Static task
static1
Behavioral task
behavioral1
Sample
690b1dae65ce1b9ee069419996a1da07a86eb560d84fb9c1d2de6515f4d48209.exe
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral2
Sample
690b1dae65ce1b9ee069419996a1da07a86eb560d84fb9c1d2de6515f4d48209.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
General
-
Target
690b1dae65ce1b9ee069419996a1da07a86eb560d84fb9c1d2de6515f4d48209
-
Size
13.8MB
-
MD5
093d902bfc40947f1a7dbc4d9a714a73
-
SHA1
c5e9d8e17f886dcb4b896c6e33bb285aecbe9c9b
-
SHA256
690b1dae65ce1b9ee069419996a1da07a86eb560d84fb9c1d2de6515f4d48209
-
SHA512
c7847ff96914e88817ca3568edb22ae9ac536d2cae82383a232d823b410ac1b27d1767db7bbc389363aaab57cba2d108c8e66580c60e0d6cbc915bd3afc09054
-
SSDEEP
196608:1br6yP4fAaVzWDeKsUVIdNLtatZaoU4ouw/UrK9qfKtKMo9:Nr6yyVdNZPKiX+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 690b1dae65ce1b9ee069419996a1da07a86eb560d84fb9c1d2de6515f4d48209 -
resource yara_rule sample dropper_html
Files
-
690b1dae65ce1b9ee069419996a1da07a86eb560d84fb9c1d2de6515f4d48209.exe windows:5 windows x86 arch:x86
f91d11f220b14555dfadac098d015df7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetIconSize
InitCommonControlsEx
ImageList_GetIcon
ImageList_Draw
InitializeFlatSB
FlatSB_EnableScrollBar
FlatSB_ShowScrollBar
ericapi
EricInitialisiere
EricBearbeiteVorgang
EricCreateTH
EricHoleFehlerText
EricHoleZertifikatEigenschaften
EricGetHandleToCertificate
EricPruefeSteuernummer
EricBeende
EricMakeElsterStnr
EricHoleFinanzamtsdaten
EricHoleFinanzaemter
EricHoleFinanzamtLandNummern
EricCloseHandleToCertificate
EricEinstellungZuruecksetzen
EricEinstellungSetzen
EricRueckgabepufferLaenge
EricRueckgabepufferInhalt
EricRueckgabepufferFreigeben
EricRueckgabepufferErzeugen
kernel32
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetProcessHeap
CompareStringW
IsValidCodePage
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InterlockedCompareExchange
lstrcpynA
GetACP
GetStdHandle
FreeEnvironmentStringsA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
Sleep
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
CopyFileA
LocalFree
FormatMessageA
MulDiv
GetLocaleInfoA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
ResumeThread
WaitForSingleObject
SetEvent
ResetEvent
GetExitCodeThread
LocalHandle
LocalAlloc
GlobalFlags
GetModuleHandleA
GetCurrentProcess
lstrlenA
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetLastError
CreateMutexA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetExitCodeProcess
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFileTime
CreateFileA
CompareFileTime
lstrcpyA
WinExec
lstrcatA
lstrcmpA
SetLastError
LoadLibraryW
lstrlenW
WaitForMultipleObjects
DeleteFileA
GetTempFileNameA
SearchPathA
GetVersionExA
GetSystemInfo
GetVolumeInformationA
OutputDebugStringA
FindNextChangeNotification
FindFirstChangeNotificationA
TerminateThread
QueryPerformanceCounter
FreeResource
RemoveDirectoryA
GetDiskFreeSpaceA
SetFilePointer
SystemTimeToFileTime
GetFileAttributesA
ReadFile
