Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-27_8eaff86c76f8ad3dedfd3ca3aed5489d_icedid.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-27_8eaff86c76f8ad3dedfd3ca3aed5489d_icedid.exe
Resource
win10v2004-20240508-en
Target
2024-05-27_8eaff86c76f8ad3dedfd3ca3aed5489d_icedid
Size
6.8MB
MD5
8eaff86c76f8ad3dedfd3ca3aed5489d
SHA1
ff6973a261535a25e3849b6deefbadfa9646d707
SHA256
9e93329e7ce9c7c1a64038b18b6f123b710b1abc1fc3e78abb266f6afeaac73f
SHA512
eb53cc2e3d4b38791602c86746dc9327a3d7bb2b214700d74d5214d1b626a6bcb163d86b71e93f5911bd020359562c82625afc4c426b1744aa47eb749dcd6a85
SSDEEP
196608:4oDnasqctMH2xKdE0X1FmGkCTZgA8oBOYs4Stl3II5:g2xKdE0X1oG+Vtl3II5
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\CDG\613\PDB\CDGRegedit\CDGRegedit.pdb
HttpEndRequestW
InternetWriteFile
HttpOpenRequestW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
HttpAddRequestHeadersW
HttpSendRequestW
InternetOpenW
HttpSendRequestExW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetSetOptionExW
InternetSetCookieW
InternetGetCookieW
InternetQueryDataAvailable
FtpDeleteFileW
FtpRenameFileW
FtpCreateDirectoryW
FtpRemoveDirectoryW
FtpSetCurrentDirectoryW
FtpGetCurrentDirectoryW
FtpPutFileW
FtpGetFileW
InternetErrorDlg
InternetFindNextFileW
InternetOpenUrlW
GopherOpenFileW
FtpFindFirstFileW
GopherCreateLocatorW
FtpCommandW
FtpOpenFileW
GopherGetAttributeW
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
GopherFindFirstFileW
InternetConnectW
recvfrom
WSAGetLastError
sendto
ioctlsocket
socket
htons
connect
closesocket
send
inet_addr
WSAStartup
__WSAFDIsSet
WSCEnumProtocols
WSCWriteProviderOrder
WSCInstallProvider
WSCDeinstallProvider
gethostname
gethostbyname
inet_ntoa
WSACleanup
WSASetLastError
shutdown
getprotobyname
setsockopt
ntohs
getsockname
select
recv
StrRetToStrW
PathMatchSpecW
SHGetValueW
SHSetValueW
PathIsDirectoryW
PathFileExistsW
PathRemoveFileSpecW
PathFindExtensionW
PathRemoveExtensionW
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathFindFileNameW
GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueA
VerQueryValueW
GetAdaptersInfo
MiniDumpWriteDump
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiGetClassImageList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiGetClassImageIndex
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
WTSQueryUserToken
?DelDy@CCdgExchg@@QAEHK@Z
?SetLogRecordType@CCdgExchg@@QAEXULogRecordType@@@Z
?SetUserOperate@CCdgExchg@@QAEXUUserOperate@@@Z
?SetPolicy@CCdgExchg@@QAEXPAU_Encrypt_Policy@@H@Z
?SetTerminalInfo@CCdgExchg@@QAEXUCLIENTTERMINAL@@@Z
?GetprotectScreen@CCdgExchg@@QAEXPAD@Z
?GetSignatureExe@CCdgExchg@@QAEHPAD@Z
?GetDyAll@CCdgExchg@@QAEHPAK@Z
?GetCDGKey@CCdgExchg@@QAEXPAD@Z
?GetUserOperate@CCdgExchg@@QAEXAAUUserOperate@@@Z
??1CCdgExchg@@UAE@XZ
?GetDefaultUserNameAndPsw@CCdgExchg@@QAEXPAD00@Z
??0CCdgExchg@@QAE@XZ
?SethookWhietList@CCdgExchg@@QAEXPAD@Z
??1CDynamicDll@@UAE@XZ
?StopHook@CDynamicDll@@QAEHXZ
??0CDynamicDll@@QAE@XZ
?GetAllInfo@CCdgExchg@@QAEHPAU_CDG_EXCHG_INFO@@@Z
?DeleteInfo@CCdgExchg@@QAEHK@Z
?GetDyKey@CCdgExchg@@QAEXPAD@Z
?GetPolicy@CCdgExchg@@QAEHPAU_Encrypt_Policy@@@Z
?SetprotectScreen@CCdgExchg@@QAEXPAD@Z
?StartHook@CDynamicDll@@QAEHXZ
?GetDyCount@CCdgExchg@@QAEHXZ
?GetCount@CCdgExchg@@QAEHXZ
?SetDefaultUserNameAndPsw@CCdgExchg@@QAEXPBD00@Z
?SetConnectSer@CCdgExchg@@QAEXH@Z
?SetSignaturePro@CCdgExchg@@QAEXPAU_Signature_Pro@@H@Z
?SetCDGKey@CCdgExchg@@QAEXPAD@Z
?SetDyKey@CCdgExchg@@QAEXPAD@Z
?SetContentSafe@CCdgExchg@@QAEXU_SHARE_CONTENTSECURITY@@@Z
?SetPrintPolicy@CCdgExchg@@QAEXAAU_PRINT_EXCHG_INFO@@@Z
?SetSignatureExe@CCdgExchg@@QAEXPAD@Z
