�b�|�W�1��a��k��V���b�(�c��2(} v# @SHl�t� #:�Z�^*ݑ��wj����\���0&��n �b�P�74#���ST���,�p_u���1<'��|��r��r���(��t/��T=/F�[��������+��qK�+��:�d��3$��� �r��t��~4h�|[��o~�+cu���S��_��@�m=��� �IxH��ɗ^(�d��a� Nw�4��ʀ(0K�~GHĪ1��=2q+EO�3��A����3f�����e�����FBv�!O/G���xxMP��ox����I ��a�=]�z�aMS�^K ��L�j���?��Y�Sɕ��>A8ˇ����&e=�e��� 欒B-�,�Y��� /�g������.b(T,Ե��SH q|p��i�f e%y���i��80 ���цyj�U��>�W��`R�wv��!Y��W�rE���V������wu�U%��^��]�Q�����$V+�iv�i �������@��m��s�}�,�M�����7MJ�Dl�����w��+�;!��Y��8�W��I1Y�QF�6����˔�]W��X�D�Ι���P�7�(E�L8��P3�� !ͨqW��L�)\�����;渼>�r��W=#�{��4x-A(�����?z�3�a��!ߓqRM Y ����_�(�c�;�|2����M:��{� F�1La�Dџ^L^�x�V��o PY���uD��) ��I˫�B�Vs��b �0cy; MZ� �*g��>!�����1`s֢>����@t%�|Ar/��-���������(�! M��.{��t��������|���J�E��՜�$���=�8�'�d~`�S;1��\��Y!% �́Ƹ�K�bW��j�E�Y\���IG#ٚ��>�?.�� � I� rBlJ鵔� ?& :җJm�ˇO�#� K��A�mC�A+��I����iEW�IX��:+у�Z7��2:� ��6tR �g� 3� �Z��yIO'�qSNB��zb2�j�OjG�F2��� ��H���{ $(m�#���7V`)�D����*>�¿�EN/[cK9EAEq4�� MP�mU���5Cl�L2��8�cќU�0�S��� ղo[3"�c���|ڃ� �~gٓ/R�l���j��#�U���!���R�a�O�W��u8��p\A��̩�;x?]��&$~3RZ�� G �U�%����?�^���8f�{�w�`������?X�Ș%���7��b�t���8� �" 2�^3������i�h�*�-�D3㸰�x��_� ��ꑩ�W#WA^� �f'��M=%hs�j���1�%)�8�!���$$=;k�j"���-eo9Ӭ1��1L?/i{�^��Z���r �DzQ��� �G��9ߪ�s���4 r��?���Ȋ4O���,� p �9��)(��-����L�$�ܸ��Hk���сuP#��~<%�l`��KI��a �ݹ�S7̵��h8�y�uS*0˽��2�H;.ߔ��zO\0/��04���Qѥ9^c���A�^���=}GP���K���R��� 6��8� �˗B(�I[�j*� � �_�4�ù-;d�U��R|e�'X�U-"H<��p��X�OЀ�����Е�����<��Ay��T��V)�J�4�������*cD�������z�ɥ������h럆�����ғ�qq�P�ZHk�9y�r>��0S�%�j����� '�~rXסV�MǨ�߹����l*e��∁ʿ�=�b�� �a�L��>L1*�Q7;O%Ʈ����ţ�z�Mha��sV�4��X �Y��W5OV����h:��F+����QV� }2b� N�LS|�Z����y� W Hs@�sq����6���:|T��e���k>���/��U1{�rkޑ�>B���0�� �� Ǭ��!B\|� vAϊN��u^�f��q;�� ���aU} "��P\t&c-���� �-/��y����U}?K��)1���4P�g�`�,#1���>*}v�%�tL��V0�*��"�N3���Y-&�E��6�`�L��; ��n<��$푅����-R���0�6eT��ι��� t<�>j�^�k��Y�K|x/ͦ��u}<�o�a�_0����&�G�ǣ�a Z��D k6t��|6�S�jN� ߪ/CmƧ�*�� ���ܻax�}�1 "�y�,��MҬ'�fl=���B$9�ƬlWժQ��mO ez �������`��z�^�f`�<� )5���� �)^�[оz�"�;/8Z7-Ur��q�jЫ�j%5�� !"�1�a���G�B�����h_�z��~S1\A��c�~����G������֏ ��d��S���r��9"]�ݏ{ۤJ�9u\WX�qS��U�Uw�b�Z����[�� ��zn���9Iw� +�۲�~/DS��[�t 8�x��ic� �}�X��a��O��.�\��|lT�� "��D#���u��"���]�-!���� ���g-�1@| �݆EE�n ��R�-�x�3ז����� $�K���@&������+������#�n|ډ<���wJ�D�Ě?���t��P�,2�&���$��V�&M�&� ��+�ƛz��꾉����ċw� q�})��6j�9m7J 7�0��|E?�y��D��k�8�$� alt-�f=rs��ݼ+tL�%1���T.e�1�kHu����� U�k�[X�@�gt(� :j�W�����������_�_�� ����xM��a�hH�t;Ȭ��^����m��� VE^O����$�l#���l 5�#����0���k-�?YbꡞOl_�9Zx9�1����R�vy� t�ő����Sl�?�:Q�9��n����C��5��Ө����)��٣��i�^����zE��=2������ ��&T����#�[_�x�߰����Nw� N��������X� ��|W���~�=�ـc:o ccp]��l2,��̳X��ӡĽX�f�g �������'�Zn��r0�w�f^�tDY�(�Y�?fH}����t���=�u����t��j�u��Y0�6S${�J��cW1���
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_01e1049e07c62c7c9d95d21a5d4494ce_magniber_vidar.exe
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral2
Sample
2024-05-17_01e1049e07c62c7c9d95d21a5d4494ce_magniber_vidar.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
General
-
Target
2024-05-17_01e1049e07c62c7c9d95d21a5d4494ce_magniber_vidar
-
Size
22.9MB
-
MD5
01e1049e07c62c7c9d95d21a5d4494ce
-
SHA1
70cfc1a8b0f9e94665af88c9c3ff065553a346e6
-
SHA256
2d0c11357a0fe285bd39bd6886531decf9515ca99977c9c0458c8724392a750f
-
SHA512
fc3a325cc29dd802fb8879b261babd0bb2b3d81b7760f621b11b6f0a91363208a6fb0bb7caf4322f2cafe3cc17eb64743c0a9ec69d23f1cecc560af2aa002bda
-
SSDEEP
393216:zYyt6Z0+LVwwEIA+22BIoLFsQZRcL6NHzGL:8y60kwwEIAB6W
Malware Config
Signatures
-
