LangDialog
Overview
overview
8Static
static
366e55213d9...18.exe
windows7-x64
766e55213d9...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
37+ Taskbar...er.exe
windows7-x64
17+ Taskbar...er.exe
windows10-2004-x64
8bin/64/inject.dll
windows7-x64
8bin/64/inject.dll
windows10-2004-x64
8inject.dll
windows7-x64
8inject.dll
windows10-2004-x64
8Static task
static1
Behavioral task
behavioral1
Sample
66e55213d99c6ef0838b4ef4849073f3_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
66e55213d99c6ef0838b4ef4849073f3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
7+ Taskbar Tweaker.exe
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
7+ Taskbar Tweaker.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
bin/64/inject.dll
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
bin/64/inject.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
inject.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
inject.dll
Resource
win10v2004-20240508-en
General
-
Target
66e55213d99c6ef0838b4ef4849073f3_JaffaCakes118
-
Size
1.6MB
-
MD5
66e55213d99c6ef0838b4ef4849073f3
-
SHA1
57e03108cbeae552f9aa4f0b3052be98f4a85d47
-
SHA256
e090a1939f6e389201b0df3667e0ec2185f7fdedd97eb37dd8dfa1934cf0d5ce
-
SHA512
56aa33d2c2a9ef3c5bee11fc055ffaa3a5a9568c709f5a5c11dbd8b1f49b96ec7a3e9d00cb3043085c34c9074fc648698bae8b0835b043cfbffcf18a7019cdf8
-
SSDEEP
24576:kolPMrdxivY6ih3lxGEqSYIXagtikTjFd2Q1fW8f0XJpjqLIoz+rUySfxQaACwb0:VRwOMbGaYInokbFvAJ4f/yFaAd4iLa
Malware Config
Signatures
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource 66e55213d99c6ef0838b4ef4849073f3_JaffaCakes118 unpack001/$PLUGINSDIR/LangDLL.dll unpack001/$PLUGINSDIR/System.dll unpack001/$PLUGINSDIR/nsDialogs.dll unpack001/7+ Taskbar Tweaker.exe unpack001/bin/64/7+ Taskbar Tweaker.ex2 unpack001/bin/64/inject.dll unpack001/inject.dll
Files
-
66e55213d99c6ef0838b4ef4849073f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f23f452093b5c1ff091a2f9fb4fa3e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
SetCurrentDirectoryW
GetFileAttributesW
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
CopyFileW
GetShortPathNameW
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalUnlock
GetDiskFreeSpaceW
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
user32
GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
advapi32
AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/LangDLL.dll.dll windows:4 windows x86 arch:x86
3e8d18bb71c7ebbda2ddc2a4bb03547b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW
user32
DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 681B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
fc0224e99e736751432961db63a41b76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 867B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/modern-header.bmp
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/nsDialogs.dll.dll windows:4 windows x86 arch:x86
6b5c4f7d679059f68f1269aad3a5cecd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetFileAttributesW
lstrcpyW
MulDiv
lstrlenW
HeapFree
GetCurrentDirectoryW
lstrcmpiW
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
SetCurrentDirectoryW
HeapAlloc
user32
DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
GetPropW
CharPrevW
DrawFocusRect
GetWindowLongW
DrawTextW
GetClientRect
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapDialogRect
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
CharNextW
SendMessageW
MapWindowPoints
RemovePropW
GetWindowTextW
gdi32
SetTextColor
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
ole32
CoTaskMemFree
Exports
Exports
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 638B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
7+ Taskbar Tweaker.exe.exe .vbs windows:6 windows x64 arch:x64 polyglot