?SignatureAddHookID@CCdgExchg@@QAEXK@Z
?SignatureAddFakeID@CCdgExchg@@QAEXK@Z
?SetWaterMarkFlag@CCdgExchg@@QAE_NH@Z
?GetPrintPolicy@CCdgExchg@@QAEXAAU_PRINT_EXCHG_INFO@@@Z
GetPrivateProfileSectionW
GetVolumeInformationW
WritePrivateProfileSectionW
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
FileTimeToLocalFileTime
GlobalSize
lstrcmpA
SuspendThread
MoveFileW
GetStringTypeExW
GetThreadLocale
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameW
GetShortPathNameW
CompareStringA
LoadLibraryExW
GetLocaleInfoW
EnumResourceLanguagesW
ConvertDefaultLocale
CreateSemaphoreW
ReleaseSemaphore
WaitForMultipleObjects
GetModuleHandleA
GlobalGetAtomNameW
GlobalFlags
GetAtomNameW
GetFileAttributesExW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileTime
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GetStartupInfoW
RtlUnwind
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
RaiseException
HeapAlloc
ExitThread
VirtualProtect
VirtualAlloc
VirtualQuery
HeapReAlloc
SetStdHandle
HeapSize
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringW
FatalAppExitA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
GetProcessHeap
SetEnvironmentVariableA
GetModuleFileNameA
GlobalLock
GlobalUnlock
GetFileInformationByHandle
FileTimeToDosDateTime
FileTimeToSystemTime
SetFileTime
DosDateTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
DuplicateHandle
GetFileType
SetCurrentDirectoryW
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualFreeEx
GetProcessTimes
GetSystemTimeAsFileTime
GlobalAlloc
GlobalFree
Module32FirstW
ExitProcess
OpenEventA
WinExec
GetLogicalDriveStringsW
GetQueuedCompletionStatus
ReadDirectoryChangesW
GetCurrentThread
GetThreadPriority
SetThreadPriority
PostQueuedCompletionStatus
CreateIoCompletionPort
ReadFile
lstrlenA
GetSystemInfo
GetDriveTypeW
FlushFileBuffers
DeviceIoControl
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
LoadLibraryW
MulDiv
GetVersion
FreeResource
GetTempPathW
GetACP
GetVersionExW
SetLastError
FormatMessageW
LocalAlloc
LocalFree
InterlockedDecrement
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetDiskFreeSpaceExW
InterlockedIncrement
lstrcpynW
lstrlenW
lstrcatW
OpenMutexW
ReadProcessMemory
EnterCriticalSection
GetSystemTime
LeaveCriticalSection
GetFileAttributesW
CopyFileW
InterlockedExchange
GetTickCount
GetModuleHandleW
GetProcAddress
MoveFileExW
CreateProcessW
GetExitCodeProcess
ResetEvent
CreateEventA
CreateFileA
Sleep
FindFirstFileW
SetFileAttributesW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
GetWindowsDirectoryW
WaitForSingleObject
TerminateThread
ReleaseMutex
GetEnvironmentVariableW
SetUnhandledExceptionFilter
SetProcessShutdownParameters
OutputDebugStringW
GetSystemDirectoryW
GetModuleFileNameW
GetComputerNameW
WaitNamedPipeW
CreateMutexW
CreateThread
CreateEventW
SetEvent
GetExitCodeThread
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileIntW
WTSGetActiveConsoleSessionId
lstrcmpiW
ProcessIdToSessionId
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSection
ResumeThread
CreateDirectoryW
GetLastError
SetFilePointer
WriteFile
GetLocalTime
GetCurrentThreadId
GetCurrentProcess
OpenProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
lstrcpyW
GetCurrentProcessId
WritePrivateProfileStringW
OpenEventW
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
CreateFileW
GetFileSize
CloseHandle
GetPrivateProfileStringW
Module32NextW
OpenFileMappingW
TryEnterCriticalSection
GlobalMemoryStatus
FlushConsoleInputBuffer
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
FindNextFileA
FindFirstFileA
GetPrivateProfileSectionNamesW
PeekNamedPipe
WinHelpW
