Overview
overview
10Static
static
3Readme/Info.txt
windows11-21h2-x64
3Readme/readme+.txt
windows11-21h2-x64
3Readme/readme.txt
windows11-21h2-x64
3Setup/Offi...86.exe
windows11-21h2-x64
10Setup/Offi...86.exe
windows11-21h2-x64
10Setup/Offi...r+.exe
windows11-21h2-x64
10Setup/Offi...er.exe
windows11-21h2-x64
10Static task
static1
Behavioral task
behavioral1
Sample
Readme/Info.txt
Resource
win11-20240508-en
Behavioral task
behavioral2
Sample
Readme/readme+.txt
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
Readme/readme.txt
Resource
win11-20240426-en
Behavioral task
behavioral4
Sample
Setup/Office Installer x86.exe
Resource
win11-20240426-en
Behavioral task
behavioral5
Sample
Setup/Office Installer+ x86.exe
Resource
win11-20240426-en
Behavioral task
behavioral6
Sample
Setup/Office Installer+.exe
Resource
win11-20240419-en
Behavioral task
behavioral7
Sample
Setup/Office Installer.exe
Resource
win11-20240426-en
General
-
Target
TG_RBModsPC_Office_Installer_Plus_1.15.rar
-
Size
23.7MB
-
MD5
659a8625e2d283ebfbd104e429f73d2c
-
SHA1
15fdd8e5970585fb7bebf019ef43dbca68d7e083
-
SHA256
d257ccb871f76dc160811fcfce87770bbced5aa97dbcb7c7912ebbccd353fca4
-
SHA512
1d8c014f634d60ced6a1668abfdeacf9f4e498ee8925d7c337dd6d879b90e64a1e2986f9892c51f2b2c0d919a8a10a0f9dde7b14637d41f1fcee163ab5b3b05f
-
SSDEEP
393216:4Q4K/n6zJCFHa+uLT2/m4L6ifs93Pf+qlHQ2igzbGOCayNQo07JRrtadSFOjIgPh:4M60H3uLC/m4zfyPffKDe/w0jtaEFOVZ
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/Setup/Office Installer x86.exe unpack001/Setup/Office Installer+ x86.exe unpack001/Setup/Office Installer+.exe unpack001/Setup/Office Installer.exe
Files
-
TG_RBModsPC_Office_Installer_Plus_1.15.rar.rar
-
Readme/100% Safe Android Cracks.url.url
-
Readme/100% Safe Windows & MacOS Cracks.url.url
-
Readme/Info.txt
-
Readme/readme+.txt
-
Readme/readme.txt
-
Setup/Office Installer x86.exe.exe windows:4 windows x86 arch:x86
391ffd93a83148a2faa87f0164e9b9e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameW
GetUserDefaultLangID
CloseHandle
GetCurrentThreadId
GetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
CreateToolhelp32Snapshot
GetLogicalDriveStringsW
QueryDosDeviceW
FileTimeToLocalFileTime
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetCurrentProcess
GetSystemDefaultLangID
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
GetCurrentProcessId
OpenProcess
GetLastError
FormatMessageW
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
WideCharToMultiByte
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
CreateProcessW
HeapCreate
CreateSemaphoreW
HeapDestroy
ExitProcess
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
TerminateProcess
GetStdHandle
WriteFile
GetModuleFileNameW
FreeLibrary
GetModuleHandleExW
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapFree
SetLastError
GetCurrentThread
HeapAlloc
EnumSystemLocalesW
LoadLibraryExW
CompareStringW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetDateFormatW
GetLocaleInfoW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
IsValidLocale
LCMapStringW
OutputDebugStringW
GetFileType
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsValidCodePage
GetCommandLineA
GetCommandLineW
FindFirstFileExW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
WriteConsoleW
CreateFileW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
EncodePointer
RaiseException
GetFileSize
CreateThread
InitializeCriticalSection
Sleep
LoadLibraryW
DuplicateHandle
CreatePipe
PeekNamedPipe
GetExitCodeProcess
SetFilePointer
SetEndOfFile
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
lstrcpyA
lstrcpynA
GetTickCount
GetVersionExW
CreateDirectoryW
GetDriveTypeW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
SetCurrentDirectoryW
CopyFileW
RemoveDirectoryW
GetCurrentDirectoryW
SetFileTime
MulDiv
GetLocalTime
SetEvent
CreateEventA
LoadLibraryA
ReleaseSemaphore
GetFileInformationByHandle
CreateFileA
ResetEvent
QueryPerformanceFrequency
SetThreadPriority
UnregisterWait
RegisterWaitForSingleObject
GetFileSizeEx
DecodePointer
user32
SendMessageW
OemToCharW
GetCursorPos
WindowFromPoint
IsWindowEnabled
GetClassLongW
SetClassLongW
SetWindowRgn