5e956d5a181fcdc8ce5b255dd7b648d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
ord345
InitCommonControlsEx
wininet
HttpSendRequestW
InternetReadFile
HttpOpenRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetSetStatusCallbackW
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
HttpQueryInfoW
uxtheme
SetWindowTheme
dbghelp
SymInitialize
SymFromAddrW
SymCleanup
MiniDumpWriteDump
shlwapi
PathFindFileNameW
PathCombineW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
HeapFree
GetCurrentProcess
RtlCaptureStackBackTrace
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
GetVersionExW
GetProcessTimes
GetSystemTimeAsFileTime
HeapReAlloc
lstrlenW
lstrcmpA
DeleteFileW
UnmapViewOfFile
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
GetTempPathW
GetTempFileNameW
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
lstrcatW
WriteFile
SetLastError
WritePrivateProfileStringW
GetLastError
GetPrivateProfileStringW
GetModuleHandleW
SizeofResource
GetThreadUILanguage
LCIDToLocaleName
GetFileAttributesW
lstrcmpW
ReadFile
HeapSize
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetUnhandledExceptionFilter
GetCommandLineW
SetThreadUILanguage
LocalFree
ExitProcess
CreateMutexW
WaitForSingleObject
ReleaseMutex
lstrcmpiW
OpenMutexW
OpenProcess
CreateEventW
DuplicateHandle
CreateThread
ResumeThread
SetEvent
LoadLibraryW
GetProcAddress
FreeLibrary
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
WaitForMultipleObjects
ReadProcessMemory
WriteProcessMemory
VerSetConditionMask
VerifyVersionInfoW
GetTickCount
CreateDirectoryW
GetProcessHeap
CreateProcessW
CompareStringW
EnumResourceLanguagesW
FindResourceExW
MultiByteToWideChar
RemoveDirectoryW
HeapAlloc
GetModuleHandleExW
lstrlenA
user32
MessageBoxW
DestroyWindow
GetClientRect
GetWindowRect
GetDlgItem
EnableWindow
DefWindowProcW
IsWindowEnabled
GetFocus
GetKeyState
GetDlgCtrlID
BeginDeferWindowPos
EndDeferWindowPos
GetSystemMetrics
MapWindowPoints
CreateWindowExW
SetWindowPos
SetWindowLongW
ClientToScreen
CreatePopupMenu
AppendMenuW
TrackPopupMenu
DestroyMenu
RedrawWindow
DeferWindowPos
SetWindowsHookExW
SetFocus
GetWindowTextW
UnhookWindowsHookEx
CallWindowProcW
CallNextHookEx
FindWindowW
GetWindowThreadProcessId
AllowSetForegroundWindow
PostMessageW
RegisterWindowMessageW
SetWindowTextW
GetUserObjectInformationW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
LoadImageW
KillTimer
SetTimer
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
GetCursorPos
ReplyMessage
PostQuitMessage
DestroyIcon
GetDC
ReleaseDC
SystemParametersInfoW
GetSystemMenu
GetMenuItemCount
InsertMenuItemW
PtInRect
WaitForInputIdle
GetClassInfoW
RegisterClassW
LoadStringW
GetWindow
GetClassNameW
MoveWindow
CheckDlgButton
SendDlgItemMessageW
DialogBoxParamW
IsDlgButtonChecked
EndDialog
wvsprintfW
wsprintfW
SetDlgItemTextW
SendMessageW
GetParent
SetWindowLongPtrW
ShowWindow
CreateDialogParamW
CreateDialogIndirectParamW
GetThreadDesktop
GetWindowLongW
GetWindowLongPtrW
gdi32
CreatePatternBrush
SelectObject
DeleteObject
SetBrushOrgEx
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectW
SetBkMode
GetTextExtentPoint32W
advapi32
DuplicateToken
RegCreateKeyExW
RegCloseKey
RegDeleteTreeW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
GetFileSecurityW
GetUserNameW
RegOpenKeyExW
AccessCheck
MapGenericMask
RegGetValueW
OpenProcessToken
shell32
SetCurrentProcessExplicitAppUserModelID
CommandLineToArgvW
ShellExecuteW
Shell_NotifyIconW
Shell_NotifyIconGetRect
ole32
CoUninitialize
CoInitializeEx
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bin/64/7+ Taskbar Tweaker.ex2.exe .vbs windows:6 windows x64 arch:x64 polyglot
5e956d5a181fcdc8ce5b255dd7b648d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
ord345
