Static task
static1
Behavioral task
behavioral1
Sample
bfb6002f3a8d3a920e153c279fa16850exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bfb6002f3a8d3a920e153c279fa16850exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
bfb6002f3a8d3a920e153c279fa16850exe_JC.exe
-
Size
780KB
-
MD5
bfb6002f3a8d3a920e153c279fa16850
-
SHA1
8d16a1ac60193a6d16174fce2eda0fca19c84d22
-
SHA256
b68cfaa6919f45624dbed81470e6e385e695b313ff5365494ca89d0738be233e
-
SHA512
f1af0f9f7b4209d3f0be2519ff31434d639b67c022fe1d46dd3fc20e35a90f087a16069161f0e4878138503b94a91836406a1db774dcbde39d6153be38463aa9
-
SSDEEP
24576:6l2fTo/uGMy7HAxwq8bd4+C2bsO83CknUuuX:C2LeuGMyLAwbhB3sQknrc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfb6002f3a8d3a920e153c279fa16850exe_JC.exe
Files
-
bfb6002f3a8d3a920e153c279fa16850exe_JC.exe.exe windows:4 windows x86
8d7678c19e7f69b2b10dc9cd2ef2fc94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadContext
GetDriveTypeW
SetTimeZoneInformation
GetProfileIntW
ReadDirectoryChangesW
CreateSemaphoreA
GetThreadLocale
CreateThread
GetCommModemStatus
UpdateResourceW
WriteFileEx
SetCurrentDirectoryA
ContinueDebugEvent
GetCompressedFileSizeW
FlushInstructionCache
OutputDebugStringA
GetVolumePathNameA
ProcessIdToSessionId
GetProcessHeaps
GetDriveTypeA
CreateNamedPipeA
AllocConsole
FreeEnvironmentStringsA
AreFileApisANSI
GetProfileIntA
WritePrivateProfileStringW
GlobalSize
GlobalGetAtomNameW
DebugActiveProcess
CopyFileExW
WaitForDebugEvent
LoadLibraryA
BackupWrite
QueryDosDeviceW
ClearCommError
OpenSemaphoreW
DuplicateHandle
OpenMutexA
GlobalAddAtomA
lstrlenW
SetThreadExecutionState
WriteConsoleW
SetLastError
CreateFileW
CreateToolhelp32Snapshot
IsBadWritePtr
GetWindowsDirectoryW
SetComputerNameW
GetOEMCP
GetUserDefaultLangID
GetStdHandle
Heap32Next
GlobalGetAtomNameA
SetProcessPriorityBoost
GetFullPathNameA
OpenFileMappingA
GetVolumePathNameW
OutputDebugStringW
GetNumberFormatA
GetLocaleInfoW
lstrcpyW
TlsAlloc
LeaveCriticalSection
IsValidCodePage
WriteProfileStringA
InterlockedExchangeAdd
Thread32Next
IsProcessorFeaturePresent
SizeofResource
LCMapStringA
FindFirstChangeNotificationW
VirtualFreeEx
EndUpdateResourceA
Heap32ListFirst
Module32First
SetConsoleCtrlHandler
GetComputerNameW
FileTimeToDosDateTime
WriteProfileStringW
FindAtomW
FileTimeToLocalFileTime
EnumLanguageGroupLocalesW
GetDiskFreeSpaceExA
RtlUnwind
WritePrivateProfileSectionA
Toolhelp32ReadProcessMemory
CommConfigDialogW
CopyFileW
GetConsoleCP
EnumResourceNamesA
TlsSetValue
GlobalFindAtomA
CompareFileTime
FlushFileBuffers
SetSystemTime
CancelIo
ExpandEnvironmentStringsW
InterlockedDecrement
GetFileAttributesW
MoveFileA
UnlockFile
GetStringTypeA
SetCommTimeouts
CreateMutexW
LocalLock
HeapCompact
FindResourceExW
GetFileAttributesExA
SetFileTime
ReleaseSemaphore
FindNextChangeNotification
GetCommMask
SetMailslotInfo
EndUpdateResourceW
SetupComm
SetHandleCount
SetThreadLocale
Module32NextW
GetCurrentProcessId
GetVersion
GetLongPathNameA
ConvertThreadToFiber
BuildCommDCBA
GetComputerNameExW
GlobalMemoryStatusEx
DisableThreadLibraryCalls
CreateNamedPipeW
IsDebuggerPresent
GetTempFileNameW
EscapeCommFunction
GetProcessWorkingSetSize
GetThreadPriority
BackupRead
VirtualProtect
ClearCommBreak
FatalAppExitA
GlobalFindAtomW
InterlockedExchange
GetShortPathNameA
SetPriorityClass
LockFileEx
GlobalMemoryStatus
GetTimeFormatW
GetLogicalDriveStringsA
WritePrivateProfileStructW
CompareStringW
FileTimeToSystemTime
CreateFiber
GetConsoleOutputCP
SleepEx
GetDateFormatA
GetAtomNameA
HeapDestroy
_lopen
CompareStringA
GetFileSize
GlobalReAlloc
CopyFileA
ExpandEnvironmentStringsA
GetDateFormatW
InterlockedIncrement
CreateMailslotA
