetClipboardOwner
DdeDisconnect
LoadAcceleratorsA
DragDetect
GetAncestor
ShowOwnedPopups
DialogBoxParamW
InsertMenuW
CreateIcon
FreeDDElParam
CreateMDIWindowW
GetTabbedTextExtentA
NotifyWinEvent
SetWindowTextW
CharNextA
CharLowerBuffA
TrackMouseEvent
ScrollDC
LoadCursorW
MenuItemFromPoint
GetMessageTime
SetPropW
DdeInitializeA
SetClassLongW
OpenInputDesktop
DrawTextExW
EnumDisplayMonitors
DrawAnimatedRects
SetActiveWindow
CallWindowProcW
IsCharAlphaNumericA
LoadStringA
VkKeyScanA
InsertMenuA
RegisterClassExA
ChangeDisplaySettingsA
GetScrollRange
keybd_event
GetClipboardData
MapVirtualKeyA
SetDlgItemTextW
UnpackDDElParam
DdeNameService
GetActiveWindow
UnhookWindowsHookEx
OemToCharBuffA
SetProcessWindowStation
GetOpenClipboardWindow
LoadImageA
CreateDialogIndirectParamA
PostQuitMessage
PostMessageW
SendMessageA
LoadStringW
IsCharLowerA
InsertMenuItemA
EnumClipboardFormats
SetTimer
CallNextHookEx
GetNextDlgTabItem
GetMenuCheckMarkDimensions
GetDlgItemInt
CopyAcceleratorTableW
SendInput
GetMenuItemInfoW
GetWindowThreadProcessId
LoadCursorFromFileA
PeekMessageW
MessageBoxA
GetClassInfoExW
CreatePopupMenu
SetWindowsHookExW
RegisterClipboardFormatW
SetLayeredWindowAttributes
PostThreadMessageA
GetThreadDesktop
AppendMenuA
GetMessageA
GetSysColorBrush
SetParent
LoadCursorFromFileW
InvalidateRect
GetMenuContextHelpId
ReplyMessage
LoadKeyboardLayoutA
MonitorFromPoint
DdeGetLastError
GetWindowWord
EnumDesktopWindows
SetScrollInfo
CreateCursor
MessageBoxExA
RemoveMenu
ChangeDisplaySettingsW
PostThreadMessageW
GetDCEx
SetMenuInfo
GetMessageW
DestroyWindow
OpenDesktopW
ClipCursor
DdeGetData
ValidateRect
CreateWindowExW
GetCaretBlinkTime
CharUpperA
GrayStringW
GetForegroundWindow
BeginDeferWindowPos
DdePostAdvise
AppendMenuW
AllowSetForegroundWindow
DefWindowProcA
CreateIconFromResource
SetThreadDesktop
GetDoubleClickTime
IsDlgButtonChecked
CharUpperW
GetProcessWindowStation
DrawFocusRect
FindWindowExA
PackDDElParam
GetInputState
DrawTextA
DispatchMessageW
SendMessageTimeoutA
GetWindowTextA
GetDialogBaseUnits
CreateMenu
ToAscii
IsDialogMessage
DrawFrameControl
InflateRect
GetKeyNameTextW
IsCharUpperA
SetCaretPos
TranslateAcceleratorW
GetMenuBarInfo
GetWindowDC
IsDialogMessageA
ClientToScreen
GetCursorInfo
SystemParametersInfoA
MessageBeep
GetClipboardViewer
AttachThreadInput
WaitForInputIdle
SetClipboardData
MapVirtualKeyW
GetTitleBarInfo
CharToOemBuffA
BringWindowToTop
CharNextExA
GetUpdateRgn
LoadMenuIndirectA
FillRect
GetSubMenu
VkKeyScanW
GetDlgItemTextA
AdjustWindowRect
DdeAccessData
ModifyMenuW
GetClipboardFormatNameW
CharUpperBuffA
DdeFreeDataHandle
DrawIconEx
KillTimer
GetWindowRect
OffsetRect
FindWindowW
SendDlgItemMessageW
GetMenuItemCount
RegisterClassW
ToUnicodeEx
GetClassInfoW
CreateDialogParamW
SetCapture
GetWindowLongA
LockSetForegroundWindow
PeekMessageA
SetWindowRgn
GetScrollInfo
CloseWindowStation
DialogBoxIndirectParamA
CreateDialogIndirectParamW