GetCapture
GetClassLongW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
SystemParametersInfoA
GetWindowPlacement
SetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
IsWindowEnabled
EndDialog
GetKeyState
MapWindowPoints
wsprintfA
UnionRect
GetWindow
TrackMouseEvent
FrameRect
CreateIconIndirect
GetDC
TrackPopupMenuEx
WindowFromPoint
GetActiveWindow
GetNextDlgTabItem
SetWindowRgn
DestroyCursor
OpenClipboard
EmptyClipboard
CloseClipboard
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
MessageBeep
GetMessageW
RegisterClassW
DestroyWindow
DrawIconEx
BringWindowToTop
IsIconic
DrawIcon
RegisterWindowMessageW
SetMenuDefaultItem
SetForegroundWindow
IsWindowVisible
GetFocus
IsChild
MenuItemFromPoint
GetCursorPos
GrayStringW
DrawTextExW
TabbedTextOutW
CreateWindowExW
LoadCursorW
DefWindowProcW
ValidateRect
BeginPaint
EndPaint
SetMenu
SetMenuItemBitmaps
DestroyMenu
CallNextHookEx
GetClassNameW
SetPropW
CallWindowProcW
GetPropW
RemovePropW
UnhookWindowsHookEx
SetWindowsHookExW
SetLayeredWindowAttributes
IntersectRect
CreatePopupMenu
DeleteMenu
RemoveMenu
IsRectEmpty
ClientToScreen
GetMenuState
SendDlgItemMessageA
InsertMenuW
ModifyMenuW
GetMenuDefaultItem
DrawEdge
DrawFocusRect
GetMessagePos
DrawStateW
InflateRect
GetSubMenu
GetMenuItemID
GetMenu
GetSystemMenu
WindowFromDC
GetMenuInfo
CopyAcceleratorTableW
MapVirtualKeyW
GetKeyNameTextW
DestroyIcon
GetIconInfo
CopyImage
GetMenuItemRect
GetMenuItemInfoW
SystemParametersInfoW
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
ScrollWindowEx
GetMenuStringW
CharUpperW
PostQuitMessage
ShowOwnedPopups
MapDialogRect
OffsetRect
IsMenu
SetMenuInfo
GetWindowDC
ReleaseDC
GetMenuItemCount
MonitorFromRect
MonitorFromWindow
GetMonitorInfoW
CopyRect
GetSystemMetrics
SetRect
GetDesktopWindow
ScreenToClient
PtInRect
LoadBitmapW
GetClientRect
SetCursor
UpdateWindow
RedrawWindow
GetSysColor
ExitWindowsEx
FillRect
wsprintfW
IsWindow
GetWindowRect
GetWindowThreadProcessId
SetWindowPos
DrawTextW
KillTimer
RegisterDeviceNotificationW
LoadImageW
SetTimer
GetWindowLongW
SetWindowLongW
PostThreadMessageW
MessageBoxW
PostMessageW
InvalidateRect
LoadIconW
EnableWindow
SendMessageW
GetParent
SetWindowContextHelpId
SetRectEmpty
SetParent
LoadAcceleratorsW
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
TranslateAcceleratorW
InsertMenuItemW
RegisterClipboardFormatW
LockWindowUpdate
GetDCEx
GetNextDlgGroupItem
InvalidateRgn
CharNextW
WaitMessage
SetCapture
UnregisterClassW
SendDlgItemMessageW
CheckMenuItem
EnableMenuItem
LoadMenuW
GetMenuCheckMarkDimensions
GetSysColorBrush
GetDialogBaseUnits
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
DrawMenuBar
ReleaseCapture
GetUserObjectInformationW
GetProcessWindowStation
AppendMenuW
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
SetRectRgn
GetMapMode
DPtoLP
GetCharWidthW
StretchDIBits
GetBkColor
GetRgnBox
CreateRoundRectRgn
Escape
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocW
GetWindowExtEx
GetViewportExtEx
SelectClipPath
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
TextOutW
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
Rectangle
GetTextExtentPoint32W
RoundRect
GetNearestColor
SetWindowOrgEx
CreateCompatibleBitmap
CreatePatternBrush
GetCurrentObject
GetTextAlign
GetTextMetricsW
SetStretchBltMode
SetROP2
GetLayout
SetTextAlign
MoveToEx
ExtTextOutW
GetTextExtentPointW
GetCurrentPositionEx
GetTextColor
GetPixel
SetPixel
CreateBitmap
SetBkColor
BitBlt
GetStockObject
CreatePalette
RealizePalette
CreateSolidBrush
CreateCompatibleDC
GetObjectW
StretchBlt
CreateDCW
GetDeviceCaps
SetPolyFillMode
CreateFontIndirectW