lstrcpynW
InterlockedCompareExchange
GetShortPathNameW
SetCommMask
LoadLibraryW
GetVolumeInformationA
WaitForSingleObject
GetSystemTime
CreatePipe
WaitNamedPipeW
CreateProcessA
SetWaitableTimer
Process32Next
GetProcessTimes
SetStdHandle
CreateEventA
lstrcatA
GetUserDefaultLCID
ExitProcess
OpenEventW
GetProcessHeap
UnmapViewOfFile
GlobalAddAtomW
WideCharToMultiByte
FreeEnvironmentStringsW
_lwrite
GetLocalTime
GetEnvironmentStrings
lstrcpyA
CreateDirectoryW
GetDiskFreeSpaceW
LockResource
OpenProcess
SetVolumeLabelW
RtlFillMemory
CreateEventW
CreateDirectoryA
TerminateThread
DeleteCriticalSection
GetSystemTimeAdjustment
GetLastError
WaitForMultipleObjects
CreateIoCompletionPort
FindFirstFileA
EnumCalendarInfoW
GetPrivateProfileStringW
SystemTimeToTzSpecificLocalTime
LocalReAlloc
GetComputerNameA
GetSystemDefaultLangID
FreeConsole
GetSystemDefaultLCID
BeginUpdateResourceA
lstrcatW
ReadFile
SetNamedPipeHandleState
ReadConsoleInputA
VirtualLock
VirtualFree
GetLogicalDrives
GetProfileStringA
SetFilePointer
GetDiskFreeSpaceA
GetCurrentDirectoryA
GetProfileStringW
MoveFileW
OpenFileMappingW
GetFullPathNameW
SetThreadPriority
GetModuleHandleW
Heap32First
GetEnvironmentVariableW
GetCommandLineW
SetConsoleCursorPosition
CreateWaitableTimerA
LoadLibraryExA
GetCPInfoExA
GetLongPathNameW
DefineDosDeviceA
LocalFree
WritePrivateProfileStructA
VirtualAllocEx
GetFileType
FormatMessageW
IsBadStringPtrW
GetTempPathA
GetStringTypeExA
_lcreat
GetVersionExA
ReadProcessMemory
GetTempFileNameA
LockFile
TlsFree
QueryPerformanceFrequency
SwitchToFiber
GetExitCodeThread
DeleteFileW
SearchPathA
OpenThread
GetQueuedCompletionStatus
Process32NextW
HeapAlloc
GetProcessVersion
EnumResourceNamesW
ConvertDefaultLocale
BackupSeek
VirtualProtectEx
HeapCreate
GetCommTimeouts
EnumResourceTypesA
Process32FirstW
SearchPathW
DeleteFileA
GetStringTypeExW
WaitForMultipleObjectsEx
EnumResourceLanguagesA
GetHandleInformation
GetSystemWindowsDirectoryA
EnumUILanguagesW
EnumCalendarInfoExW
FindFirstFileW
DeviceIoControl
WaitNamedPipeA
GetSystemTimeAsFileTime
QueryDosDeviceA
SetCurrentDirectoryW
GlobalUnlock
SetErrorMode
SetFilePointerEx
FindResourceW
SuspendThread
GetPrivateProfileStructA
UnhandledExceptionFilter
LocalUnlock
LocalHandle
GetSystemPowerStatus
SetTapePosition
BeginUpdateResourceW
UnlockFileEx
DosDateTimeToFileTime
SetCommConfig
GetCommConfig
TryEnterCriticalSection
FreeLibrary
WinExec
FindNextFileA
GetSystemDirectoryA
GetThreadTimes
GetConsoleMode
Sleep
HeapFree
UpdateResourceA
LoadResource
FindVolumeClose
Thread32First
GetProcAddress
GetVersionExW
VirtualUnlock
LocalAlloc
OpenSemaphoreA
SetLocalTime
VirtualQueryEx
GetPrivateProfileStringA
GetFileAttributesExW
GetLocaleInfoA
GetTickCount
lstrcmpA
WriteConsoleA
DebugBreak
MapViewOfFile
LocalFileTimeToFileTime
GetOverlappedResult
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
SetCommState
GetCurrentThread
Process32First
MulDiv
SystemTimeToFileTime
IsBadStringPtrA
GetModuleFileNameW
IsBadCodePtr
PulseEvent
SetFileAttributesW
FindFirstVolumeW
GlobalFree
GetVolumeNameForVolumeMountPointA
WaitCommEvent
FindClose
CopyFileExA
IsDBCSLeadByte
ReleaseMutex
GetACP
CreateSemaphoreW
ExitThread
GlobalDeleteAtom
GetStartupInfoW
DeleteAtom
GlobalLock
GetComputerNameExA
FindFirstChangeNotificationA
SetVolumeMountPointA
IsValidLocale
lstrcmpiW
SetEnvironmentVariableA
GetCurrentThreadId
EnumCalendarInfoA
Beep
GlobalAlloc
CreateFileA
GetProcessAffinityMask
VerSetConditionMask
QueueUserAPC
MultiByteToWideChar
PurgeComm
GetModuleHandleA
LocalCompact
GetCurrencyFormatA
GetSystemDirectoryW
WriteFile
OpenFile
CloseHandle
CreateMutexA
_hread
CreateDirectoryExA
OpenEventA
