Setup-pass-2024.rar
- SHA256 160542f4cd93589d1cc84e6e43be8e2adfb8021fee0b02917d23fdf7fad7b652
Overview
overview
9Static
static
7Setup-pass...ne.dll
windows10-2004-x64
1Setup-pass...up.exe
windows7-x64
9Setup-pass...up.exe
windows10-2004-x64
9Setup-pass...up.ini
windows7-x64
1Setup-pass...up.ini
windows10-2004-x64
1Setup-pass...in.dll
windows7-x64
1Setup-pass...in.dll
windows10-2004-x64
1Setup-pass...XT.ecf
windows7-x64
3Setup-pass...XT.ecf
windows10-2004-x64
3Setup-pass...st.bin
windows7-x64
3Setup-pass...st.bin
windows10-2004-x64
3Setup-pass...0.h264
windows7-x64
3Setup-pass...0.h264
windows10-2004-x64
3Setup-pass...a0.exe
windows7-x64
9Setup-pass...a0.exe
windows10-2004-x64
1Setup-pass...xs.dll
windows7-x64
1Setup-pass...xs.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Setup-pass-2024/Engine.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup-pass-2024/Setup.exe
Resource
win7-20240221-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Setup-pass-2024/Setup.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
Setup-pass-2024/Setup.ini
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Setup-pass-2024/Setup.ini
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Setup-pass-2024/SxsMigPlugin.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Setup-pass-2024/SxsMigPlugin.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Setup-pass-2024/addins/FXSEXT.ecf
Resource
win7-20240215-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral9
Sample
Setup-pass-2024/addins/FXSEXT.ecf
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
Setup-pass-2024/bcastdvr/KnownGameList.bin
Resource
win7-20231129-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral11
Sample
Setup-pass-2024/bcastdvr/KnownGameList.bin
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
Setup-pass-2024/bcastdvr/broadcastpause720.h264
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral13
Sample
Setup-pass-2024/bcastdvr/broadcastpause720.h264
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
Setup-pass-2024/data0.exe
Resource
win7-20240319-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral15
Sample
Setup-pass-2024/data0.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Setup-pass-2024/sxs.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Setup-pass-2024/sxs.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target Setup-pass-2024.rar
- Size 220.0MB
- Sample240411-ykgn4sbc83
- SHA256 160542f4cd93589d1cc84e6e43be8e2adfb8021fee0b02917d23fdf7fad7b652
- MD5 be5044b2726e37905f48fec2671bab5a
- SHA1 e21a92e5cc46a24349fce2fb3eabf6532273fb70
- SHA512 1708d179f7e87562edd38085965a743acd1f37bb5ba69ea175fd61c20e0e410d2f357a56ab3557a72908f8bae5c5f8db56e500027ccb125c6b7d38eff575d4df
- SSDEEP 6291456:t3eNI+WtsMeXrJXzhGM0ZnotGiCi7WwpFCz:9ee+EsMkdgtZoZ7pFCz
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Setup-pass-2024/Setup.exe themida - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Setup-pass-2024/Engine.dll unpack001/Setup-pass-2024/Setup.exe unpack001/Setup-pass-2024/data0.bin
File Explorer
-
Setup-pass-2024.rar.rar 220.0MB
-
Setup-pass-2024/Engine.dll.dll 277KB
-
Setup-pass-2024/Setup.exe.exe 5.3MB
-
Setup-pass-2024/Setup.ini2KB
-
Setup-pass-2024/SxsMigPlugin.dll3KB
-
Setup-pass-2024/addins/FXSEXT.ecf802B
-
Setup-pass-2024/bcastdvr/KnownGameList.bin428KB
-
Setup-pass-2024/bcastdvr/broadcastpause720.h264294KB
-
Setup-pass-2024/data0.bin.exe 214.2MB
-
Setup-pass-2024/sxs.dll36KB
Setup-pass-2024/Engine.dll
- IMPHASH 36f8d9de1f40b0b25d61ecca3a798822
- SHA256 7dd90579f190d6f57fec82372dc1ccc525ae02e0312c7b48f063ce1de4159fe1