LocalFileTimeToFileTime
CreateDirectoryA
SetFileTime
WriteFile
GetLogicalDrives
CopyFileExA
GetLocalTime
GetFileSize
GetFileInformationByHandle
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetTickCount
SetFileAttributesA
GetDriveTypeA
SetVolumeLabelA
GlobalSize
GetThreadLocale
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetModuleFileNameW
GetModuleFileNameA
GetCurrentProcessId
GetFullPathNameA
SetThreadPriority
SuspendThread
CreateEventA
MoveFileA
GetStringTypeExA
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetShortPathNameA
VirtualProtect
InterlockedExchange
GlobalReAlloc
GetProfileIntA
InterlockedIncrement
GetModuleHandleW
LoadLibraryExA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetFileAttributesExA
GetFileSizeEx
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
GetTempPathA
GetSystemDirectoryW
SetErrorMode
FindResourceExA
HeapAlloc
HeapFree
RaiseException
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
SetEnvironmentVariableA
ExitProcess
GetTimeZoneInformation
GetFileType
GetCommandLineA
GetStartupInfoA
HeapReAlloc
VirtualAlloc
VirtualQuery
SetStdHandle
ExitThread
CreateThread
HeapSize
VirtualFree
HeapCreate
user32
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
ScrollWindow
TrackPopupMenu
SetMenu
GetScrollRange
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
SetWindowPlacement
CallWindowProcA
GetMenu
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetIconInfo
CharToOemBuffA
OemToCharBuffA
IsWindowEnabled
MoveWindow
SetFocus
GetWindowThreadProcessId
SetWindowPos
TrackMouseEvent
DestroyIcon
IntersectRect
DrawStateA
MonitorFromWindow
EnumDisplayMonitors
GetMonitorInfoA
GetClassNameA
SetRectEmpty
CheckMenuItem
MapWindowPoints
SetWindowRgn
GetWindowLongA
EqualRect
DefWindowProcA
RegisterClassA
SetScrollRange
SetScrollPos
GetScrollPos
FrameRect
SetCursorPos
LoadBitmapA
IsChild
ShowScrollBar
IsClipboardFormatAvailable
CreatePopupMenu
IsZoomed
PeekMessageA
TranslateMessage
GetDesktopWindow
GetWindowDC
IsIconic
CreateMenu
LockWindowUpdate
DrawIconEx
SetWindowLongA
IsWindowVisible
InsertMenuA
GetMenuStringA
EnableMenuItem
DeleteMenu
SystemParametersInfoA
LoadAcceleratorsA
CopyAcceleratorTableA
GetActiveWindow
TranslateAcceleratorA
GetSysColorBrush
ModifyMenuA
GetLastActivePopup
MapVirtualKeyA
RedrawWindow
ShowWindow
DestroyWindow
MessageBoxA
LoadIconA
WindowFromPoint
GetMessageA
DispatchMessageA
DrawFrameControl
IsRectEmpty
GetDlgCtrlID
wsprintfA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetCapture
GetCapture
ReleaseDC
GetDC
SetRect
GetClipboardData
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
CopyIcon
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadImageA
SetActiveWindow
OffsetRect
FillRect
GetKeyState
GetWindow
ValidateRect
LoadCursorA
GetNextDlgGroupItem
GetWindowRgn
DrawFocusRect
CopyRect
GetSystemMetrics
GetCursorPos
SetCursor
SendNotifyMessageA
TranslateMDISysAccel
DrawMenuBar
GetWindowContextHelpId
GetCaretPos
InvertRect
HideCaret
RegisterWindowMessageA