PeekNamedPipe
SetConsoleTitleW
EnumSystemLocalesA
CreateWaitableTimerW
RemoveDirectoryA
WaitForSingleObjectEx
SetProcessShutdownParameters
DeleteVolumeMountPointW
GlobalFlags
GetEnvironmentStringsW
lstrcpynA
FindCloseChangeNotification
SetProcessWorkingSetSize
VirtualQuery
SetThreadContext
VerifyVersionInfoW
GetEnvironmentVariableA
GetMailslotInfo
FindResourceExA
SetConsoleMode
GetWindowsDirectoryA
_hwrite
SetProcessAffinityMask
GetConsoleScreenBufferInfo
MoveFileExA
GetCurrentProcess
WritePrivateProfileSectionW
FindNextFileW
InitializeCriticalSection
CreateFileMappingW
FormatMessageA
FindFirstFileExW
GetFileTime
GetStringTypeW
FindResourceA
GetStartupInfoA
CreateProcessW
GetVolumeInformationW
SetFileAttributesA
ConnectNamedPipe
SetUnhandledExceptionFilter
GetFileAttributesA
GetPrivateProfileSectionNamesA
VerifyVersionInfoA
GetExitCodeProcess
EnumResourceLanguagesW
GetUserDefaultUILanguage
GetTimeZoneInformation
FlushViewOfFile
LocalSize
DisconnectNamedPipe
GetBinaryTypeA
DeleteVolumeMountPointA
FreeResource
_lclose
LCMapStringW
_lread
TerminateProcess
PostQueuedCompletionStatus
LoadLibraryExW
GetPrivateProfileSectionA
lstrcmpiA
GetCurrentDirectoryW
_llseek
WriteProcessMemory
TlsGetValue
SetHandleInformation
VirtualAlloc
lstrcmpW
RaiseException
WritePrivateProfileStringA
HeapSize
SetEndOfFile
EnumSystemLanguageGroupsW
EnterCriticalSection
GetPrivateProfileIntA
OpenMutexW
HeapValidate
GetSystemInfo
RemoveDirectoryW
Module32FirstW
WriteConsoleOutputW
GetTapeParameters
GetPrivateProfileIntW
GlobalHandle
FlushConsoleInputBuffer
lstrlenA
GetPriorityClass
GetCPInfo
GetCommState
GetDiskFreeSpaceExW
SetThreadAffinityMask
SetCommBreak
GetLogicalDriveStringsW
GetFileInformationByHandle
GetModuleFileNameA
CreateFileMappingA
HeapReAlloc
IsDBCSLeadByteEx
Module32Next
FindNextVolumeW
GetCommProperties
GetProfileSectionA
MoveFileExW
GetNumberFormatW
SetEnvironmentVariableW
MapViewOfFileEx
SwitchToThread
SetEvent
GetCommandLineA
VerLanguageNameA
Heap32ListNext
comdlg32
GetSaveFileNameA
ReplaceTextA
CommDlgExtendedError
FindTextW
PageSetupDlgA
ChooseFontA
GetFileTitleA
ReplaceTextW
PrintDlgExA
FindTextA
GetFileTitleW
ChooseColorA
ChooseColorW
PrintDlgA
GetOpenFileNameA
PrintDlgW
GetSaveFileNameW
PageSetupDlgW
ChooseFontW
GetOpenFileNameW
user32
GetPropW
WindowFromPoint
CallWindowProcA
DeferWindowPos
TrackMouseEvent
NotifyWinEvent
SetWindowTextA
DdeUnaccessData
EnableMenuItem
GetProcessWindowStation
FlashWindowEx
LoadAcceleratorsW
IsChild
CloseWindowStation
DeleteMenu
ShowOwnedPopups
VkKeyScanW
DrawTextA
GetDialogBaseUnits
IsDialogMessageA
LoadAcceleratorsA
OpenIcon
SetWindowContextHelpId
HideCaret
AttachThreadInput
DrawFocusRect
CreateMDIWindowA
FindWindowExA
MsgWaitForMultipleObjectsEx
HiliteMenuItem
DestroyCursor
ScreenToClient
EnumDisplayMonitors
GetKeyboardLayoutList
GetCursorPos
WindowFromDC
ScrollWindow
GetMonitorInfoW
DdeGetData
SetClassLongA
BringWindowToTop
KillTimer
GetMenuStringA
DrawEdge
PackDDElParam
RegisterHotKey
EnableWindow
GetUpdateRgn
IsCharUpperA
CreateIconFromResource
DefMDIChildProcA
IsCharAlphaNumericW
GetMenuItemID
LoadMenuIndirectW
GetCursor
ChildWindowFromPoint
GetMessageW
GetClientRect
EnableScrollBar
RegisterDeviceNotificationW
SendMessageA
GetParent
MapDialogRect
SendInput
EnumThreadWindows
SetWindowPlacement
LoadBitmapW
DialogBoxParamA
SetClipboardViewer
CreatePopupMenu
DrawAnimatedRects
GetClipboardFormatNameA
DefMDIChildProcW
DdeGetLastError
LoadImageW
OpenDesktopA
CharPrevA
TileWindows
IsIconic
ChangeClipboardChain
DefDlgProcA
DefFrameProcA
GetScrollInfo
GetClassNameA
ChangeDisplaySettingsW
RealChildWindowFromPoint
UnregisterHotKey
CreateMenu
GetWindowWord