OpenWindowStationA
HiliteMenuItem
GetClassLongA
GetDesktopWindow
UnregisterClassA
MonitorFromRect
ShowCaret
SetWindowContextHelpId
DefFrameProcW
GetMenuState
OpenIcon
GetUpdateRect
GetUserObjectSecurity
DeferWindowPos
GetMenuItemRect
GetCaretPos
DdeUninitialize
mouse_event
GetTopWindow
DefFrameProcA
SetMenuItemInfoA
IsZoomed
ScrollWindowEx
DestroyCursor
CreateDesktopW
CharToOemA
CreateCaret
SendMessageW
FindWindowA
DdeInitializeW
LoadIconA
SetDlgItemTextA
ShowWindow
EnableScrollBar
GetDlgItem
UnhookWinEvent
SetKeyboardState
GetScrollBarInfo
CallWindowProcA
GetQueueStatus
TrackPopupMenu
EnumDisplaySettingsW
RedrawWindow
AdjustWindowRectEx
RegisterHotKey
IntersectRect
GetMenuDefaultItem
WindowFromDC
DrawStateA
GetWindowTextLengthA
LookupIconIdFromDirectoryEx
WindowFromPoint
IsChild
OemToCharA
WinHelpA
ValidateRgn
EnumThreadWindows
GetLastActivePopup
MapDialogRect
GetAsyncKeyState
wvsprintfA
PtInRect
LockWindowUpdate
MsgWaitForMultipleObjectsEx
RegisterWindowMessageA
SwapMouseButton
SendMessageTimeoutW
GetWindowModuleFileNameW
TabbedTextOutW
DrawTextW
RegisterClassExW
GrayStringA
SendNotifyMessageA
LookupIconIdFromDirectory
EnumChildWindows
kernel32
CreateMailslotA
GetExitCodeProcess
GetFileAttributesExA
FormatMessageA
Process32First
Module32First
SetCommMask
SetVolumeLabelA
CreateSemaphoreW
ProcessIdToSessionId
CreateProcessA
SetVolumeMountPointA
OutputDebugStringA
EnumSystemLanguageGroupsW
UnhandledExceptionFilter
lstrlenA
GetCommState
GetDiskFreeSpaceExA
Toolhelp32ReadProcessMemory
SetCurrentDirectoryW
LoadLibraryExW
lstrcmpW
LockResource
WriteConsoleA
MoveFileExW
SwitchToFiber
WriteConsoleOutputW
WaitNamedPipeW
HeapDestroy
SetHandleCount
ReadFile
Process32Next
GetPrivateProfileStringA
FindVolumeClose
GetShortPathNameA
FlushConsoleInputBuffer
Thread32Next
SetConsoleTitleW
SetEnvironmentVariableA
_lcreat
SetConsoleCtrlHandler
GlobalFindAtomW
GetHandleInformation
GetPriorityClass
lstrcpyW
VirtualProtectEx
FileTimeToSystemTime
EnumResourceTypesA
GetProfileStringW
IsValidLocale
DisableThreadLibraryCalls
SetThreadAffinityMask
Heap32Next
RemoveDirectoryW
LockFile
_lopen
SetVolumeLabelW
InterlockedExchangeAdd
SetCommBreak
MoveFileW
lstrcmpiA
LeaveCriticalSection
SetConsoleCursorPosition
GetSystemTimeAsFileTime
ClearCommBreak
GetThreadLocale
SetThreadLocale
WritePrivateProfileStructA
CopyFileW
GetStartupInfoA
ConvertDefaultLocale
LCMapStringA
CloseHandle
CreatePipe
GetEnvironmentStringsW
GetFileSize
SetSystemTime
Process32NextW
_lclose
GetModuleFileNameW
GetPrivateProfileIntW
InterlockedCompareExchange
ReadDirectoryChangesW
LoadLibraryExA
FindCloseChangeNotification
GetModuleHandleA
GetComputerNameExW
GetConsoleCP
GetDriveTypeW
lstrcmpA
GlobalAlloc
GetTempFileNameA
ClearCommError
GetTapeParameters
GetModuleHandleW
OpenMutexA
CreateThread
WriteFileEx
WideCharToMultiByte
PurgeComm
GetACP
GetBinaryTypeA
OpenSemaphoreA
FlushInstructionCache
VirtualQueryEx