IsWindow
ReleaseCapture
InflateRect
KillTimer
SetTimer
InvalidateRect
MapDialogRect
FindWindowA
UpdateWindow
GetWindowRect
BringWindowToTop
GetAsyncKeyState
GetFocus
PtInRect
MessageBeep
GetMessagePos
ScreenToClient
ClientToScreen
GetClientRect
LoadMenuA
RemoveMenu
GetSubMenu
GetMenuItemCount
AppendMenuA
PostMessageA
EnableWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
WinHelpA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetMenuState
GetKeyNameTextA
SendMessageA
GetParent
GetSysColor
GetMenuItemInfoA
DestroyMenu
BeginPaint
GetMenuItemID
EndPaint
DefMDIChildProcA
DefFrameProcA
CharUpperBuffA
GetDoubleClickTime
GetMenuDefaultItem
SetMenuDefaultItem
WindowFromDC
InvalidateRgn
CharNextA
EnumChildWindows
PostThreadMessageA
SubtractRect
GetUpdateRect
IsMenu
UpdateLayeredWindow
EnableScrollBar
SetClassLongA
UnionRect
NotifyWinEvent
DrawEdge
UnregisterClassA
GetTabbedTextExtentA
GetSystemMenu
DestroyCursor
UnpackDDElParam
ReuseDDElParam
InsertMenuItemA
DrawIcon
RegisterClipboardFormatA
SetWindowContextHelpId
WaitMessage
CreateAcceleratorTableA
DestroyAcceleratorTable
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
IsCharLowerA
ShowOwnedPopups
PostQuitMessage
GetDCEx
SetParent
CharUpperA
SendMessageTimeoutA
CopyImage
gdi32
CreateEllipticRgnIndirect
PolyBezier
Arc
SetPixelV
GetSystemPaletteEntries
GetNearestPaletteIndex
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
SetPaletteEntries
ExtFloodFill
GetPaletteEntries
GetRgnBox
OffsetRgn
EnumFontFamiliesExA
Polygon
Polyline
CreateFontA
GetWindowOrgEx
GetTextExtentPointA
GetCharWidthA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
CreateEllipticRgn
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetRectRgn
SetDIBColorTable
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
CreateRoundRectRgn
CreateHatchBrush
ExtCreatePen
GetObjectType
CreatePatternBrush
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
SelectClipRgn
SetArcDirection
SetTextAlign
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
GetDCOrgEx
CopyMetaFileA
SetEnhMetaFileBits
GetEnhMetaFileHeader
SetWinMetaFileBits
DeleteEnhMetaFile
GetEnhMetaFilePaletteEntries
CreatePalette
SelectPalette
PlayEnhMetaFile
CreateRectRgn
CombineRgn
SetBkMode
StretchDIBits
SetBkColor
SaveDC
CreateRectRgnIndirect
ExtSelectClipRgn
RestoreDC
RealizePalette
GetDIBits
CreateICA
CreatePolygonRgn
CreateBitmap
Ellipse
SetStretchBltMode
LineTo
MoveToEx
CreateDIBSection
GetViewportOrgEx
GetClipBox
SetPixel
GetPixel
CreateSolidBrush
CreatePen
GetCurrentObject
GetTextColor
SetTextColor
PatBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
GetTextMetricsA
StretchBlt
BitBlt
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
CreateDCA
DeleteDC
RoundRect
SelectObject
GetStockObject
GetDeviceCaps
CreateFontIndirectA
Rectangle
GetTextExtentPoint32A
msimg32
AlphaBlend
TransparentBlt
comdlg32
ChooseFontA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
GetJobA
ord201
OpenPrinterA
DocumentPropertiesA
ClosePrinter