SetCaretPos
FlashWindow
ChangeDisplaySettingsA
EnumDisplaySettingsW
GetUserObjectInformationA
SetWindowsHookExA
DlgDirListA
FillRect
MessageBeep
LoadBitmapA
WinHelpA
CreateAcceleratorTableW
RegisterClassExA
MsgWaitForMultipleObjects
CreateDialogIndirectParamA
CloseDesktop
MapVirtualKeyA
DialogBoxIndirectParamW
SetMenuItemInfoA
AdjustWindowRect
DdeClientTransaction
GetMenuInfo
DefFrameProcW
SetPropA
mouse_event
TranslateMDISysAccel
GetMenuDefaultItem
FrameRect
IsWindowVisible
SetWindowsHookExW
MessageBoxExA
SetRectEmpty
DrawMenuBar
LockSetForegroundWindow
CreateCursor
IsDialogMessageW
AnimateWindow
GetIconInfo
DlgDirSelectComboBoxExA
AppendMenuA
ShowScrollBar
EnumDisplaySettingsA
CloseClipboard
CloseWindow
LoadStringA
OpenDesktopW
GetCursorInfo
ReplyMessage
CallWindowProcW
TranslateAcceleratorA
GetInputState
VkKeyScanExA
IsMenu
PostMessageA
GetTabbedTextExtentA
GetWindowRect
SetThreadDesktop
InsertMenuA
CharUpperA
GetWindowPlacement
ExcludeUpdateRgn
GetClipboardViewer
GetScrollRange
DdeCreateStringHandleA
SetDoubleClickTime
RegisterClipboardFormatW
RegisterClipboardFormatA
PostThreadMessageA
SetMenuItemBitmaps
CopyAcceleratorTableA
CreateDialogParamW
ToAscii
CharUpperBuffA
DdeFreeDataHandle
GetSysColorBrush
SetMenuInfo
GetScrollBarInfo
RegisterClassA
ValidateRect
DrawTextExW
CallNextHookEx
RedrawWindow
RemovePropA
DdeInitializeW
LoadStringW
GetQueueStatus
SetDlgItemTextW
GetMessagePos
GetDCEx
DlgDirSelectExA
MonitorFromRect
EnumDesktopWindows
SubtractRect
LoadIconW
GetSystemMetrics
TrackPopupMenu
DdeAccessData
GetMenuBarInfo
SetPropW
LoadMenuA
SystemParametersInfoW
OpenWindowStationW
EnumWindows
SetLayeredWindowAttributes
SetFocus
CascadeWindows
GetGUIThreadInfo
LoadIconA
ActivateKeyboardLayout
OpenWindowStationA
DdePostAdvise
CreateCaret
PeekMessageW
GetUserObjectInformationW
IsClipboardFormatAvailable
CountClipboardFormats
GetSystemMenu
GetNextDlgTabItem
CharToOemA
EmptyClipboard
GetUpdateRect
GetMenuItemInfoA
DialogBoxParamW
WaitForInputIdle
InsertMenuItemW
TrackPopupMenuEx
GetForegroundWindow
SetCapture
OemToCharBuffA
MessageBoxA
ReleaseCapture
PeekMessageA
ShowCursor
GetWindowTextLengthA
LoadCursorA
ToUnicodeEx
GetMenuCheckMarkDimensions
AllowSetForegroundWindow
GetWindowModuleFileNameW
SetWindowLongA
LoadCursorFromFileA
OpenClipboard
OffsetRect
FindWindowExW
LoadCursorW
GetClassInfoExA
CharNextA
CharLowerBuffA
GetWindowRgn
CharToOemBuffA
MoveWindow
SetDlgItemInt
ScrollWindowEx
GetClassWord
DdeConnect
RegisterClassExW
CopyAcceleratorTableW
GetDC
SetMenu
SetWindowPos
GetDlgItem
IsZoomed
GetMenuContextHelpId
GetCapture
SendNotifyMessageA
wvsprintfW
LoadMenuIndirectA
SetMenuDefaultItem
GetKeyboardLayoutNameA
GetDoubleClickTime
SystemParametersInfoA
EndDialog
GetWindowThreadProcessId
DlgDirListComboBoxW
IsDlgButtonChecked
wsprintfA
DestroyMenu
UpdateWindow
CharNextW
WaitMessage
SetProcessWindowStation
CreateDialogIndirectParamW
SetWindowLongW
wsprintfW
GetMessageExtraInfo
SetScrollInfo
RegisterClassW
IsWindowEnabled
DlgDirListComboBoxA
GetKeyNameTextA
PostThreadMessageW
DestroyWindow
ExitWindowsEx
SetCursorPos
GetLastInputInfo
MessageBoxW
IsCharAlphaA
GetKeyboardLayout
CharLowerBuffW
GetDlgCtrlID
GetWindowLongW
keybd_event
GetThreadDesktop
SetMenuContextHelpId
SetClipboardData
ShowWindow
DestroyCaret
DispatchMessageW
PostMessageW
GetClassInfoA
DdeInitializeA
TranslateAcceleratorW
FreeDDElParam
PtInRect
UnpackDDElParam
ModifyMenuA
DrawStateA
ModifyMenuW
GrayStringA
CheckMenuItem
LookupIconIdFromDirectory
WinHelpW
SetCursor
IsCharLowerW
ToUnicode
CharUpperBuffW
GetWindow
GetMenuState
ShowCaret
CharNextExA
MapVirtualKeyExW
DestroyAcceleratorTable
GetCaretPos
DdeFreeStringHandle
