Overview
overview
7Static
static
3USB Flash ...AT.exe
windows7-x64
1USB Flash ...AT.exe
windows10-2004-x64
1USB Flash ...CK.exe
windows7-x64
7USB Flash ...CK.exe
windows10-2004-x64
7nusb21/nusb21e.exe
windows7-x64
1nusb21/nusb21e.exe
windows10-2004-x64
1nusb21/nusb21r.exe
windows7-x64
1nusb21/nusb21r.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
USB Flash Disk Utility/FORMAT.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
USB Flash Disk Utility/FORMAT.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
USB Flash Disk Utility/LOCK.exe
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
USB Flash Disk Utility/LOCK.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
nusb21/nusb21e.exe
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
nusb21/nusb21e.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
nusb21/nusb21r.exe
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
nusb21/nusb21r.exe
Resource
win10v2004-20231020-en
General
-
Target
cfec86a6f2399e8e88fa0296f2b412b2044da55357379a6555273f036634dcd8.zip.zip
-
Size
1.5MB
-
MD5
d8e4608e2ef3bd0d17945b1d1dd9a2bc
-
SHA1
d491881ddc4e32de38323258f1a1f1ac816c837e
-
SHA256
746e276258101a74e3e292a86cf45e50dc46b10042815c7382ac346601ff9673
-
SHA512
d83fde11df1f02aed0a878e6a3ba6d339f72872a1db396ff3e2338846a6fac4e6f630fe110a11edc809028c2ed231fe2722882be22a218859787c7997b199b1a
-
SSDEEP
49152:wQCs5TgeoQwjU8bVUWlh5g5Zrj+TUSx1uF:wQCIgeRwjx6WljgXrKxi
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack002/USB Flash Disk Utility/FORMAT.EXE unpack002/USB Flash Disk Utility/LOCK.EXE unpack002/nusb21/nusb21e.exe unpack002/nusb21/nusb21r.exe
Files
-
cfec86a6f2399e8e88fa0296f2b412b2044da55357379a6555273f036634dcd8.zip.zip.zip
Password: infected
-
cfec86a6f2399e8e88fa0296f2b412b2044da55357379a6555273f036634dcd8.zip.zip
-
USB Flash Disk Utility/FORMAT.EXE.exe windows:4 windows x86
0daebf4035fe491410f79c8bde02115a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
ExitProcess
GetCommandLineA
ExitThread
CreateThread
HeapReAlloc
HeapSize
GetACP
GetTimeFormatA
GetDateFormatA
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetFileType
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapFree
RaiseException
RtlUnwind
GetProcessHeap
GetProfileStringA
InterlockedExchange
GetFileTime
GetFileSize
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
SetErrorMode
GetThreadLocale
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GlobalFlags
lstrcpynA
MulDiv
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
GlobalAlloc
lstrcmpA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
lstrlenA
InterlockedDecrement
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
FlushFileBuffers
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
CreateProcessA
DeleteFileA
SetLastError
GetCurrentThreadId
GetCurrentProcess
OutputDebugStringA
GetVersionExA
GetWindowsDirectoryA
lstrcpyA
lstrcatA
ReadFile
WriteFile
CopyFileA
GetFileAttributesA
SetFileAttributesA
FindNextFileA
FindClose
FormatMessageA
GetLogicalDrives
GetVolumeInformationA
DeviceIoControl
CreateFileA
CloseHandle
FreeLibrary
ResetEvent
WaitForSingleObject
LoadLibraryA
GetLastError
GetProcAddress
CreateEventA
Sleep
FindFirstFileA
QueryDosDeviceA
SizeofResource
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
SetHandleCount
user32
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
CharNextA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
LoadStringA
SendMessageA
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
GetWindowLongA
GetDlgItem
IsWindowEnabled
CopyRect
GetSysColor
GetCursorPos
ScreenToClient
PtInRect
GetFocus
GetParent
SetFocus
InvalidateRect
UpdateWindow
KillTimer
SetTimer
GetSystemMetrics
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
FindWindowA
SetForegroundWindow
IsIconic
ShowWindow
MessageBeep
IsCharAlphaA
IsCharAlphaNumericA
DefDlgProcA
IsWindowUnicode
wsprintfA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