InitCommonControlsEx
wininet
HttpSendRequestW
InternetReadFile
HttpOpenRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetSetStatusCallbackW
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
HttpQueryInfoW
uxtheme
SetWindowTheme
dbghelp
SymInitialize
SymFromAddrW
SymCleanup
MiniDumpWriteDump
shlwapi
PathFindFileNameW
PathCombineW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
HeapFree
GetCurrentProcess
RtlCaptureStackBackTrace
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
GetVersionExW
GetProcessTimes
GetSystemTimeAsFileTime
HeapReAlloc
lstrlenW
lstrcmpA
DeleteFileW
UnmapViewOfFile
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
GetTempPathW
GetTempFileNameW
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
lstrcatW
WriteFile
SetLastError
WritePrivateProfileStringW
GetLastError
GetPrivateProfileStringW
GetModuleHandleW
SizeofResource
GetThreadUILanguage
LCIDToLocaleName
GetFileAttributesW
lstrcmpW
ReadFile
HeapSize
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetUnhandledExceptionFilter
GetCommandLineW
SetThreadUILanguage
LocalFree
ExitProcess
CreateMutexW
WaitForSingleObject
ReleaseMutex
lstrcmpiW
OpenMutexW
OpenProcess
CreateEventW
DuplicateHandle
CreateThread
ResumeThread
SetEvent
LoadLibraryW
GetProcAddress
FreeLibrary
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
WaitForMultipleObjects
ReadProcessMemory
WriteProcessMemory
VerSetConditionMask
VerifyVersionInfoW
GetTickCount
CreateDirectoryW
GetProcessHeap
CreateProcessW
CompareStringW
EnumResourceLanguagesW
FindResourceExW
MultiByteToWideChar
RemoveDirectoryW
HeapAlloc
GetModuleHandleExW
lstrlenA
user32
MessageBoxW
DestroyWindow
GetClientRect
GetWindowRect
GetDlgItem
EnableWindow
DefWindowProcW
IsWindowEnabled
GetFocus
GetKeyState
GetDlgCtrlID
BeginDeferWindowPos
EndDeferWindowPos
GetSystemMetrics
MapWindowPoints
CreateWindowExW
SetWindowPos
SetWindowLongW
ClientToScreen
CreatePopupMenu
AppendMenuW
TrackPopupMenu
DestroyMenu
RedrawWindow
DeferWindowPos
SetWindowsHookExW
SetFocus
GetWindowTextW
UnhookWindowsHookEx
CallWindowProcW
CallNextHookEx
FindWindowW
GetWindowThreadProcessId
AllowSetForegroundWindow
PostMessageW
RegisterWindowMessageW
SetWindowTextW
GetUserObjectInformationW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
LoadImageW
KillTimer
SetTimer
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
GetCursorPos
ReplyMessage
PostQuitMessage
DestroyIcon
GetDC
ReleaseDC
SystemParametersInfoW
GetSystemMenu
GetMenuItemCount
InsertMenuItemW
PtInRect
WaitForInputIdle
GetClassInfoW
RegisterClassW
LoadStringW
GetWindow
GetClassNameW
MoveWindow
CheckDlgButton
SendDlgItemMessageW
DialogBoxParamW
IsDlgButtonChecked
EndDialog
wvsprintfW
wsprintfW
SetDlgItemTextW
SendMessageW
GetParent
SetWindowLongPtrW
ShowWindow
CreateDialogParamW
CreateDialogIndirectParamW
GetThreadDesktop
GetWindowLongW
GetWindowLongPtrW
gdi32
CreatePatternBrush
SelectObject
DeleteObject
SetBrushOrgEx
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectW
SetBkMode
GetTextExtentPoint32W
advapi32
DuplicateToken
RegCreateKeyExW
RegCloseKey
RegDeleteTreeW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
GetFileSecurityW
GetUserNameW
RegOpenKeyExW
AccessCheck
MapGenericMask
RegGetValueW
OpenProcessToken
shell32
SetCurrentProcessExplicitAppUserModelID
CommandLineToArgvW
ShellExecuteW
Shell_NotifyIconW
Shell_NotifyIconGetRect
ole32
CoUninitialize
CoInitializeEx
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bin/64/inject.dll.dll windows:6 windows x64 arch:x64
61f8b14d4053b79aaa5d86517852e0db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
comctl32
ord338
ord328
ord412
ord410
ImageList_Remove
ImageList_SetImageCount
ImageList_ReplaceIcon
ImageList_Create
ord336
ord334
ord413
shlwapi