Detects executables potentially checking for WinJail sandbox window 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_Anti_WinJail -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-17_01e1049e07c62c7c9d95d21a5d4494ce_magniber_vidar
Files
-
2024-05-17_01e1049e07c62c7c9d95d21a5d4494ce_magniber_vidar.exe windows:5 windows x86 arch:x86
8f879bcd8c1304e5a62103493eda3325
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
EnumProcessModules
EnumProcesses
GetProcessImageFileNameW
wtsapi32
WTSRegisterSessionNotification
WTSQuerySessionInformationW
WTSFreeMemory
WTSQueryUserToken
WTSSendMessageW
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetCurrentDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryW
GetFileSizeEx
GetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
InterlockedIncrement
GlobalGetAtomNameW
GetTempFileNameW
GetFileTime
GetPrivateProfileIntW
InterlockedDecrement
GetVolumeInformationW
GetThreadLocale
GetStringTypeExW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
GetModuleFileNameA
ResumeThread
SetThreadPriority
HeapSize
MulDiv
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
SetLastError
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
LoadLibraryA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetFullPathNameW
GetFullPathNameA
GetFileAttributesA
GetTempPathA
UnlockFileEx
LockFileEx
LockFile
GetProfileIntW
OpenEventA
CreateEventA
OutputDebugStringA
CreateMutexA
IsBadWritePtr
CreateProcessA
GetThreadContext
GetOverlappedResult
CancelIo
FlushInstructionCache
CreateRemoteThread
WriteProcessMemory
VirtualProtectEx
VirtualFreeEx
VirtualQueryEx
VirtualAllocEx
ReadProcessMemory
OpenFileMappingW
lstrcatA
CreateSemaphoreW
CreateSemaphoreA
ReleaseSemaphore
FindFirstChangeNotificationW
FindNextChangeNotification
FindCloseChangeNotification
lstrcpynW
GetPrivateProfileSectionNamesW
EnumResourceTypesW
EnumResourceNamesW
GetNumberFormatW
GetDateFormatW
GetTimeFormatW
GetLastError
MultiByteToWideChar
VirtualQuery
VirtualAlloc
VirtualProtect
GetFileType
SuspendThread
SetStdHandle
lstrlenA
WideCharToMultiByte
lstrlenW
FindResourceW
SizeofResource
LockResource
ExitThread
HeapReAlloc
ExitProcess
GetTimeZoneInformation
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetProcessHeap
HeapAlloc
HeapFree
ReleaseMutex
GlobalSize
UnlockFile
FlushFileBuffers
SetEndOfFile
AreFileApisANSI
InterlockedCompareExchange
LoadResource
GetCurrentProcessId
InitializeCriticalSection
ReadFile
SetFilePointer
CloseHandle
SetErrorMode
GetFileSize
CreateFileW
GetLongPathNameW
GetShortPathNameW
GetFileAttributesW
GetLogicalDrives
GetWindowsDirectoryW
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetProcessTimes
OpenProcess
GetTickCount
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
FileTimeToSystemTime
FileTimeToLocalFileTime
QueryDosDeviceW
GetLogicalDriveStringsW
TerminateProcess
CopyFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
ProcessIdToSessionId
ResetEvent
WaitForSingleObject
CreateEventW
CreateThread
DeviceIoControl
QueryDosDeviceA
GetDriveTypeA
CreateFileA
GetComputerNameW
GlobalUnlock
GlobalLock
GetSystemInfo
GlobalMemoryStatus
GetUserDefaultLangID
QueryPerformanceCounter
QueryPerformanceFrequency
CreateFileMappingW
FindFirstFileA
FindNextFileA
GetFileInformationByHandle
GetLocalTime
DuplicateHandle
GetCurrentDirectoryA
lstrcmpiA
SystemTimeToFileTime
lstrcpyA
lstrcpyW
LocalFileTimeToFileTime
lstrcmpA
IsBadReadPtr
SetFileTime
GlobalFree
DeleteFileA
MoveFileA
DeleteCriticalSection