EnumSystemLocalesA
CommConfigDialogW
LoadResource
ReadProcessMemory
CreateMutexA
EndUpdateResourceW
IsBadReadPtr
GlobalGetAtomNameA
GetPrivateProfileStructA
GetProfileIntW
OutputDebugStringW
LoadLibraryA
OpenEventW
lstrlenW
GetDateFormatA
lstrcpynW
MulDiv
SetThreadContext
GetVersionExA
EnumCalendarInfoA
GetNumberFormatW
CancelIo
WaitForDebugEvent
CompareFileTime
GetStringTypeW
EnumUILanguagesW
ReleaseMutex
SetProcessAffinityMask
FatalAppExitA
GetFileAttributesA
SleepEx
OpenMutexW
BeginUpdateResourceA
Module32NextW
_lread
VirtualQuery
GetLogicalDriveStringsW
WaitForMultipleObjectsEx
GlobalLock
LocalReAlloc
GetProcessVersion
CreateFileMappingA
FindResourceA
CreateMutexW
ExpandEnvironmentStringsA
InterlockedExchange
FindFirstChangeNotificationW
GetTempFileNameW
GetVolumeInformationW
GetStringTypeExA
FindAtomW
VirtualAlloc
IsDBCSLeadByteEx
WaitNamedPipeA
RaiseException
TlsGetValue
GetFileAttributesW
OpenFileMappingA
GetFileSizeEx
GetCurrentProcessId
LockFileEx
GetTimeFormatA
LocalHandle
GetCommProperties
CreateFileMappingW
SearchPathA
FreeLibrary
QueryDosDeviceA
SetFileAttributesW
GetUserDefaultLangID
SetProcessWorkingSetSize
GetDriveTypeA
CopyFileExA
EnumCalendarInfoW
QueryDosDeviceW
HeapFree
BeginUpdateResourceW
SetFileAttributesA
LocalFree
MapViewOfFileEx
GetVolumeInformationA
MoveFileA
GetSystemTime
UpdateResourceW
OpenFile
Heap32First
GetCurrentDirectoryW
GetComputerNameW
LoadLibraryW
GlobalFindAtomA
FileTimeToDosDateTime
CreateIoCompletionPort
GetSystemWindowsDirectoryA
TlsAlloc
CopyFileA
PulseEvent
GetProcessWorkingSetSize
GetDiskFreeSpaceA
GlobalUnlock
WaitForSingleObjectEx
BackupSeek
FindFirstFileW
GetThreadPriority
BuildCommDCBA
GetModuleFileNameA
WaitCommEvent
lstrcmpiW
SetCommState
FreeEnvironmentStringsA
WaitForMultipleObjects
GetConsoleScreenBufferInfo
GetCommTimeouts
CreateDirectoryA
FreeConsole
GetTimeFormatW
FileTimeToLocalFileTime
GlobalMemoryStatus
GetPrivateProfileStringW
PostQueuedCompletionStatus
IsBadCodePtr
VirtualFreeEx
GetCommandLineA
FindFirstFileA
FindNextChangeNotification
MoveFileExA
CreateDirectoryW
GetFullPathNameW
SetThreadPriority
EnumResourceNamesW
SetPriorityClass
DebugBreak
FindNextFileA
EnumResourceLanguagesW
GetSystemDefaultLCID
IsProcessorFeaturePresent
IsValidCodePage
SetLastError
CreateWaitableTimerW
LocalSize
FindFirstVolumeW
IsDBCSLeadByte
WriteProfileStringA
IsBadStringPtrW
SetConsoleMode
Module32Next
_llseek
IsBadStringPtrA
SetMailslotInfo
CreateDirectoryExA
GetProfileSectionA
DeleteAtom
EnumResourceNamesA
SetCurrentDirectoryA
_hread
LocalAlloc
LocalLock
AllocConsole
GetCPInfo
Heap32ListNext
GlobalHandle
GetMailslotInfo
GetProcessTimes
ConnectNamedPipe
GetCommandLineW
GetStdHandle
Sleep
FlushViewOfFile
Heap32ListFirst
SetEvent
VerLanguageNameA
GetProcessAffinityMask
GlobalDeleteAtom
SwitchToThread
SetTapePosition
GetOEMCP
GetConsoleOutputCP
GetStringTypeA
GetConsoleMode
GetCompressedFileSizeW
FindFirstChangeNotificationA