- MD5 393b1e735bfbb4eb477e5e874a2df143
- SHA1 6add86d9df22768650091327801d955d44ac254a
- SHA512 294f2b3cff13641af1ed52521be1862dee42eb320f89b2491f99c6bc83c6838397a3eb43c57ebee8407aa85628abebda279ed15994e6c31e1ad6fbdda72ac18e
- SSDEEP 6144:XiHBjjCdNQ+rqEJ/HT8dAhzMdCOJUuHMFx4M3Xjz:XPdC+rz8yqdH2qn4z
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
259248
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
rasppp.pdb
msvcrt
memcpy
_except_handler4_common
memcmp
_initterm
malloc
free
_amsg_exit
_XcptFilter
atol
_ltoa
wcschr
atoi
memcpy_s
mbstowcs
strtok
isdigit
_stricmp
_vsnprintf
iswctype
_vsnwprintf
strstr
rand
time
srand
_itoa_s
wcsstr
_wcslwr
strchr
_wcsicmp
_strnicmp
memset
ntdll
RtlIpv4AddressToStringW
RtlIpv6AddressToStringW
RtlIpv6StringToAddressA
RtlTimeToSecondsSince1970
RtlLocalTimeToSystemTime
RtlTimeFieldsToTime
RtlGetVersion
RtlGetNtProductType
RtlNtStatusToDosError
RtlQueueWorkItem
RtlInitUnicodeString
api-ms-win-core-heap-l1-1-0
GetProcessHeap
HeapDestroy
HeapAlloc
HeapReAlloc
HeapCreate
HeapFree
api-ms-win-core-heap-l2-1-0
LocalReAlloc
LocalFree
LocalAlloc
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
GetLastError
SetLastError
UnhandledExceptionFilter
api-ms-win-core-synch-l1-1-0
WaitForMultipleObjectsEx
CreateEventA
WaitForSingleObject
LeaveCriticalSection
DeleteCriticalSection
ResetEvent
InitializeCriticalSection
SetEvent
EnterCriticalSection
api-ms-win-eventing-provider-l1-1-0
EventUnregister
EventRegister
EventWriteTransfer
api-ms-win-core-registry-l1-1-0
RegQueryValueExA
RegEnumKeyExA
RegQueryValueExW
RegCloseKey
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
RegOpenKeyExA
api-ms-win-core-libraryloader-l1-2-0
FreeLibrary
GetProcAddress
LoadLibraryExA
DisableThreadLibraryCalls
api-ms-win-core-processenvironment-l1-1-0
ExpandEnvironmentStringsA
api-ms-win-core-handle-l1-1-0
CloseHandle
DuplicateHandle
api-ms-win-core-processthreads-l1-1-0
ExitThread
TerminateProcess
GetCurrentThreadId
CreateThread
GetCurrentProcessId
GetCurrentProcess
api-ms-win-core-sysinfo-l1-1-0
GetLocalTime
GetSystemTimeAsFileTime
GetSystemTime
GetTickCount
GetWindowsDirectoryA
api-ms-win-core-synch-l1-2-1
WaitForMultipleObjects
dsrole
DsRoleFreeMemory
DsRoleGetPrimaryDomainInformation
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
MultiByteToWideChar
api-ms-win-core-synch-l1-2-0
Sleep
ws2_32
htonl
ntohl
inet_addr
rpcrt4
UuidCreate
netutils
NetApiBufferFree
wkscli
NetWkstaTransportEnum
crypt32
CryptProtectData
CryptUnprotectData
dnsapi
DnsSetConfigDword
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-kernel32-legacy-l1-1-0
GetComputerNameA
api-ms-win-core-registry-l2-1-0
RegCreateKeyW
RegOpenKeyA
api-ms-win-core-string-obsolete-l1-1-0
lstrlenA
lstrlenW
cryptsp
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
rasapi32
RasSetEapUserDataAEx
rtutils
TraceDeregisterExA
TraceDeregisterA
LogEventW
TraceVprintfExA
RouterLogEventA
RouterLogEventStringA
RouterLogDeregisterA
RouterLogEventW
RouterLogRegisterA
TraceRegisterExA
eappcfg
EapHostPeerGetMethods
EapHostPeerQueryUIBlobFromInteractiveUIInputFields
EapHostPeerQueryUserBlobFromCredentialInputFields
EapHostPeerFreeErrorMemory
EapHostPeerQueryInteractiveUIInputFields
EapHostPeerFreeMemory
eappprxy
EapHostPeerBeginSession
EapHostPeerFreeEapError
EapHostPeerEndSession
EapHostPeerProcessReceivedPacket
EapHostPeerSetUIContext
EapHostPeerSetResponseAttributes
EapHostPeerGetSendPacket
EapHostPeerGetUIContext
EapHostPeerGetResponseAttributes
EapHostPeerClearConnection
EapHostPeerGetResult
rasman
RasPortSend
RasGetBuffer