SHStrDupW
PathFindFileNameW
StrCmpLogicalW
uxtheme
SetWindowTheme
DrawThemeParentBackground
CloseThemeData
OpenThemeData
dwmapi
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wininet
InternetOpenW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetReadFile
InternetCloseHandle
kernel32
GetFileType
GetStdHandle
LCMapStringW
HeapAlloc
GetProcessHeap
GetModuleHandleExW
HeapFree
GetCurrentProcess
RtlCaptureStackBackTrace
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
GetVersionExW
GetProcessTimes
GetSystemTimeAsFileTime
HeapReAlloc
lstrlenW
lstrcmpA
DeleteFileW
UnmapViewOfFile
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
GetTempPathW
GetTempFileNameW
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
lstrcatW
WriteFile
SetLastError
WritePrivateProfileStringW
GetLastError
GetPrivateProfileStringW
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
SetUnhandledExceptionFilter
K32GetModuleInformation
GetModuleHandleW
WaitForMultipleObjects
FreeLibraryAndExitThread
CreateThread
DuplicateHandle
Sleep
lstrcmpiA
VirtualProtect
GetProcAddress
OpenProcess
TerminateProcess
MulDiv
DebugBreak
HeapSize
lstrcmpW
lstrcmpiW
CreateEventW
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
GetProcessId
OpenMutexW
CreateProcessW
SetThreadUILanguage
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
ReleaseMutex
GlobalFindAtomW
HeapCreate
Thread32Next
CreateMutexW
Thread32First
SuspendThread
CreateToolhelp32Snapshot
HeapDestroy
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedFlushSList
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
FreeLibrary
RaiseException
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetStringTypeW
GetTickCount
user32
PostQuitMessage
TranslateMessage
DispatchMessageW
UnhookWindowsHookEx
GetForegroundWindow
CallNextHookEx
GetDesktopWindow
WaitForInputIdle
FindWindowW
GetGUIThreadInfo
GetWindowTextLengthW
SetForegroundWindow
GetClassNameW
EnumThreadWindows
FindWindowExW
InflateRect
CalculatePopupWindowPosition
ShowWindow
GetWindowLongPtrW
DialogBoxParamW
SystemParametersInfoW
GetDlgItem
SetWindowLongW
EndDialog
MonitorFromWindow
SetWindowLongPtrW
MoveWindow
SetCapture
ReleaseCapture
SetWindowTextW
LoadImageW
GetMessageW
GetClassLongPtrW
CreatePopupMenu
AppendMenuW
SetMenuItemInfoW
TrackPopupMenu
DestroyMenu
GetMenuItemInfoW
CascadeWindows
TileWindows
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetFocus
DefWindowProcW
GetDoubleClickTime
SendInput
SetRectEmpty
SetWindowsHookExW
GetKeyState
CreateWindowExW
RegisterClassW
UnregisterHotKey
IntersectRect
GetParent
GetWindowRect
PtInRect
MapWindowPoints
LoadCursorW
SetCursor
WindowFromPoint
DestroyWindow
RegisterHotKey
PeekMessageW
PostThreadMessageW
DestroyIcon
GetClientRect
GetCapture
GetPropW
GetCursorPos
RedrawWindow
EnableWindow
SetWindowPos
ReleaseDC
GetDC
GetSystemMetrics
ClientToScreen
MonitorFromPoint
SendMessageW
InternalGetWindowText
InvalidateRect
IsWindow
KillTimer
SetTimer
SwitchToThisWindow
ShowWindowAsync
GetWindow
IsWindowVisible
GetAncestor
GetLastActivePopup
IsZoomed
GetMenuState
GetSystemMenu
GetWindowLongW
IsWindowEnabled
IsIconic
PostMessageW
GetScrollInfo
GetClassLongW
GetClassInfoW
AllowSetForegroundWindow
GetWindowThreadProcessId
SendMessageTimeoutW
LoadStringW
RegisterWindowMessageW
wsprintfW
wvsprintfW
UnregisterClassW
IsChild
gdi32
GetDeviceCaps
advapi32
RegEnumValueW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegGetValueW
shell32
Shell_NotifyIconGetRect
SHGetPropertyStoreForWindow
ole32
PropVariantClear
CoCreateInstance
Exports
Exports
Init
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
inject.dll.dll windows:6 windows x64 arch:x64
61f8b14d4053b79aaa5d86517852e0db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
comctl32