GetClassNameW
CallNextHookEx
GetWindowLongW
SetWindowsHookExW
UnhookWindowsHookEx
ReleaseDC
EnumWindows
GetWindowThreadProcessId
FindWindowExW
FindWindowW
GetForegroundWindow
SetCursorPos
InvalidateRect
GetSysColor
GetWindow
IsWindow
DefWindowProcW
SetWindowLongW
GetClientRect
FillRect
CallWindowProcW
GetParent
GetDC
SetWindowPos
BeginPaint
EndPaint
GetAsyncKeyState
KillTimer
ScreenToClient
SetTimer
RedrawWindow
DrawTextW
GetDlgCtrlID
GetWindowRect
OffsetRect
IsRectEmpty
MapWindowPoints
SubtractRect
FrameRect
InflateRect
ShowWindow
DrawFrameControl
PostMessageW
MessageBoxW
IsWindowVisible
EnableWindow
wsprintfA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetIconInfo
UpdateWindow
ReleaseCapture
DrawStateW
SetCapture
GetSystemMetrics
CreateWindowExW
GetKeyState
GetPropW
ClipCursor
SetCursor
GetCapture
GetFocus
DrawFocusRect
GetMessagePos
LoadCursorW
SetPropW
ChildWindowFromPointEx
RegisterClassExW
DestroyWindow
MoveWindow
SystemParametersInfoW
RemovePropW
GetSysColorBrush
SetRect
ClientToScreen
SetScrollPos
GetWindowDC
SetScrollInfo
GetScrollPos
GetScrollRange
EnumPropsExW
GetMenu
SetActiveWindow
IsZoomed
IsIconic
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RegisterClassW
AdjustWindowRectEx
UnregisterClassW
CreateAcceleratorTableW
DestroyIcon
LoadIconW
DestroyAcceleratorTable
DefFrameProcW
EnumChildWindows
SetForegroundWindow
TrackPopupMenu
IsChild
SetMenu
DestroyMenu
RegisterWindowMessageW
CopyImage
DrawIconEx
CreateIconFromResourceEx
CreateIconFromResource
CharLowerW
CharUpperW
gdi32
CreateRoundRectRgn
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
SetBkMode
SetTextColor
SelectClipRgn
SetDCBrushColor
GetStockObject
SetBrushOrgEx
GetObjectType
GetObjectW
CreateDIBSection
GdiGetBatchLimit
GdiSetBatchLimit
CreateFontIndirectW
GetTextExtentPoint32W
SetBkColor
ExcludeClipRect
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
CreatePen
MoveToEx
LineTo
GetDeviceCaps
GetDIBits
SetTextAlign
TextOutW
SetStretchBltMode
StretchBlt
GetTextMetricsW
GetPixel
CreateBitmap
SetPixel
CreateFontW
advapi32
RegOpenKeyExW
RegOpenKeyW
RegConnectRegistryW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
LookupAccountNameW
IsValidSid
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyW
SystemFunction036
comctl32
ImageList_Create
InitCommonControlsEx
_TrackMouseEvent
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_GetIconSize
oleaut32
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetElement
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
RevokeDragDrop
OleUninitialize
OleInitialize
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
Shell_NotifyIconW
SHGetFolderLocation
ws2_32
WSAStartup
gethostbyname
WSACleanup
closesocket
winmm
timeBeginPeriod
gdiplus
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
imagehlp
MakeSureDirectoryPathExists
MapFileAndCheckSumW
uxtheme
SetWindowTheme
OpenThemeData
DrawThemeBackground
CloseThemeData
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.9MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.modplug Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Setup/Office Installer+ x86.exe.exe windows:4 windows x86 arch:x86
391ffd93a83148a2faa87f0164e9b9e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameW
GetUserDefaultLangID
CloseHandle
GetCurrentThreadId
GetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
CreateToolhelp32Snapshot
GetLogicalDriveStringsW
QueryDosDeviceW
FileTimeToLocalFileTime
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetCurrentProcess
GetSystemDefaultLangID
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
GetCurrentProcessId
OpenProcess
GetLastError
FormatMessageW
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
WideCharToMultiByte
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
CreateProcessW
HeapCreate
CreateSemaphoreW
HeapDestroy
ExitProcess
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
TerminateProcess
GetStdHandle
WriteFile
GetModuleFileNameW
FreeLibrary
GetModuleHandleExW
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapFree
SetLastError
GetCurrentThread
HeapAlloc
EnumSystemLocalesW
LoadLibraryExW