RasInitializeNoWait
RasBundleGetPort
RasPortGetStatisticsEx
RasDeAllocateRoute
RasPortGetBundle
RasSendProtocolResultToRasman
RasGetPortUserData
RasPortSetFramingEx
RasGetFramingCapabilities
RasSetConnectionUserData
RasActivateRoute
RasPortGetProtocolCompression
RasGetTimeSinceLastActivity
RasCompressionGetInfo
RasGetInfo
RasPortCancelReceive
RasPortSetProtocolCompression
RasFreeBuffer
RasGetConnectInfo
RasAllocateRoute
RasAllocInterfaceLuidIndex
RasUpdateDefaultRouteSettings
RasPortBundle
RasSetEapInfo
RasPortConnectComplete
RasPortDisconnect
RasPortClose
RasProtocolStart
RasPortSetFraming
RasCompressionSetInfo
RasFreeInterfaceLuidIndex
RasProtocolStarted
api-ms-win-eventing-classicprovider-l1-1-0
TraceMessage
iphlpapi
GetAdaptersInfo
GetPerAdapterInfo
GetIpForwardTable
DeleteIpForwardEntry
SetIpForwardEntry
ConvertInterfaceLuidToIndex
ConvertInterfaceIndexToLuid
GetIpAddrTable
GetCurrentThreadCompartmentId
ConvertIpv4MaskToLength
SetCurrentThreadCompartmentId
api-ms-win-security-lsapolicy-l1-1-0
LsaOpenPolicy
LsaRetrievePrivateData
LsaClose
LsaFreeMemory
nsi
NsiGetParameterEx
NsiGetParameter
NsiSetAllParametersEx
NsiGetAllParametersEx
dhcpcsvc
DhcpRequestParams
InitializeProtocolEngine
InitializeServerProtocolEngine
PppStop
RasCpEnumProtocolIds
RasCpGetInfo
SendMessageToProtocolEngine
UninitializeProtocolEngine
UninitializeServerProtocolEngine
Name
.text
Size
252KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=14, id=260, version=26213,
count=5, id=259, version=26213,
count=242, id=1, productName=Unmarked objects,
count=15, id=257, version=26213,
count=1, id=256, version=26213,
count=52, id=264, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
Setup-pass-2024/Setup.exe
- SHA256 52bc27b219b3048e1dadf4f673281ced218a0ff023bea21f9d4fd09156bdf24d
- MD5 f8842eb19e08fabccc6b44e3d486f421
- SHA1 b385bfa4fc281209226573e5ff30cb054ef8fded
- SHA512 ec1aa745908a98b65e36213ece61fe0d488196e2a3135cee8937f3e3c7d6268ad040fff81b9ad961325e41012654bb5c41ffc92c95b9068bf0c9b44a2f86ca01
- SSDEEP 98304:hLvMDe7SkB8nRHA3UYazCf/NH9ahq/yVlhs4VfSJXtHpivPrYGNgR2:hLvMOSkmnR+dazCf/NdyZNrqnePrfNgw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
8538216
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
Size
382KB
Virtual Size
716KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
59KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
1024B
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
16KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
67KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
7.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
4.8MB
Virtual Size
4.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=21, id=241, version=40116,
count=156, id=243, version=40116,
count=33, id=242, version=40116,
count=1, id=199, version=41118,
count=46, id=261, version=26706,
count=17, id=260, version=26706,
count=8, id=259, version=26706,
count=8, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=37, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=557, id=1, productName=Unmarked objects,
count=80, id=270, version=27045,
count=1, id=259, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
Setup-pass-2024/Setup.ini
- SHA256 23010034944e02f06cd16bccebbb5e697d43cfd80d82d5f83fe163a1734d21c5
- MD5 3428c5c1c70a362e1e843902b72fdf00
- SHA1 3d3f116cf71537e87811baa1fc396288e99b136b
- SHA512 60489fed8c74caf318fd451571f778f417f23a019e42e40818ace3bca85a53431577f8c1d0813b3644903e31d3e6db71b8ccb5c8b1f2157365e006458cc44e54
- MD5 SHA1 SHA512
Setup-pass-2024/SxsMigPlugin.dll
- SHA256 e2fa70d020ad492849ba1d60792ab2a8ab259fc7e3609a9c5f2a07deea765eec