ord338
ord328
ord412
ord410
ImageList_Remove
ImageList_SetImageCount
ImageList_ReplaceIcon
ImageList_Create
ord336
ord334
ord413
shlwapi
SHStrDupW
PathFindFileNameW
StrCmpLogicalW
uxtheme
SetWindowTheme
DrawThemeParentBackground
CloseThemeData
OpenThemeData
dwmapi
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wininet
InternetOpenW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetReadFile
InternetCloseHandle
kernel32
GetFileType
GetStdHandle
LCMapStringW
HeapAlloc
GetProcessHeap
GetModuleHandleExW
HeapFree
GetCurrentProcess
RtlCaptureStackBackTrace
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
GetVersionExW
GetProcessTimes
GetSystemTimeAsFileTime
HeapReAlloc
lstrlenW
lstrcmpA
DeleteFileW
UnmapViewOfFile
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
GetTempPathW
GetTempFileNameW
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
lstrcatW
WriteFile
SetLastError
WritePrivateProfileStringW
GetLastError
GetPrivateProfileStringW
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
SetUnhandledExceptionFilter
K32GetModuleInformation
GetModuleHandleW
WaitForMultipleObjects
FreeLibraryAndExitThread
CreateThread
DuplicateHandle
Sleep
lstrcmpiA
VirtualProtect
GetProcAddress
OpenProcess
TerminateProcess
MulDiv
DebugBreak
HeapSize
lstrcmpW
lstrcmpiW
CreateEventW
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
GetProcessId
OpenMutexW
CreateProcessW
SetThreadUILanguage
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
ReleaseMutex
GlobalFindAtomW
HeapCreate
Thread32Next
CreateMutexW
Thread32First
SuspendThread
CreateToolhelp32Snapshot
HeapDestroy
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedFlushSList
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
FreeLibrary
RaiseException
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetStringTypeW
GetTickCount
user32
PostQuitMessage
TranslateMessage
DispatchMessageW
UnhookWindowsHookEx
GetForegroundWindow
CallNextHookEx
GetDesktopWindow
WaitForInputIdle
FindWindowW
GetGUIThreadInfo
GetWindowTextLengthW
SetForegroundWindow
GetClassNameW
EnumThreadWindows
FindWindowExW
InflateRect
CalculatePopupWindowPosition
ShowWindow
GetWindowLongPtrW
DialogBoxParamW
SystemParametersInfoW
GetDlgItem
SetWindowLongW
EndDialog
MonitorFromWindow
SetWindowLongPtrW
MoveWindow
SetCapture
ReleaseCapture
SetWindowTextW
LoadImageW
GetMessageW
GetClassLongPtrW
CreatePopupMenu
AppendMenuW
SetMenuItemInfoW
TrackPopupMenu
DestroyMenu
GetMenuItemInfoW
CascadeWindows
TileWindows
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetFocus
DefWindowProcW
GetDoubleClickTime
SendInput
SetRectEmpty
SetWindowsHookExW
GetKeyState
CreateWindowExW
RegisterClassW
UnregisterHotKey
IntersectRect
GetParent
GetWindowRect
PtInRect
MapWindowPoints
LoadCursorW
SetCursor
WindowFromPoint
DestroyWindow
RegisterHotKey
PeekMessageW
PostThreadMessageW
DestroyIcon
GetClientRect
GetCapture
GetPropW
GetCursorPos
RedrawWindow
EnableWindow
SetWindowPos
ReleaseDC
GetDC
GetSystemMetrics
ClientToScreen
MonitorFromPoint
SendMessageW
InternalGetWindowText
InvalidateRect
IsWindow
KillTimer
SetTimer
SwitchToThisWindow
ShowWindowAsync
GetWindow
IsWindowVisible
GetAncestor
GetLastActivePopup
IsZoomed
GetMenuState
GetSystemMenu
GetWindowLongW
IsWindowEnabled
IsIconic
PostMessageW
GetScrollInfo
GetClassLongW
GetClassInfoW
AllowSetForegroundWindow
GetWindowThreadProcessId
SendMessageTimeoutW
LoadStringW
RegisterWindowMessageW
wsprintfW
wvsprintfW
UnregisterClassW
IsChild
gdi32
GetDeviceCaps
advapi32
RegEnumValueW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegGetValueW
shell32
Shell_NotifyIconGetRect
SHGetPropertyStoreForWindow
ole32
PropVariantClear
CoCreateInstance
Exports
Exports
Init
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