CompareStringW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetDateFormatW
GetLocaleInfoW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
IsValidLocale
LCMapStringW
OutputDebugStringW
GetFileType
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsValidCodePage
GetCommandLineA
GetCommandLineW
FindFirstFileExW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
WriteConsoleW
CreateFileW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
EncodePointer
RaiseException
GetFileSize
CreateThread
InitializeCriticalSection
Sleep
LoadLibraryW
DuplicateHandle
CreatePipe
PeekNamedPipe
GetExitCodeProcess
SetFilePointer
SetEndOfFile
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
lstrcpyA
lstrcpynA
GetTickCount
GetVersionExW
CreateDirectoryW
GetDriveTypeW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
SetCurrentDirectoryW
CopyFileW
RemoveDirectoryW
GetCurrentDirectoryW
SetFileTime
MulDiv
GetLocalTime
SetEvent
CreateEventA
LoadLibraryA
ReleaseSemaphore
GetFileInformationByHandle
CreateFileA
ResetEvent
QueryPerformanceFrequency
SetThreadPriority
UnregisterWait
RegisterWaitForSingleObject
GetFileSizeEx
DecodePointer
user32
SendMessageW
OemToCharW
GetCursorPos
WindowFromPoint
IsWindowEnabled
GetClassLongW
SetClassLongW
SetWindowRgn
GetClassNameW
CallNextHookEx
GetWindowLongW
SetWindowsHookExW
UnhookWindowsHookEx
ReleaseDC
EnumWindows
GetWindowThreadProcessId
FindWindowExW
FindWindowW
GetForegroundWindow
SetCursorPos
InvalidateRect
GetSysColor
GetWindow
IsWindow
DefWindowProcW
SetWindowLongW
GetClientRect
FillRect
CallWindowProcW
GetParent
GetDC
SetWindowPos
BeginPaint
EndPaint
GetAsyncKeyState
KillTimer
ScreenToClient
SetTimer
RedrawWindow
DrawTextW
GetDlgCtrlID
GetWindowRect
OffsetRect
IsRectEmpty
MapWindowPoints
SubtractRect
FrameRect
InflateRect
ShowWindow
DrawFrameControl
PostMessageW
MessageBoxW
IsWindowVisible
EnableWindow
wsprintfA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetIconInfo
UpdateWindow
ReleaseCapture
DrawStateW
SetCapture
GetSystemMetrics
CreateWindowExW
GetKeyState
GetPropW
ClipCursor
SetCursor
GetCapture
GetFocus
DrawFocusRect
GetMessagePos
LoadCursorW
SetPropW
ChildWindowFromPointEx
RegisterClassExW
DestroyWindow
MoveWindow
SystemParametersInfoW
RemovePropW
GetSysColorBrush
SetRect
ClientToScreen
SetScrollPos
GetWindowDC
SetScrollInfo
GetScrollPos
GetScrollRange
EnumPropsExW
GetMenu
SetActiveWindow
IsZoomed
IsIconic
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RegisterClassW
AdjustWindowRectEx
UnregisterClassW
CreateAcceleratorTableW
DestroyIcon
LoadIconW
DestroyAcceleratorTable
DefFrameProcW
EnumChildWindows
SetForegroundWindow
TrackPopupMenu
IsChild
SetMenu
DestroyMenu
RegisterWindowMessageW
CopyImage
DrawIconEx
CreateIconFromResourceEx
CreateIconFromResource
CharLowerW
CharUpperW
gdi32
CreateRoundRectRgn
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
SetBkMode
SetTextColor
SelectClipRgn
SetDCBrushColor
GetStockObject
SetBrushOrgEx
GetObjectType
GetObjectW
CreateDIBSection
GdiGetBatchLimit
GdiSetBatchLimit
CreateFontIndirectW
GetTextExtentPoint32W
SetBkColor
ExcludeClipRect
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
CreatePen
MoveToEx
LineTo
GetDeviceCaps
GetDIBits
SetTextAlign
TextOutW
SetStretchBltMode
StretchBlt
GetTextMetricsW
GetPixel
CreateBitmap
SetPixel
CreateFontW
advapi32
RegOpenKeyExW
RegOpenKeyW
RegConnectRegistryW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
LookupAccountNameW
IsValidSid
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyW
SystemFunction036
comctl32
ImageList_Create
InitCommonControlsEx
_TrackMouseEvent
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_GetIconSize
oleaut32
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetElement
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
RevokeDragDrop
OleUninitialize
OleInitialize
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
Shell_NotifyIconW
SHGetFolderLocation
ws2_32
WSAStartup
gethostbyname
WSACleanup
closesocket
winmm
timeBeginPeriod
gdiplus
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
imagehlp
MakeSureDirectoryPathExists
MapFileAndCheckSumW
uxtheme
SetWindowTheme