GetClassNameA
InflateRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
IntersectRect
GetDC
ReleaseDC
GetMenuCheckMarkDimensions
GetClassLongA
LoadBitmapA
MoveWindow
gdi32
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetWindowExtEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetTextExtentPoint32A
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
comctl32
ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize
olepro32
ord253
oleaut32
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantCopy
Sections
.text Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
USB Flash Disk Utility/LOCK.EXE.exe windows:4 windows x86
d27ab4775d843d1b61273bf3da165416
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetFileTime
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
RtlUnwind
GetCommandLineA
RaiseException
HeapSize
HeapReAlloc
GetACP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
GetTickCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
GetProfileStringA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
SetErrorMode
GetThreadLocale
SizeofResource
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
MulDiv
GlobalFree
GetModuleFileNameA
GlobalAlloc
GetCurrentThread
lstrcmpA
InterlockedIncrement
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
GlobalLock
GlobalUnlock
lstrcpynA
InterlockedDecrement
FindResourceA
LoadResource
LockResource
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
lstrlenA
MultiByteToWideChar
GetCurrentDirectoryA
DeleteFileA
SetCurrentDirectoryA
GetStartupInfoA
CreateProcessA
GetVersion
SetLastError
GetCurrentThreadId
GetCurrentProcess
GetVersionExA
GetWindowsDirectoryA
lstrcpyA
lstrcatA
ReadFile
WriteFile
CopyFileA
GetFileAttributesA
SetFileAttributesA
FindNextFileA
FindClose
FormatMessageA
GetLogicalDrives
GetVolumeInformationA
DeviceIoControl
CreateFileA
CloseHandle
FreeLibrary
ResetEvent
WaitForSingleObject
LoadLibraryA
GetLastError
GetProcAddress
CreateEventA
Sleep
FindFirstFileA
UnhandledExceptionFilter
QueryDosDeviceA
user32
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetDlgItem
GetSysColorBrush
GetWindowTextA
GetDlgCtrlID
BeginPaint
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
TabbedTextOutA
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
EnumWindows
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadStringA
IsIconic
ShowWindow
EnableWindow
RedrawWindow
SetActiveWindow
DrawAnimatedRects
SetParent
FindWindowA
wsprintfA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
EnumChildWindows
SystemParametersInfoA
GetClassNameA
GetWindowRect
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
LoadMenuA
GetSubMenu
SetMenuDefaultItem
IsWindow
KillTimer
LoadIconA
LoadCursorA
GetDesktopWindow
PtInRect
GrayStringA
GetWindowTextLengthA
DrawTextA
DefDlgProcA
IsWindowUnicode
RegisterWindowMessageA
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
SetCursor
PostQuitMessage
DestroyMenu
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
MoveWindow
IsDialogMessageA
GetWindow
EndPaint
SetDlgItemTextA
GetKeyState
SetWindowTextA
gdi32
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
ShellExecuteA
SHAppBarMessage
Shell_NotifyIconA
comctl32
ord17
oledlg
ord8
ole32
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoFreeUnusedLibraries
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
olepro32
ord253
oleaut32
SysAllocString
SysFreeString
VariantChangeType
VariantCopy
SysAllocStringByteLen
SysAllocStringLen
SysStringLen
VariantTimeToSystemTime
VariantClear
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
nusb21/nusb21e.exe.exe windows:5 windows x86
1494de9b53e05fc1f40cb92afbdd6ce4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 549KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
nusb21/nusb21r.exe.exe windows:5 windows x86
1494de9b53e05fc1f40cb92afbdd6ce4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