DdeUninitialize
GetTopWindow
DrawStateW
MessageBoxIndirectA
GetSysColor
InvalidateRgn
ShowWindowAsync
GetWindowDC
InvalidateRect
CreateIconFromResourceEx
GetMessageA
SetWindowTextW
DdeCreateStringHandleW
CharLowerW
GetWindowTextA
CharLowerA
GetDlgItemTextW
OemToCharA
TileChildWindows
CreateAcceleratorTableA
GetWindowContextHelpId
SetTimer
GetAncestor
OpenInputDesktop
InSendMessage
ClipCursor
GetMessageTime
GetMenuItemInfoW
ClientToScreen
ArrangeIconicWindows
UnregisterClassA
CreateDialogParamA
DialogBoxIndirectParamA
GetScrollPos
IsWindow
AdjustWindowRectEx
DdeQueryStringW
SendMessageTimeoutA
GetDlgItemInt
EnumChildWindows
SetScrollPos
SendDlgItemMessageW
SetMenuItemInfoW
DdeCreateDataHandle
CharUpperW
GetClassInfoExW
TabbedTextOutA
GetCaretBlinkTime
GetClassLongA
CreateMDIWindowW
MapWindowPoints
GetClipCursor
TranslateMessage
CreateIconIndirect
UnhookWindowsHookEx
CreateWindowExA
GetWindowInfo
GetMenuItemRect
SetClassLongW
SendMessageW
CopyRect
SwitchDesktop
GetComboBoxInfo
IsCharLowerA
GetUserObjectSecurity
GetFocus
BroadcastSystemMessage
LockWindowUpdate
FindWindowW
AppendMenuW
DrawIcon
GetDlgItemTextA
SendDlgItemMessageA
UnhookWinEvent
InflateRect
GetSubMenu
FindWindowA
CreateDesktopW
SwapMouseButton
ReleaseDC
DestroyIcon
GetPropA
GetClipboardFormatNameW
LoadMenuW
CallMsgFilterA
GetAsyncKeyState
IsRectEmpty
GetOpenClipboardWindow
SetKeyboardState
GetKeyboardState
SetUserObjectSecurity
ScrollDC
SetMessageExtraInfo
RemoveMenu
DrawTextExA
DrawIconEx
RemovePropW
GetMenuStringW
CheckRadioButton
ValidateRgn
GetWindowTextLengthW
SetCaretBlinkTime
GetDesktopWindow
CopyIcon
DrawFrameControl
GetNextDlgGroupItem
IntersectRect
SetForegroundWindow
BeginDeferWindowPos
DdeNameService
SetParent
DefWindowProcA
DrawTextW
InsertMenuItemA
UnregisterDeviceNotification
ReuseDDElParam
GetMenuItemCount
InsertMenuW
IsWindowUnicode
DdeDisconnect
IsDialogMessage
PostQuitMessage
GetClipboardData
LoadKeyboardLayoutA
RegisterWindowMessageA
UnregisterClassW
UnionRect
InvertRect
CreateIcon
EqualRect
IsCharAlphaNumericA
CopyImage
BeginPaint
LookupIconIdFromDirectoryEx
GrayStringW
DdeQueryStringA
SetScrollRange
SetDlgItemTextA
SetWindowRgn
EnumClipboardFormats
MapVirtualKeyW
GetKeyNameTextW
EndDeferWindowPos
GetWindowTextW
MonitorFromPoint
SendMessageTimeoutW
CreateWindowExW
SetActiveWindow
GetClassInfoW
DefWindowProcW
LoadCursorFromFileW
LoadImageA
DrawCaption
GetMenu
GetWindowLongA
GetActiveWindow
GetLastActivePopup
TabbedTextOutW
GetMonitorInfoA
GetKeyState
CheckDlgButton
DragDetect
GetClassLongW
GetClassNameW
EndPaint
RegisterWindowMessageW
MenuItemFromPoint
MonitorFromWindow
SendNotifyMessageW
CheckMenuRadioItem
MapVirtualKeyExA
GetTitleBarInfo
DispatchMessageA
wvsprintfA
ToAsciiEx
SetRect
ChildWindowFromPointEx
advapi32
ChangeServiceConfig2A
RegCreateKeyExA
RegQueryValueExW
RegRestoreKeyA
SetEntriesInAclA
CreateProcessAsUserA
RegisterEventSourceA
RegisterEventSourceW
CloseServiceHandle
RegCreateKeyExW
RegEnumValueA
GetUserNameA
GetSecurityInfo
RegDeleteKeyW
RegDeleteValueW
LockServiceDatabase
RegQueryInfoKeyW
RegNotifyChangeKeyValue
GetSidSubAuthorityCount
BuildTrusteeWithNameW
CryptGenRandom
ImpersonateSelf
RegConnectRegistryA
LookupAccountNameW
RegSetValueExW
GetSecurityDescriptorControl
MapGenericMask
RegConnectRegistryW
CheckTokenMembership
CreateProcessAsUserW
CopySid
RegEnumValueW
CryptGetKeyParam
RegQueryValueA
GetKernelObjectSecurity
ConvertStringSidToSidA
RevertToSelf
DeleteService
CryptAcquireContextA
InitiateSystemShutdownA
SetNamedSecurityInfoW
CryptDeriveKey
RegUnLoadKeyA
WriteEncryptedFileRaw
RegEnumKeyW
RegLoadKeyW
QueryServiceConfigW
CryptDestroyKey
OpenProcessToken