OpenThemeData
DrawThemeBackground
CloseThemeData
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.9MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.modplug Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Setup/Office Installer+.exe.exe windows:5 windows x64 arch:x64
ce2219f0b0329208c7f2fcc172791373
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetShortPathNameW
GetUserDefaultLangID
CloseHandle
GetCurrentThreadId
GetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
CreateToolhelp32Snapshot
GetLogicalDriveStringsW
QueryDosDeviceW
FileTimeToLocalFileTime
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetCurrentProcess
GetSystemDefaultLangID
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
GetCurrentProcessId
OpenProcess
GetLastError
FormatMessageW
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
WideCharToMultiByte
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
CreateProcessW
HeapCreate
CreateSemaphoreW
HeapDestroy
ExitProcess
InitializeSListHead
IsProcessorFeaturePresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStdHandle
WriteFile
GetModuleFileNameW
FreeLibrary
TerminateProcess
GetModuleHandleExW
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapFree
SetLastError
HeapAlloc
GetCurrentThread
EnumSystemLocalesW
LoadLibraryExW
CompareStringW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
GetDateFormatW
GetLocaleInfoW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
IsValidLocale
LCMapStringW
OutputDebugStringW
GetFileType
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsValidCodePage
GetCommandLineA
GetCommandLineW
FindFirstFileExW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
WriteConsoleW
CreateFileW
RtlUnwindEx
InterlockedFlushSList
InterlockedPushEntrySList
EncodePointer
RaiseException
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
RtlPcToFileHeader
RtlUnwind
GetFileSize
CreateThread
InitializeCriticalSection
Sleep
LoadLibraryW
DuplicateHandle
CreatePipe
PeekNamedPipe
GetExitCodeProcess
SetFilePointer
SetEndOfFile
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
lstrcpyA
lstrcpynA
GetTickCount
GetVersionExW
CreateDirectoryW
GetDriveTypeW
GetFileAttributesW
DeleteFileW
SetFileAttributesW
SetCurrentDirectoryW
CopyFileW
RemoveDirectoryW
GetCurrentDirectoryW
SetFileTime
MulDiv
GetLocalTime
SetEvent
CreateEventA
LoadLibraryA
SetThreadPriority
ReleaseSemaphore
GetFileInformationByHandle
CreateFileA
ResetEvent
QueryPerformanceFrequency
UnregisterWait
RegisterWaitForSingleObject
GetFileSizeEx
user32
SendMessageW
OemToCharW
GetCursorPos
WindowFromPoint
IsWindowEnabled
GetClassLongPtrW
SetClassLongPtrW
SetWindowRgn
GetClassNameW
CallNextHookEx
GetWindowLongPtrW
SetWindowsHookExW
UnhookWindowsHookEx
ReleaseDC
EnumWindows
GetWindowThreadProcessId
FindWindowExW
FindWindowW
GetForegroundWindow
SetCursorPos
InvalidateRect
GetSysColor
GetWindow
IsWindow
DefWindowProcW
SetWindowLongPtrW
GetClientRect
FillRect
CallWindowProcW
GetParent
GetDC
SetWindowPos
BeginPaint
EndPaint
GetAsyncKeyState
KillTimer
ScreenToClient
SetTimer
RedrawWindow
DrawTextW
GetDlgCtrlID
GetWindowRect
OffsetRect
IsRectEmpty
MapWindowPoints
SubtractRect
FrameRect
InflateRect
ShowWindow
DrawFrameControl
PostMessageW
MessageBoxW
IsWindowVisible
EnableWindow
wsprintfA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetIconInfo
UpdateWindow
ReleaseCapture
DrawStateW
SetCapture
GetSystemMetrics
CreateWindowExW
GetKeyState
GetPropW
ClipCursor
SetCursor
GetCapture
GetFocus
DrawFocusRect
GetMessagePos
LoadCursorW
SetPropW
ChildWindowFromPointEx
RegisterClassExW
DestroyWindow
MoveWindow
RemovePropW
GetSysColorBrush
SetRect
GetWindowLongW
ClientToScreen
SetScrollPos
GetWindowDC
SetScrollInfo
GetScrollPos
GetScrollRange
SystemParametersInfoW
EnumPropsExW
GetMenu
SetActiveWindow
IsZoomed
IsIconic
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RegisterClassW
AdjustWindowRectEx
UnregisterClassW
CreateAcceleratorTableW
DestroyIcon
LoadIconW
DestroyAcceleratorTable
DefFrameProcW
EnumChildWindows
SetForegroundWindow
TrackPopupMenu
IsChild
SetMenu
DestroyMenu
RegisterWindowMessageW
CopyImage
DrawIconEx