SelectObject
SetTextColor
RestoreDC
SaveDC
CopyMetaFileW
PatBlt
GetClipBox
GetDCOrgEx
SetBkMode
DeleteObject
GetBitmapBits
GetObjectA
CreateDCA
CreateFontW
CreateDIBSection
GetClipRgn
DeleteDC
RectVisible
PtVisible
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
SelectClipRgn
CreateHatchBrush
UnrealizeObject
SetBrushOrgEx
CreatePen
SetDIBColorTable
TransparentBlt
GetFileTitleW
GetOpenFileNameW
OpenPrinterW
ClosePrinter
EnumPrintersW
DocumentPropertiesW
CloseServiceHandle
CreateProcessAsUserW
StartServiceW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RevertToSelf
GetUserNameW
ImpersonateLoggedOnUser
OpenProcessToken
RegQueryValueExW
RegSetValueExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteKeyW
RegEnumValueW
RegEnumKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
ControlService
OpenServiceW
DeleteService
GetTokenInformation
IsValidSid
GetSidSubAuthority
ConvertSidToStringSidW
GetUserNameA
RegCreateKeyW
RegQueryValueW
RegOpenKeyW
RegSetValueW
GetSidSubAuthorityCount
GetSidIdentifierAuthority
OpenSCManagerW
ShellExecuteExA
SHChangeNotify
Shell_NotifyIconW
DragQueryFileW
DragFinish
DragAcceptFiles
ShellExecuteExW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
ExtractIconW
SHGetFileInfoW
SHBrowseForFolderW
_TrackMouseEvent
ImageList_GetIconSize
OleUIBusyW
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
StringFromGUID2
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
CoDisconnectObject
OleUninitialize
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoInitializeEx
CoTaskMemFree
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
OleRun
CoInitialize
CoCreateGuid
OleFlushClipboard
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
VariantClear
VariantInit
SysAllocString
SysStringLen
SysFreeString
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
VarDateFromStr
VariantCopy
OleLoadPicturePath
SysAllocStringLen
SysReAllocStringLen
SystemTimeToVariantTime
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
GetErrorInfo
SetErrorInfo
CreateErrorInfo
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
GdipDrawImageRectI
GdipCreateFromHDC
GdipAlloc
GdipFree
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdiplusStartup
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipDrawImageI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipDeleteGraphics
GdipLoadImageFromFile
GdipLoadImageFromFileICM
sqlite3_close
sqlite3_free
sqlite3_open16
sqlite3_finalize
sqlite3_step
sqlite3_prepare
sqlite3_column_text
sqlite3_data_count
sqlite3_column_int
sqlite3_exec
UnloadDeviceDriver
DecodeAES
CheckEncrytFile
KillPid
EncodeAES
EncryptLockFileBuffer
DecryptLockFile
MakeFileHead
EncodeRC4
WriteFileHead
WritePolicy
StopFilter
StopLog
GetFilterStatus
GetLogStatus
FlushLogFile
GetProcessInfo
NotifyFileLock
UpdateSignature
AddHideProc
RemoveHideProc
StopGetProcessInfo
SetWorkMode
EnterPassFilter
StopDecrypt
ResetWatchDog
NotifyUpdateSet
StartFilter
StartLog
AddProtProc
StartRelate
AddProtFileList
CleanProtFileList
CanFileDecrypted
EncryptLockFile
IsEncryptLockFile
EnterOldFilter
InstallDeviceDriver
RemoveProtProc
StopRelate
LeavePassFilter
ord20
ord84
ord83
ord17
ord60
ord73
ord55
ord61
ord50
ord81
ord26
ord78
ord82
ord25
ord30
ord52
ord18
ord14
ord56
ord19
ord13
ord11
UuidCreate
DnsFree
DnsQuery_UTF8
InitializeSecurityContextA
FreeCredentialsHandle
DeleteSecurityContext
AcquireCredentialsHandleW
??0CCdgExchg@@QAE@ABV0@@Z
??0CDynamicDll@@QAE@ABV0@@Z
??4CCdgExchg@@QAEAAV0@ABV0@@Z
??4CDynamicDll@@QAEAAV0@ABV0@@Z
??_7CCdgExchg@@6B@
??_7CDynamicDll@@6B@
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