GetSidIdentifierAuthority
SetTokenInformation
SetSecurityDescriptorOwner
SetNamedSecurityInfoA
IsValidSecurityDescriptor
LogonUserW
InitiateSystemShutdownExW
GetFileSecurityA
AccessCheck
GetUserNameW
EqualSid
RegSetValueA
GetFileSecurityW
LookupAccountSidW
CryptDestroyHash
CryptHashData
LsaClose
CryptReleaseContext
UnlockServiceDatabase
RegDeleteKeyA
RegEnumKeyA
CreateServiceA
InitializeAcl
StartServiceCtrlDispatcherW
CryptSetProvParam
AddAce
LsaNtStatusToWinError
FreeSid
CloseEncryptedFileRaw
IsValidSid
LsaLookupNames
EnumServicesStatusA
InitializeSecurityDescriptor
CryptImportKey
RegQueryInfoKeyA
ConvertStringSidToSidW
LookupPrivilegeNameA
SetSecurityInfo
CryptEncrypt
SetEntriesInAclW
RegSaveKeyA
LookupPrivilegeValueA
OpenServiceA
SetFileSecurityA
RegSaveKeyW
ReportEventA
RegOpenKeyW
GetAclInformation
GetSecurityDescriptorGroup
OpenEncryptedFileRawW
ReportEventW
GetAce
RegCreateKeyA
GetEffectiveRightsFromAclA
RegCreateKeyW
SetThreadToken
EnumDependentServicesW
RegSetValueExA
LsaAddAccountRights
CryptAcquireContextW
DuplicateToken
RegDeleteValueA
EqualPrefixSid
RegEnumKeyExW
RegEnumKeyExA
SetSecurityDescriptorControl
DeleteAce
SetServiceStatus
OpenSCManagerW
QueryServiceStatus
RegGetKeySecurity
BuildTrusteeWithSidW
GetSidSubAuthority
RegOpenKeyExA
BuildExplicitAccessWithNameW
RegSetValueW
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegRestoreKeyW
RegFlushKey
SetSecurityDescriptorGroup
ChangeServiceConfigW
LookupAccountNameA
AllocateAndInitializeSid
SetSecurityDescriptorDacl
RegCloseKey
OpenSCManagerA
GetExplicitEntriesFromAclW
EncryptFileW
GetSecurityDescriptorLength
RegDisablePredefinedCache
LookupPrivilegeValueW
DeregisterEventSource
GetSidLengthRequired
ReadEncryptedFileRaw
RegOpenKeyExW
ChangeServiceConfigA
CryptEnumProvidersW
RegUnLoadKeyW
StartServiceCtrlDispatcherA
DuplicateTokenEx
RegLoadKeyA
CryptExportKey
StartServiceW
GetNamedSecurityInfoA
LsaQueryInformationPolicy
QueryServiceStatusEx
CryptVerifySignatureA
QueryServiceConfigA
LookupAccountSidA
GetSecurityDescriptorOwner
ImpersonateLoggedOnUser
LsaRemoveAccountRights
CryptGetHashParam
GetTokenInformation
StartServiceA
ConvertSidToStringSidW
RegOpenCurrentUser
LsaLookupSids
GetSecurityDescriptorSacl
LookupPrivilegeDisplayNameA
CryptDecrypt
CryptCreateHash
GetNamedSecurityInfoW
OpenServiceW
RegSetKeySecurity
ImpersonateNamedPipeClient
CreateWellKnownSid
LogonUserA
LsaOpenPolicy
SetSecurityDescriptorSacl
IsValidAcl
AddAccessAllowedAce
RegOpenKeyA
CreateServiceW
CryptGetUserKey
OpenThreadToken
SetFileSecurityW
SetServiceObjectSecurity
AdjustTokenPrivileges
MakeAbsoluteSD
ControlService
QueryServiceLockStatusW
RegisterServiceCtrlHandlerA
GetSecurityDescriptorDacl
CryptGenKey
MakeSelfRelativeSD
RegQueryValueExA
InitializeSid
RegQueryValueW
GetLengthSid
RegisterServiceCtrlHandlerW
ChangeServiceConfig2W
LsaFreeMemory
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegisterServiceCtrlHandlerExA
gdi32
DeleteDC
OffsetViewportOrgEx
GetStretchBltMode
SetMiterLimit
CreateRectRgnIndirect
GetRegionData
GetNearestPaletteIndex
GetBrushOrgEx
SetGraphicsMode
SetTextAlign
SetBkColor
CreatePolyPolygonRgn
PolylineTo
GetTextFaceW
CloseEnhMetaFile
PlayMetaFileRecord
GetBoundsRect
ResetDCW
ScaleViewportExtEx
PaintRgn
TranslateCharsetInfo
PolyBezierTo
GetMapMode
CreateDiscardableBitmap
GetFontData
CreateFontIndirectA
GetTextExtentPoint32A
GetCurrentPositionEx
PtVisible
SetDIBits
DPtoLP
AbortPath
GetRgnBox
GdiComment
SetDIBitsToDevice
EnumFontFamiliesExA
Rectangle
GetTextCharacterExtra
GetCharWidthW
GetKerningPairsA
GetTextFaceA
CreatePalette
RectInRegion
GetCharABCWidthsW
ScaleWindowExtEx
SetBitmapDimensionEx
SetWindowOrgEx