CreateIconFromResourceEx
CreateIconFromResource
CharLowerW
CharUpperW
gdi32
CreateRoundRectRgn
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
SetBkMode
SetTextColor
SelectClipRgn
SetDCBrushColor
GetStockObject
SetBrushOrgEx
GetObjectType
GetObjectW
CreateDIBSection
GdiGetBatchLimit
GdiSetBatchLimit
GetTextExtentPoint32W
SetBkColor
ExcludeClipRect
CreateFontIndirectW
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
CreatePen
MoveToEx
LineTo
GetDeviceCaps
GetDIBits
SetTextAlign
TextOutW
SetStretchBltMode
StretchBlt
GetTextMetricsW
GetPixel
CreateBitmap
SetPixel
CreateFontW
advapi32
RegOpenKeyExW
RegOpenKeyW
RegConnectRegistryW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
LookupAccountNameW
IsValidSid
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyW
SystemFunction036
comctl32
ImageList_Create
InitCommonControlsEx
_TrackMouseEvent
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_GetIconSize
oleaut32
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetElement
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
RevokeDragDrop
OleUninitialize
OleInitialize
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
Shell_NotifyIconW
SHGetFolderLocation
ws2_32
WSAStartup
gethostbyname
WSACleanup
closesocket
winmm
timeBeginPeriod
gdiplus
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
imagehlp
MakeSureDirectoryPathExists
MapFileAndCheckSumW
uxtheme
SetWindowTheme
OpenThemeData
DrawThemeBackground
CloseThemeData
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gehcont Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxfg Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.9MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug_l Size: 512B - Virtual size: 123B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_i Size: 512B - Virtual size: 46B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_a Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_a Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_s Size: 512B - Virtual size: 155B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_f Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.modplug Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Setup/Office Installer.exe.exe windows:5 windows x64 arch:x64
ce2219f0b0329208c7f2fcc172791373
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetShortPathNameW
GetUserDefaultLangID
CloseHandle
GetCurrentThreadId
GetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
CreateToolhelp32Snapshot
GetLogicalDriveStringsW
QueryDosDeviceW
FileTimeToLocalFileTime
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetCurrentProcess
GetSystemDefaultLangID
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
GetCurrentProcessId
OpenProcess
GetLastError
FormatMessageW
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
WideCharToMultiByte
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
CreateProcessW
HeapCreate
CreateSemaphoreW
HeapDestroy
ExitProcess
InitializeSListHead
IsProcessorFeaturePresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStdHandle
WriteFile
GetModuleFileNameW
FreeLibrary
TerminateProcess
GetModuleHandleExW
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapFree
SetLastError
HeapAlloc
GetCurrentThread
EnumSystemLocalesW
LoadLibraryExW
CompareStringW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
GetDateFormatW
GetLocaleInfoW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
IsValidLocale
LCMapStringW
OutputDebugStringW
GetFileType
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsValidCodePage
GetCommandLineA
GetCommandLineW
FindFirstFileExW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
WriteConsoleW
CreateFileW
RtlUnwindEx
InterlockedFlushSList
InterlockedPushEntrySList
EncodePointer
RaiseException
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
RtlPcToFileHeader
RtlUnwind
GetFileSize
CreateThread
InitializeCriticalSection
Sleep
LoadLibraryW
DuplicateHandle
CreatePipe
PeekNamedPipe
GetExitCodeProcess
SetFilePointer
SetEndOfFile
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
lstrcpyA
lstrcpynA
GetTickCount
GetVersionExW
CreateDirectoryW
GetDriveTypeW