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
CreateDirectoryA
lstrcmpiW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentThreadId
FindResourceExW
GetVersion
MoveFileW
DeleteFileW
ExpandEnvironmentStringsW
SetFileAttributesW
GetDriveTypeW
GetComputerNameA
FormatMessageW
LocalSize
LocalFree
LocalAlloc
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
WaitForMultipleObjects
FreeLibrary
GetExitCodeProcess
CreateDirectoryW
GetSystemDirectoryW
MoveFileExW
CreatePipe
GetStartupInfoW
GetCommandLineW
GetSystemDefaultLangID
GetModuleFileNameW
CreateMutexW
OpenEventW
OpenMutexW
CreateProcessW
WriteFile
FreeResource
WTSGetActiveConsoleSessionId
GetVersionExW
GetModuleHandleA
GetCurrentProcess
FindFirstFileW
GetFileAttributesExW
FindNextFileW
FindClose
LoadLibraryW
GetModuleHandleW
GetProcAddress
Module32FirstW
Module32NextW
TerminateThread
SetEvent
GetExitCodeThread
Sleep
GlobalAlloc
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperW
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
ValidateRect
GetMenuBarInfo
DestroyMenu
ReuseDDElParam
UnpackDDElParam
InflateRect
MapDialogRect
IsZoomed
IsRectEmpty
UnionRect
SetCapture
SetCursorPos
DestroyCursor
GetDialogBaseUnits
GetSysColorBrush
DeleteMenu
DestroyIcon
UnregisterClassW
SetWindowContextHelpId
RegisterClipboardFormatW
TranslateAcceleratorW
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
GetMenuItemInfoW
ReleaseCapture
EnableWindow
FrameRect
FillRect
CopyRect
InvalidateRect
PostQuitMessage
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
EndPaint
PostThreadMessageW
EnumWindows
GetWindowThreadProcessId
GetWindowLongW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
MessageBoxW
GetDesktopWindow
UpdateWindow
PostMessageW
SetTimer
SetActiveWindow
SetForegroundWindow
GetWindowTextW
GetWindow
IsWindowEnabled
IsWindowVisible
GetTopWindow
KillTimer
GetWindowRect
IsWindow
GetSysColor
OffsetRect
GetSubMenu
GetCursorPos
BeginPaint
GetWindowDC
ClientToScreen
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
ScrollWindowEx
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
LoadMenuW
UnregisterHotKey
GetSystemMenu
SetParent
DrawIcon
SendMessageW
SetWindowRgn
GetDCEx
LockWindowUpdate
MessageBeep
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenuItemID
GetMenuItemCount
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
RegisterHotKey
GetParent
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
LoadImageW
SetClipboardViewer
LoadBitmapW
LoadIconW
RedrawWindow
ChangeClipboardChain
GetClipboardOwner
SwitchToThisWindow
BringWindowToTop
AttachThreadInput
GetForegroundWindow
GetClassNameW
DestroyWindow
IntersectRect
SetWindowTextW
SendNotifyMessageW
InSendMessage
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
OpenInputDesktop
GetUserObjectInformationA
CloseDesktop
GetThreadDesktop
MsgWaitForMultipleObjects
GetTabbedTextExtentA
GetClipboardData
GetClipboardFormatNameW
GetAsyncKeyState
CopyImage
GetDoubleClickTime
SendMessageTimeoutW
IsWindowUnicode
GetWindowLongA
SetWindowLongA
GetCursor
SetClassLongW
DrawEdge
LoadMenuIndirectW
LookupIconIdFromDirectoryEx
GetKeyboardLayout
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayoutList
GetKeyboardState
ToUnicodeEx
GetMenuDefaultItem
IsClipboardFormatAvailable
DrawFrameControl
DrawIconEx
CreateIconFromResourceEx
CreateIconIndirect
CopyIcon
GetIconInfo
DrawStateW
HideCaret
ShowCaret
IsMenu
DrawFocusRect
InvertRect
wsprintfW
WaitMessage
DrawAnimatedRects
FindWindowW
EnumChildWindows