CreateFileA
SuspendThread
TlsSetValue
WritePrivateProfileSectionW
VirtualProtect
GetTempPathA
SetUnhandledExceptionFilter
GetFullPathNameA
GetVolumeNameForVolumeMountPointW
GetLongPathNameW
InterlockedIncrement
GetLastError
TerminateProcess
TlsFree
GetLocaleInfoW
FindClose
WritePrivateProfileStringW
FreeResource
GetVersion
PeekNamedPipe
GetUserDefaultUILanguage
BackupRead
SetCommTimeouts
VirtualAllocEx
FreeEnvironmentStringsW
SetWaitableTimer
VirtualFree
GetTickCount
Process32FirstW
GetCurrencyFormatA
CreateNamedPipeA
Thread32First
GetEnvironmentVariableW
GetCommMask
EnterCriticalSection
WriteProfileStringW
TransmitCommChar
ReleaseSemaphore
BackupWrite
GetTimeZoneInformation
SetEnvironmentVariableW
GetStringTypeExW
WriteConsoleW
DebugActiveProcess
GlobalFlags
GetSystemDefaultLangID
_lwrite
SystemTimeToFileTime
GetThreadTimes
ReadConsoleInputA
Beep
DeleteVolumeMountPointW
SetTimeZoneInformation
OpenFileMappingW
GetEnvironmentVariableA
GetWindowsDirectoryA
LocalUnlock
DuplicateHandle
lstrcatA
GetCurrentThread
RtlFillMemory
ConvertThreadToFiber
GlobalAddAtomA
GetNumberFormatA
GetCurrentProcess
GetProcessHeaps
OpenSemaphoreW
SetLocalTime
GetSystemDirectoryA
GetPrivateProfileSectionA
SetEndOfFile
HeapValidate
DeleteFiber
FindFirstFileExW
CreateEventA
UnmapViewOfFile
GetFileTime
DefineDosDeviceA
GetTempPathW
AddAtomW
WritePrivateProfileStructW
UnlockFileEx
QueueUserWorkItem
GetShortPathNameW
GetUserDefaultLCID
SetCommConfig
GlobalGetAtomNameW
GetDiskFreeSpaceExW
SetComputerNameW
GetSystemDirectoryW
OpenThread
DosDateTimeToFileTime
GetLocalTime
GlobalSize
GetStartupInfoW
CreateProcessW
VerifyVersionInfoA
QueryPerformanceCounter
LocalCompact
InitializeCriticalSectionAndSpinCount
FindNextVolumeW
FormatMessageW
SetFilePointer
GetLocaleInfoA
OpenProcess
CreateSemaphoreA
ExpandEnvironmentStringsW
VerSetConditionMask
WritePrivateProfileStringA
EscapeCommFunction
CompareStringA
GetPrivateProfileSectionNamesA
GetOverlappedResult
SystemTimeToTzSpecificLocalTime
WriteFile
Module32FirstW
lstrcatW
GetQueuedCompletionStatus
EnumLanguageGroupLocalesW
GetVersionExW
GetWindowsDirectoryW
WriteProcessMemory
GetEnvironmentStrings
GetSystemPowerStatus
GetExitCodeThread
GlobalAddAtomW
GetProcessHeap
GetDateFormatW
LCMapStringW
GetCurrentThreadId
HeapReAlloc
lstrcpynA
GlobalMemoryStatusEx
GetVolumePathNameA
SetProcessPriorityBoost
RtlUnwind
SetFileTime
GetProfileIntA
DeleteVolumeMountPointA
HeapAlloc
IsDebuggerPresent
SetupComm
SetProcessShutdownParameters
CopyFileExW
GetFileType
DeleteFileA
GetCurrentDirectoryA
VerifyVersionInfoW
SearchPathW
GetLogicalDriveStringsA
TryEnterCriticalSection
HeapCompact
GetLongPathNameA
_hwrite
ExitProcess
GetSystemTimeAdjustment
DeviceIoControl
ResumeThread
WaitForSingleObject
GetProcAddress
SetNamedPipeHandleState
UpdateResourceA
GetCPInfoExA
GetSystemInfo
GetProfileStringA
EnumCalendarInfoExW
GetCommModemStatus
TerminateThread
CreateFiber