GetFileAttributesW
DeleteFileW
SetFileAttributesW
SetCurrentDirectoryW
CopyFileW
RemoveDirectoryW
GetCurrentDirectoryW
SetFileTime
MulDiv
GetLocalTime
SetEvent
CreateEventA
LoadLibraryA
SetThreadPriority
ReleaseSemaphore
GetFileInformationByHandle
CreateFileA
ResetEvent
QueryPerformanceFrequency
UnregisterWait
RegisterWaitForSingleObject
GetFileSizeEx
user32
SendMessageW
OemToCharW
GetCursorPos
WindowFromPoint
IsWindowEnabled
GetClassLongPtrW
SetClassLongPtrW
SetWindowRgn
GetClassNameW
CallNextHookEx
GetWindowLongPtrW
SetWindowsHookExW
UnhookWindowsHookEx
ReleaseDC
EnumWindows
GetWindowThreadProcessId
FindWindowExW
FindWindowW
GetForegroundWindow
SetCursorPos
InvalidateRect
GetSysColor
GetWindow
IsWindow
DefWindowProcW
SetWindowLongPtrW
GetClientRect
FillRect
CallWindowProcW
GetParent
GetDC
SetWindowPos
BeginPaint
EndPaint
GetAsyncKeyState
KillTimer
ScreenToClient
SetTimer
RedrawWindow
DrawTextW
GetDlgCtrlID
GetWindowRect
OffsetRect
IsRectEmpty
MapWindowPoints
SubtractRect
FrameRect
InflateRect
ShowWindow
DrawFrameControl
PostMessageW
MessageBoxW
IsWindowVisible
EnableWindow
wsprintfA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetIconInfo
UpdateWindow
ReleaseCapture
DrawStateW
SetCapture
GetSystemMetrics
CreateWindowExW
GetKeyState
GetPropW
ClipCursor
SetCursor
GetCapture
GetFocus
DrawFocusRect
GetMessagePos
LoadCursorW
SetPropW
ChildWindowFromPointEx
RegisterClassExW
DestroyWindow
MoveWindow
RemovePropW
GetSysColorBrush
SetRect
GetWindowLongW
ClientToScreen
SetScrollPos
GetWindowDC
SetScrollInfo
GetScrollPos
GetScrollRange
SystemParametersInfoW
EnumPropsExW
GetMenu
SetActiveWindow
IsZoomed
IsIconic
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RegisterClassW
AdjustWindowRectEx
UnregisterClassW
CreateAcceleratorTableW
DestroyIcon
LoadIconW
DestroyAcceleratorTable
DefFrameProcW
EnumChildWindows
SetForegroundWindow
TrackPopupMenu
IsChild
SetMenu
DestroyMenu
RegisterWindowMessageW
CopyImage
DrawIconEx
CreateIconFromResourceEx
CreateIconFromResource
CharLowerW
CharUpperW
gdi32
CreateRoundRectRgn
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
SetBkMode
SetTextColor
SelectClipRgn
SetDCBrushColor
GetStockObject
SetBrushOrgEx
GetObjectType
GetObjectW
CreateDIBSection
GdiGetBatchLimit
GdiSetBatchLimit
GetTextExtentPoint32W
SetBkColor
ExcludeClipRect
CreateFontIndirectW
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
CreatePen
MoveToEx
LineTo
GetDeviceCaps
GetDIBits
SetTextAlign
TextOutW
SetStretchBltMode
StretchBlt
GetTextMetricsW
GetPixel
CreateBitmap
SetPixel
CreateFontW
advapi32
RegOpenKeyExW
RegOpenKeyW
RegConnectRegistryW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
LookupAccountNameW
IsValidSid
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyW
SystemFunction036
comctl32
ImageList_Create
InitCommonControlsEx
_TrackMouseEvent
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_GetIconSize
oleaut32
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetElement
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
RevokeDragDrop
OleUninitialize
OleInitialize
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
Shell_NotifyIconW
SHGetFolderLocation
ws2_32
WSAStartup
gethostbyname
WSACleanup
closesocket
winmm
timeBeginPeriod
gdiplus
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
imagehlp
MakeSureDirectoryPathExists
MapFileAndCheckSumW
uxtheme
SetWindowTheme
OpenThemeData
DrawThemeBackground
CloseThemeData
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gehcont Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxfg Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.9MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug_l Size: 512B - Virtual size: 123B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_i Size: 512B - Virtual size: 46B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_a Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_a Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_s Size: 512B - Virtual size: 155B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug_f Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.modplug Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