SetMenuDefaultItem
GetSystemMetrics
GetFocus
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
EnumDisplayMonitors
MonitorFromPoint
SetRect
MonitorFromRect
MonitorFromWindow
GetMonitorInfoW
PtInRect
SetWindowPos
WindowFromDC
ReleaseDC
CallWindowProcW
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetKeyState
WindowFromPoint
ScreenToClient
MapVirtualKeyW
GetKeyNameTextW
GetDC
LoadCursorW
GetClientRect
GetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
GetNextDlgTabItem
EndDialog
LoadStringW
LoadStringA
GetWindowRgn
SystemParametersInfoW
MoveWindow
ShowWindow
CreateWindowExW
DefWindowProcW
RegisterClassExW
RegisterWindowMessageW
SetWindowLongW
GetProcessWindowStation
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW
GetProcessWindowStation
GetUserObjectInformationW
gdi32
GetClipBox
GetDCOrgEx
PatBlt
CreateRectRgnIndirect
CreateRectRgn
PtInRegion
CreateDIBSection
SelectObject
DeleteObject
BitBlt
GetObjectW
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
DeleteDC
CreateDCW
SetViewportOrgEx
SetViewportExtEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateSolidBrush
Ellipse
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetTextColor
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocW
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
SetBkColor
CreateBitmap
CopyMetaFileW
SetMapMode
SaveDC
GetTextAlign
Polygon
StretchBlt
SetPixel
GetDIBits
GetCurrentObject
EnumFontFamiliesExW
ExtCreateRegion
Rectangle
GetBitmapBits
Polyline
GetViewportOrgEx
ExtFloodFill
SetBrushOrgEx
CreatePolygonRgn
RoundRect
GetWindowOrgEx
GetTextExtentPoint32A
StrokePath
FillPath
StrokeAndFillPath
EndPath
CloseFigure
BeginPath
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateHatchBrush
CreateFontIndirectW
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
GetCharWidthW
CreateFontW
StretchDIBits
CreateEllipticRgn
GetCurrentPositionEx
LPtoDP
comdlg32
GetFileTitleW
winspool.drv
GetJobW
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
DuplicateTokenEx
ImpersonateLoggedOnUser
OpenProcessToken
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
CreateServiceW
QueryServiceConfigW
QueryServiceStatus
ChangeServiceConfigW
GetKernelObjectSecurity
AllocateAndInitializeSid
FreeSid
RegOpenKeyExA
RegEnumKeyExA
RegEnumValueW
GetFileSecurityW
RegDeleteValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegEnumKeyExW
GetTokenInformation
LookupAccountSidW
RevertToSelf
SetTokenInformation
CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitializeSecurityDescriptor
InitializeAcl
LookupAccountNameW
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityW
ControlService
RegOpenCurrentUser
RegCreateKeyW
RegSetValueW
RegOpenKeyW
OpenEventLogW
ReadEventLogW
CloseEventLog
RegCreateKeyExW
RegSetValueExW
GetUserNameW
DeleteService
shell32
Shell_NotifyIconW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragAcceptFiles
ExtractIconW
DragQueryFileW
DragFinish
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListW
SHGetFileInfoW
FindExecutableW
SHCreateDirectoryExW
SHFileOperationW
SHChangeNotify
CommandLineToArgvW
ord680
ShellExecuteExW
SHGetSpecialFolderPathW
SHAppBarMessage
shlwapi
PathIsUNCW
PathStripToRootW
PathRemoveExtensionW
PathFindFileNameW
PathStripPathW
PathRemoveFileSpecW
PathFindExtensionW
UrlUnescapeW
oledlg
OleUIPasteSpecialW
OleUIEditLinksW
OleUIChangeIconW
OleUIConvertW
OleUIInsertObjectW
OleUIAddVerbMenuW
OleUIBusyW
OleUIUpdateLinksW
ole32
StgOpenStorageOnILockBytes