EndUpdateResourceA
SetStdHandle
ContinueDebugEvent
DeleteFileW
GetDiskFreeSpaceW
WinExec
GlobalFree
GlobalReAlloc
AreFileApisANSI
RemoveDirectoryA
OpenEventA
VirtualLock
InterlockedDecrement
CreateWaitableTimerA
HeapSize
InitializeCriticalSection
GetThreadContext
lstrcpyA
FindResourceW
GetCommConfig
SetErrorMode
HeapCreate
SizeofResource
CreateNamedPipeW
SetThreadExecutionState
UnlockFile
GetComputerNameExA
VirtualUnlock
GetComputerNameA
GetPrivateProfileIntA
GetVolumeNameForVolumeMountPointA
MapViewOfFile
DeleteCriticalSection
CreateFileW
ExitThread
DisconnectNamedPipe
FlushFileBuffers
SetFilePointerEx
ResetEvent
EnumResourceLanguagesA
QueueUserAPC
CreateToolhelp32Snapshot
MultiByteToWideChar
SetHandleInformation
QueryPerformanceFrequency
CreateEventW
ole32
OleLoadFromStream
GetRunningObjectTable
CreateItemMoniker
OleCreateStaticFromData
GetClassFile
StgIsStorageILockBytes
OleInitialize
CreateDataAdviseHolder
OleSave
CoDisconnectObject
ReleaseStgMedium
OleCreateLinkToFile
OleSetContainedObject
CoGetInterfaceAndReleaseStream
ReadClassStm
StgOpenStorageOnILockBytes
CoUninitialize
IsAccelerator
StgCreateStorageEx
FreePropVariantArray
CreateILockBytesOnHGlobal
OleRegEnumVerbs
CoRevokeClassObject
MkParseDisplayName
CoCopyProxy
CreateBindCtx
RegisterDragDrop
CoInitialize
OleCreateFromData
CoRegisterClassObject
OleCreateLinkFromData
CoResumeClassObjects
CoQueryProxyBlanket
WriteClassStg
CoImpersonateClient
OleCreate
CoMarshalInterThreadInterfaceInStream
CreateClassMoniker
OleDuplicateData
WriteFmtUserTypeStg
OleQueryLinkFromData
CoTreatAsClass
CoTaskMemFree
DoDragDrop
ReadFmtUserTypeStg
OleSetClipboard
OleSetMenuDescriptor
OleRegGetMiscStatus
IIDFromString
CoReleaseMarshalData
OleUninitialize
CreateOleAdviseHolder
CLSIDFromProgID
CoGetClassObject
StringFromCLSID
OleSaveToStream
OleIsCurrentClipboard
CoRevokeMallocSpy
CoCreateInstance
OleCreateFromFile
BindMoniker
OleGetIconOfClass
CoSetProxyBlanket
OleDestroyMenuDescriptor
CoSuspendClassObjects
GetHGlobalFromILockBytes
CoLockObjectExternal
OleDraw
StgOpenStorage
CoMarshalInterface
CoGetObject
OleTranslateAccelerator
OleRun
CreateFileMoniker
StgIsStorageFile
CreateGenericComposite
SetConvertStg
StgCreateDocfileOnILockBytes
ReadClassStg
GetHGlobalFromStream
CoGetMalloc
WriteClassStm
OleIsRunning
OleLoad
StringFromIID
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoCreateInstanceEx
PropVariantClear
OleQueryCreateFromData
CoInitializeEx
CoLoadLibrary
CoUnmarshalInterface
OleLockRunning
ProgIDFromCLSID
CoTaskMemRealloc
CoRevertToSelf
StringFromGUID2
CLSIDFromString
RevokeDragDrop
OleRegGetUserType
OleGetClipboard
CoTaskMemAlloc
StgCreateDocfile
CoFreeUnusedLibraries
CoInitializeSecurity
OleCreateMenuDescriptor
CoFileTimeNow
CoRegisterMallocSpy
CoCreateGuid
Sections
.text Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 548KB - Virtual size: 547KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