CreateHatchBrush
MaskBlt
SetColorAdjustment
SetDIBColorTable
SetICMMode
SetViewportOrgEx
ExtSelectClipRgn
GetPaletteEntries
Polygon
GetMetaRgn
GetNearestColor
GetClipRgn
GetMetaFileA
ExtTextOutA
WidenPath
GetTextExtentExPointA
GetTextExtentPointW
GetSystemPaletteEntries
GetAspectRatioFilterEx
CreateMetaFileA
PolyPolygon
TextOutA
SetLayout
LPtoDP
CreateICW
FlattenPath
CreatePolygonRgn
RestoreDC
MoveToEx
CreateSolidBrush
SetROP2
SetBkMode
CreateDCW
GetTextColor
SetBoundsRect
GetBitmapBits
StretchBlt
AbortDoc
AddFontResourceA
GetViewportOrgEx
GetDeviceCaps
Escape
GetViewportExtEx
CreateBitmapIndirect
CreateICA
GetEnhMetaFileA
CopyEnhMetaFileW
Polyline
GetPixel
CreateEnhMetaFileW
DrawEscape
FillRgn
GetObjectW
Chord
RealizePalette
GetLayout
SetTextCharacterExtra
SetDCPenColor
SetAbortProc
SwapBuffers
CreateFontA
EnumEnhMetaFile
GetCharWidthA
GetOutlineTextMetricsA
SetStretchBltMode
SetPixelFormat
ResizePalette
SetPixelV
CreateDIBitmap
EnumFontFamiliesW
StartDocW
CreateEllipticRgnIndirect
GetPolyFillMode
RectVisible
StartDocA
GetEnhMetaFileHeader
SetPaletteEntries
ModifyWorldTransform
OffsetClipRgn
Pie
PolyBezier
CreateMetaFileW
ChoosePixelFormat
SetBitmapBits
UpdateColors
GetCharacterPlacementW
GetMiterLimit
GetGraphicsMode
PolyDraw
GetGlyphOutlineW
EndPage
EqualRgn
SetViewportExtEx
Ellipse
BeginPath
CreateCompatibleDC
SetPixel
SelectClipRgn
GetCharABCWidthsFloatW
CreateHalftonePalette
SetMapperFlags
StrokeAndFillPath
ExtEscape
CopyMetaFileW
GetEnhMetaFilePaletteEntries
GetTextExtentExPointW
SetEnhMetaFileBits
PolyPolyline
GetTextAlign
InvertRgn
CreateFontW
OffsetRgn
CopyMetaFileA
TextOutW
ArcTo
EnumFontsA
GetBkColor
GetTextCharset
ExtFloodFill
GetObjectType
GetDIBits
LineDDA
SetMetaFileBitsEx
SetDCBrushColor
EndPath
GetMetaFileBitsEx
GetWindowOrgEx
CreatePenIndirect
EnumFontsW
SetTextJustification
CreateEllipticRgn
BitBlt
SaveDC
AnimatePalette
GetFontLanguageInfo
CreateCompatibleBitmap
SetPolyFillMode
FillPath
DeleteMetaFile
CopyEnhMetaFileA
FrameRgn
CreateBrushIndirect
GetEnhMetaFileBits
DeleteEnhMetaFile
CreatePatternBrush
UnrealizeObject
SetWinMetaFileBits
FloodFill
CreateRoundRectRgn
IntersectClipRect
EnumFontFamiliesA
PlayEnhMetaFileRecord
CreateRectRgn
PtInRegion
PatBlt
PlgBlt
GetTextMetricsW
GetEnhMetaFileW
CombineRgn
GetDCOrgEx
GetTextExtentPoint32W
GetCharWidth32W
DeleteObject
GetCharABCWidthsA
ExtTextOutW
OffsetWindowOrgEx
CreateDCA
CloseFigure
GetCharABCWidthsFloatA
CreateDIBSection
GetTextMetricsA
GetWinMetaFileBits
GdiFlush
StretchDIBits
SetTextColor
GetPath
ExtCreatePen
SelectObject
CreatePen
CloseMetaFile
CreateDIBPatternBrushPt
GetArcDirection
GetPixelFormat
CreateEnhMetaFileA
PlayEnhMetaFile
EndDoc
SetMapMode
Arc
StartPage
CreateBitmap
GetStockObject
CreateFontIndirectW
PathToRegion
SelectClipPath
GetDIBColorTable
GetObjectA
ExcludeClipRect
EnumFontFamiliesExW
LineTo
GetClipBox
SetArcDirection
SetRectRgn
SetWindowExtEx
SetWorldTransform
GetTextCharsetInfo
DescribePixelFormat
GetColorAdjustment
GetWindowExtEx
ExtCreateRegion
EnumMetaFile
GetCurrentObject
AngleArc
ResetDCA
RoundRect
GetGlyphOutlineA
SetICMProfileA
GetCharWidthFloatA
EnumObjects
SetBrushOrgEx
GetTextExtentPointA
GetCharWidth32A
StrokePath
GetBkMode
RemoveFontResourceA
PlayMetaFile
SelectPalette
GetROP2
GetBitmapDimensionEx
ole32
OleRegGetMiscStatus
OleQueryLinkFromData
CoCopyProxy
OleDestroyMenuDescriptor
WriteClassStm
CoCreateGuid
CoGetInterfaceAndReleaseStream
OleInitialize
OleGetClipboard
OleRegEnumVerbs
CoSuspendClassObjects
CreateFileMoniker
CLSIDFromString
StgOpenStorageOnILockBytes
CoCreateInstanceEx
FreePropVariantArray
CoDisconnectObject
OleIsRunning
StgOpenStorage
GetClassFile