CoGetClassObject
StgCreateDocfileOnILockBytes
StringFromGUID2
CoDisconnectObject
CoInitializeEx
CoCreateInstance
CoUninitialize
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleRun
CreateStreamOnHGlobal
OleInitialize
GetRunningObjectTable
IsAccelerator
OleTranslateAccelerator
CreateDataAdviseHolder
DoDragDrop
OleGetClipboard
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleSave
WriteClassStm
OleSaveToStream
OleLockRunning
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
OleQueryCreateFromData
OleQueryLinkFromData
OleIsRunning
OleSetMenuDescriptor
GetClassFile
CoGetMalloc
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleRegEnumVerbs
CreateOleAdviseHolder
OleRegGetMiscStatus
CoRegisterMessageFilter
oleaut32
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SysFreeString
VariantClear
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarBstrFromDate
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VarDateFromStr
SystemTimeToVariantTime
SysAllocStringLen
SysAllocString
CreateErrorInfo
OleLoadPicturePath
SafeArrayGetElement
VariantTimeToSystemTime
SafeArrayCreateVector
VarUdateFromDate
VariantChangeTypeEx
GetErrorInfo
SetErrorInfo
VarDecFromStr
fltlib
FilterConnectCommunicationPort
FilterGetMessage
FilterReplyMessage
FilterLoad
setupapi
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInstanceIdA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
hid
HidD_SetFeature
HidD_GetFeature
HidP_GetScaledUsageValue
HidP_GetUsageValue
HidP_GetUsages
HidP_SetUsageValue
HidP_SetUsages
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetPreparsedData
HidD_FlushQueue
HidD_GetHidGuid
userenv
CreateEnvironmentBlock
mpr
WNetGetUserW
gdiplus
GdipFree
GdipAlloc
GdiplusStartup
GdipDisposeImage
GdipGetImageWidth
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipCreateFromHDC
GdipDrawImageRectI
GdipDeleteGraphics
GdipGetImageHeight
GdipCloneImage
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wininet
HttpAddRequestHeadersW
HttpOpenRequestW
HttpQueryInfoW
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetSetOptionExW
InternetSetCookieW
InternetGetCookieW
InternetQueryDataAvailable
FtpDeleteFileW
FtpRenameFileW
FtpCreateDirectoryW
FtpRemoveDirectoryW
FtpSetCurrentDirectoryW
FtpGetCurrentDirectoryW
FtpPutFileW
FtpGetFileW
GopherOpenFileW
InternetConnectW
FtpFindFirstFileW
GopherCreateLocatorW
FtpCommandW
FtpOpenFileW
GopherGetAttributeW
HttpSendRequestExW
HttpEndRequestW
HttpSendRequestW
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
GopherFindFirstFileW
InternetFindNextFileW
InternetErrorDlg
ws2_32
recvfrom
sendto
select
connect
htons
socket
WSAStartup
WSAIoctl
WSAGetLastError
inet_addr
bind
accept
listen
htonl
__WSAFDIsSet
recv
send
getsockname
ntohl
closesocket
gethostbyname
setsockopt
inet_ntoa
gethostname
WSACleanup
getpeername
ntohs
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
iphlpapi
GetAdaptersInfo
IpReleaseAddress
IpRenewAddress
GetInterfaceInfo
GetPerAdapterInfo
winmm
PlaySoundW
netapi32
Netbios
comctl32
ImageList_AddMasked
ImageList_Add
_TrackMouseEvent
ImageList_Create
ImageList_Destroy
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
Exports
Exports
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 785KB - Virtual size: 785KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dse0 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dse1 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13.0MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