ord202
EnumPrintersA
advapi32
RegCreateKeyA
GetUserNameA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueA
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegEnumKeyExA
shell32
SHBrowseForFolderA
DragAcceptFiles
DragFinish
DragQueryFileA
ShellExecuteExA
DragQueryPoint
ShellExecuteA
SHAppBarMessage
SHGetMalloc
SHGetPathFromIDListA
ExtractIconA
SHGetFileInfoA
SHGetSpecialFolderPathA
shlwapi
PathRemoveFileSpecW
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathIsUNCA
StrFormatByteSizeA
PathFindFileNameA
oledlg
ord8
ole32
StringFromGUID2
CoCreateInstance
StgCreateDocfile
CLSIDFromString
CLSIDFromProgID
OleUninitialize
CoRevokeClassObject
OleRun
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal
CoRegisterClassObject
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoInitialize
CoFreeUnusedLibraries
OleInitialize
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
DoDragDrop
OleGetClipboard
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
StringFromCLSID
oleaut32
VariantClear
GetActiveObject
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
SysAllocString
RegisterActiveObject
RevokeActiveObject
SysAllocStringByteLen
SysStringByteLen
SysStringLen
VarBstrFromDate
VariantCopy
VarUdateFromDate
SafeArrayDestroy
RegisterTypeLi
LoadTypeLi
OleCreateFontIndirect
SystemTimeToVariantTime
VarBstrCmp
VariantTimeToSystemTime
urlmon
URLDownloadToFileA
IsValidURL
gdiplus
GdipFree
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdiplusShutdown
GdipGetImagePalette
GdiplusStartup
GdipBitmapUnlockBits
GdipAlloc
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipBitmapLockBits
GdipCreateBitmapFromScan0
xerces-c_3_1
??0SAXParseException@xercesc_3_1@@QAE@ABV01@@Z
??1MemBufInputSource@xercesc_3_1@@UAE@XZ
?setIssueFatalErrorIfNotFound@InputSource@xercesc_3_1@@UAEX_N@Z
?setSystemId@InputSource@xercesc_3_1@@UAEXQB_W@Z
?setPublicId@InputSource@xercesc_3_1@@UAEXQB_W@Z
?setEncoding@InputSource@xercesc_3_1@@UAEXQB_W@Z
?getIssueFatalErrorIfNotFound@InputSource@xercesc_3_1@@UBE_NXZ
?getSystemId@InputSource@xercesc_3_1@@UBEPB_WXZ
?getPublicId@InputSource@xercesc_3_1@@UBEPB_WXZ
?getEncoding@InputSource@xercesc_3_1@@UBEPB_WXZ
?makeStream@MemBufInputSource@xercesc_3_1@@UBEPAVBinInputStream@2@XZ
??2XMemory@xercesc_3_1@@SAPAXI@Z
??0MemBufInputSource@xercesc_3_1@@QAE@QBEKQBD_NQAVMemoryManager@1@@Z
??3XMemory@xercesc_3_1@@SAXPAX@Z
?fgXercescDefaultLocale@XMLUni@xercesc_3_1@@2QBDB
?Initialize@XMLPlatformUtils@xercesc_3_1@@SAXQBD0QAVPanicHandler@2@QAVMemoryManager@2@@Z
?createXMLReader@XMLReaderFactory@xercesc_3_1@@SAPAVSAX2XMLReader@2@QAVMemoryManager@2@QAVXMLGrammarPool@2@@Z
?fgSAX2CoreNameSpaces@XMLUni@xercesc_3_1@@2QB_WB
?Terminate@XMLPlatformUtils@xercesc_3_1@@SAXXZ
?startElement@DefaultHandler@xercesc_3_1@@UAEXQB_W00ABVAttributes@2@@Z
?startDocument@DefaultHandler@xercesc_3_1@@UAEXXZ
?endElement@DefaultHandler@xercesc_3_1@@UAEXQB_W00@Z
?endDocument@DefaultHandler@xercesc_3_1@@UAEXXZ
?characters@DefaultHandler@xercesc_3_1@@UAEXQB_WK@Z