StringFromGUID2
StringFromCLSID
CoGetMalloc
CoInitializeEx
CreateGenericComposite
OleSetContainedObject
CreateItemMoniker
OleSaveToStream
OleQueryCreateFromData
CreateClassMoniker
CoRegisterClassObject
RegisterDragDrop
CoMarshalInterface
CoRevokeMallocSpy
GetHGlobalFromILockBytes
StringFromIID
OleCreateLinkFromData
MkParseDisplayName
CoReleaseMarshalData
OleRegGetUserType
CreateStreamOnHGlobal
OleCreateLinkToFile
CoTaskMemFree
IsAccelerator
CoQueryProxyBlanket
DoDragDrop
StgCreateStorageEx
BindMoniker
OleDraw
CoRevokeClassObject
OleTranslateAccelerator
CoUnmarshalInterface
CoUninitialize
CoInitializeSecurity
WriteClassStg
OleCreateFromData
ReadFmtUserTypeStg
CoResumeClassObjects
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
ProgIDFromCLSID
CoTaskMemAlloc
SetConvertStg
OleSetClipboard
ReadClassStg
CoRevertToSelf
OleLoadFromStream
OleCreateMenuDescriptor
CoGetObject
OleSave
CreateDataAdviseHolder
OleCreate
RevokeDragDrop
OleRun
OleLockRunning
OleUninitialize
CoRegisterMallocSpy
IIDFromString
CoGetClassObject
StgIsStorageILockBytes
GetRunningObjectTable
OleFlushClipboard
ReleaseStgMedium
CoTreatAsClass
ReadClassStm
StgCreateDocfileOnILockBytes
CoLockObjectExternal
CoTaskMemRealloc
OleSetMenuDescriptor
CoImpersonateClient
CreateBindCtx
CreateILockBytesOnHGlobal
StgCreateDocfile
CoSetProxyBlanket
OleCreateStaticFromData
CreateOleAdviseHolder
CoInitialize
OleDuplicateData
CoLoadLibrary
CLSIDFromProgID
OleIsCurrentClipboard
OleCreateFromFile
CoFileTimeNow
CoRegisterMessageFilter
PropVariantClear
StgIsStorageFile
WriteFmtUserTypeStg
OleGetIconOfClass
GetHGlobalFromStream
CoFreeUnusedLibraries
OleLoad
comctl32
ImageList_GetIconSize
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_Remove
ImageList_Draw
InitializeFlatSB
ImageList_BeginDrag
ord17
ImageList_AddMasked
ImageList_GetImageInfo
CreateToolbarEx
ImageList_Merge
CreatePropertySheetPageA
CreateStatusWindowW
ImageList_GetIcon
ImageList_GetBkColor
ImageList_AddIcon
ImageList_Duplicate
PropertySheetW
ImageList_Create
ImageList_Add
ImageList_DrawIndirect
FlatSB_EnableScrollBar
CreateUpDownControl
ImageList_Copy
ImageList_Destroy
ImageList_Replace
ImageList_GetImageCount
_TrackMouseEvent
ImageList_Write
InitCommonControlsEx
ImageList_LoadImageW
ImageList_DragShowNolock
ImageList_GetDragImage
PropertySheetA
ImageList_ReplaceIcon
ImageList_SetFlags
ImageList_SetBkColor
ImageList_LoadImage
ImageList_SetImageCount
ImageList_DrawEx
ImageList_SetOverlayImage
CreatePropertySheetPageW
ImageList_LoadImageA
DestroyPropertySheetPage
ImageList_Read
ImageList_SetIconSize
FlatSB_ShowScrollBar
ImageList_DragEnter
MakeDragList
ImageList_DragMove
ImageList_DragLeave
DrawStatusTextW
shell32
FindExecutableA
DragAcceptFiles
SHEmptyRecycleBinA
SHBrowseForFolderA
SHFileOperationW
DragFinish
SHCreateDirectoryExA
DuplicateIcon
SHGetPathFromIDListW
ord155
SHGetFileInfoW
DragQueryFileW
ShellExecuteA
SHGetInstanceExplorer
SHBindToParent
SHGetDataFromIDListW
ShellExecuteExW
SHGetSpecialFolderPathW
Shell_NotifyIconW
SHGetFolderPathW
SHGetMalloc
SHGetFileInfoA
DoEnvironmentSubstW
ExtractIconExA
SHBrowseForFolderW
SHChangeNotify
SHGetSpecialFolderLocation
ExtractIconExW
ShellExecuteExA
SHCreateDirectoryExW
SHGetDesktopFolder
SHGetFolderLocation
ShellExecuteW
SHFreeNameMappings
SHAddToRecentDocs
ExtractIconA
SHFileOperationA
SHGetFolderPathA
SHGetPathFromIDListA
SHGetDataFromIDListA
Shell_NotifyIconA
SHGetSpecialFolderPathA
DragQueryFileA
SHAppBarMessage
ExtractIconW
DragQueryPoint
CommandLineToArgvW
FindExecutableW
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 488KB - Virtual size: 485KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