- MD5 f99cc48affc494fe82fc907fee9e9a2d
- SHA1 54e393648404c48e77b869de6a99a8e2094c8160
- SHA512 7b58da286d3b46344d9563397a9f145d741a89935c28d015183918458f8649301b3005288d3da658e863e0235b43ba6fe648ce0c5f6960ca7538bf3b0a9444b6
- MD5 SHA1 SHA512
Setup-pass-2024/addins/FXSEXT.ecf
- SHA256 eb747d87c739be28189684a84afcf6026f83e10c572492093b1e2efc573554bd
- MD5 18515f8ddaee2750c81d768f2c0e7117
- SHA1 6f597c85e807c88d4bbf5dee7996ffb1df86825b
- SHA512 b9aaf3900b80e5132c2cb8d5ba93f164a3f52bfea9267b93172edfb2c57fefa7558d7a447ae3bb8fbc99f8abdc0ae0e17eae1fbcfe383031e6b4b5487ba0eda6
- MD5 SHA1 SHA512
Setup-pass-2024/bcastdvr/KnownGameList.bin
- SHA256 5e11cb486d2dafe5c5cbe61e4cc9fb3ce0f9d2d2595ac5ea4a6d8f368c29bfa7
- MD5 1fd787a28854979a68541a69e7f66928
- SHA1 a2bc97cb5888c1ce92f5ca9017611dcaa6b795ff
- SHA512 12e8f9be11986736d14998d091ebb70d2f861f97a84fbecdd8dc2fbb84c7c8d730ae8188c22ac481dca75c52fa761c5946899a106d5b234d2be752e120e1ac82
- SSDEEP 3072:oQhTLwP0eyR9ZB1hjlMdN01qEbAo13wm7ldJneLHbpDbJWbg0DqdJJuFGDlQRTb/:fhTkP0j7ZLhls01171gm5neNFetc6b/
- MD5 SHA1 SHA512 SSDEEP
Setup-pass-2024/bcastdvr/broadcastpause720.h264
- SHA256 0ad4fda30f59be8c596757a591ef45cb00ec2f88b522d827e1e100bf4c503af1
- MD5 067d0a32b6b1509486339a3e307abc9b
- SHA1 5a709d13e6967c0a30d3077f4883253fd6bbf194
- SHA512 45e0a92bb8dbadb36d0994f3d6a76f54611a5d988ed16a4c62716cc5f4f960bd89c458b70800037ad2ffea160db0458e53509b144dfca3109490c3194dc09ee9
- SSDEEP 6144:+I42B6W+6MlWnt8+0rKvx+tEfHiIgyn28PoQfdp2:t+6BnqzrKvx+t4HiIhPoyz2
- MD5 SHA1 SHA512 SSDEEP
Setup-pass-2024/data0.bin
- IMPHASH 75e9596d74d063246ba6f3ac7c5369a0
- SHA256 28063ee166a278a299f8da0cc3e32ff44a2942826d6822f9b5394e16a9b62cac
- MD5 bff3f63753d4981820d3618a640590b6
- SHA1 e9f46c448c1168290132b97c8768db5b6a944807
- SHA512 a96c6c434e1dcccac93b072eb5250280bc87945d0efbb50c91752e0c4676524bfe466c912c442d59813381d49d4707c1e2b627ee4f7684eb4e06affe89760bdc
- SSDEEP 6291456:/3eNI+WtsMeXrJXzhGM0ZnotGiCi7WwpFC/:fee+EsMkdgtZoZ7pFC/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
138576
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
FormatMessageW
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetCurrentProcessId
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetTimeFormatW
GetDateFormatW
LocalFree
GetExitCodeProcess
GetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetNumberFormatW
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapReAlloc
HeapAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
oleaut32
SysAllocString
SysFreeString
VariantClear
gdiplus
GdipAlloc
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
GdipFree
Name
.text
Size
209KB
Virtual Size
209KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=142, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=253, version=31616,
count=19, id=260, version=31616,
count=22, id=259, version=31616,
count=53, id=261, version=31616,
count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=282, id=1, productName=Unmarked objects,
count=49, id=261, version=31630,
count=1, id=256, version=31630,
count=1, id=255, version=31630,
count=1, id=258, version=31630,
Setup-pass-2024/sxs.dll
- SHA256 2a3f610ffb12bd04f14410ca0c4a597170a27100253d368e437d582e1294ff38
- MD5 085f577b4c62e09f75976a42ad6e0ba6
- SHA1 352b0ceff96e2b447f0b5831074ac64d4151fc31
- SHA512 c7b8107a13e86a8ff69eefb29dd78b57e2bd8867ba83ad8745c0ee14bd11e91d73c57c16d6dfd2a5660e2ed56b1b63b4d7aa524a7e89b18e31aca078018af152
- SSDEEP 768:KuEgDJRJIxsudVcaiTGDIleiCoJAZ935ZEXn9i7dzv+Zj8+qyevh:K6DJRJIxsudIKDIleiaLsUp+9oh
- MD5 SHA1 SHA512 SSDEEP