??0DefaultHandler@xercesc_3_1@@QAE@XZ
?externalEntityDecl@DefaultHandler@xercesc_3_1@@UAEXQB_W00@Z
?internalEntityDecl@DefaultHandler@xercesc_3_1@@UAEXQB_W0@Z
?attributeDecl@DefaultHandler@xercesc_3_1@@UAEXQB_W0000@Z
?elementDecl@DefaultHandler@xercesc_3_1@@UAEXQB_W0@Z
?startEntity@DefaultHandler@xercesc_3_1@@UAEXQB_W@Z
?startDTD@DefaultHandler@xercesc_3_1@@UAEXQB_W00@Z
?getLineNumber@SAXParseException@xercesc_3_1@@QBE_KXZ
?getSystemId@SAXParseException@xercesc_3_1@@QBEPB_WXZ
?startCDATA@DefaultHandler@xercesc_3_1@@UAEXXZ
?endEntity@DefaultHandler@xercesc_3_1@@UAEXQB_W@Z
?endDTD@DefaultHandler@xercesc_3_1@@UAEXXZ
?endCDATA@DefaultHandler@xercesc_3_1@@UAEXXZ
?comment@DefaultHandler@xercesc_3_1@@UAEXQB_WK@Z
?resetErrors@DefaultHandler@xercesc_3_1@@UAEXXZ
?fatalError@DefaultHandler@xercesc_3_1@@UAEXABVSAXParseException@2@@Z
?error@DefaultHandler@xercesc_3_1@@UAEXABVSAXParseException@2@@Z
?warning@DefaultHandler@xercesc_3_1@@UAEXABVSAXParseException@2@@Z
?skippedEntity@DefaultHandler@xercesc_3_1@@UAEXQB_W@Z
?endPrefixMapping@DefaultHandler@xercesc_3_1@@UAEXQB_W@Z
?startPrefixMapping@DefaultHandler@xercesc_3_1@@UAEXQB_W0@Z
?setDocumentLocator@DefaultHandler@xercesc_3_1@@UAEXQBVLocator@2@@Z
?processingInstruction@DefaultHandler@xercesc_3_1@@UAEXQB_W0@Z
?ignorableWhitespace@DefaultHandler@xercesc_3_1@@UAEXQB_WK@Z
?resetDocType@DefaultHandler@xercesc_3_1@@UAEXXZ
?unparsedEntityDecl@DefaultHandler@xercesc_3_1@@UAEXQB_W000@Z
?notationDecl@DefaultHandler@xercesc_3_1@@UAEXQB_W00@Z
?resetDocument@DefaultHandler@xercesc_3_1@@UAEXXZ
?resolveEntity@DefaultHandler@xercesc_3_1@@UAEPAVInputSource@2@QB_W0@Z
??1DefaultHandler@xercesc_3_1@@UAE@XZ
?release@XMLString@xercesc_3_1@@SAXPAPADQAVMemoryManager@2@@Z
?fgMemoryManager@XMLPlatformUtils@xercesc_3_1@@2PAVMemoryManager@2@A
?transcode@XMLString@xercesc_3_1@@SAPADQB_WQAVMemoryManager@2@@Z
??1SAXParseException@xercesc_3_1@@UAE@XZ
??0SAXException@xercesc_3_1@@QAE@ABV01@@Z
?getColumnNumber@SAXParseException@xercesc_3_1@@QBE_KXZ
wininet
InternetOpenUrlA
HttpSendRequestA
InternetReadFile
InternetSetOptionA
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetCloseHandle
InternetGetConnectedState
InternetAttemptConnect
DeleteUrlCacheEntry
vpei3261
ord83
ord122
ord112
ord114
ord69
ord109
ord108
ord74
ord132
ord50
ord55
ord119
ord363
ord362
ord366
ord367
ord338
ord340
ord134
ord71
ord70
ord148
ord127
ord76
ord80
ord113
ord151
ord126
ord168
ord121
ord128
ord118
ord88
ord125
ord294
ord313
ord386
ord106
ord170
ord171
ord257
ord3013
ord316
ord2039
ord2084
ord2083
ord2104
ord2103
ord2101
ord2070
ord2069
ord2097
ord3021
ord3011
ord3009
ord2006
ord2000
ord60
ord61
ord195
ord105
ord133
ord57
ord364
ord365
ord75
ord95
ord58
crypt32
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CertOpenSystemStoreA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ws2_32
WSAStartup
htons
ntohs
htonl
ntohl
WSASetLastError
WSACleanup
rpcrt4
UuidCreate
UuidFromStringA
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