vstdlib_s64[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

vstdlib_s64.dll
Size

997KB
MD5

bfacc5c0d621440cad40eb75ee1a91b7
SHA1

dbaf388e22faa4d9ff3e251dfb626be204439fb6
SHA256

e744d96e72ab673d89edb5c3f6cff77956cdabf36a9c920c4ab08450292f9875
SHA512

1a4c1f0b921ccafb10b6d79dc5e138a0e4c4b1eb97c0a92f625ac67cffd3f9ee62a953b0f685965d71c0b8ace5f13c9623ae4b01e1c6e360fdc60d885d32b791
SSDEEP

12288:wYzk4bSKZ7HJFmgJWeg4mxvV9fnwqshYERh78xqyulWAFl22l+OBMJbyIc:wYzrbLZ7HJJg4mxzvvUN9pli2+OB0yI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vstdlib_s64.dll

Files

vstdlib_s64.dll
.dll windows:6 windows x64 arch:x64

05d8d1acb87ee31b256d24954bdd4b27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SetLastError
SetPriorityClass
SetDefaultDllDirectories
GetPhysicallyInstalledSystemMemory
SetConsoleTextAttribute
FindFirstFileNameW
AddDllDirectory
RtlCaptureContext
SetLocalTime
VirtualFree
GetCommandLineW
GetSystemTimeAdjustment
GetHandleInformation
CreateTapePartition
SetConsoleActiveScreenBuffer
IsThreadpoolTimerSet
EnumCalendarInfoExEx
IsDBCSLeadByteEx
SetSystemPowerState
GetFullPathNameW
GetLongPathNameW
SetConsoleScreenBufferSize
lstrlenW
SetProcessAffinityMask
GetThreadErrorMode
GetProcessDEPPolicy
EnumCalendarInfoW
ReleaseSemaphore
SetFileShortNameW
GetCPInfo
CreateFileMappingNumaW
WriteFile
Wow64DisableWow64FsRedirection
GetThreadIdealProcessorEx
lstrcpynW
TryAcquireSRWLockExclusive
CheckTokenMembershipEx
RemoveDllDirectory
GetModuleHandleExW
SetTimeZoneInformation
ExpandEnvironmentStringsW
GetFileBandwidthReservation
CreatePrivateNamespaceW
UnregisterWait
GetDiskFreeSpaceW
GetAppContainerNamedObjectPath
SetConsoleMode
GetConsoleCursorInfo
SetCurrentConsoleFontEx
GetTimeFormatEx
OutputDebugStringA
RtlPcToFileHeader
DeviceIoControl
VirtualAlloc
AssignProcessToJobObject
GetNumberOfConsoleMouseButtons
GetProfileIntW
GetFinalPathNameByHandleW
GetProcessAffinityMask
WakeAllConditionVariable
HeapLock
DisassociateCurrentThreadFromCallback
SetFileTime
GetUserDefaultLangID
AddSecureMemoryCacheCallback
GetModuleFileNameW
OpenPrivateNamespaceW
WakeConditionVariable
FindFirstStreamTransactedW
ReOpenFile
PurgeComm
CreateNamedPipeW
WaitForMultipleObjects
InitializeProcThreadAttributeList
GetCommModemStatus
RequestWakeupLatency
GetConsoleHistoryInfo
GetConsoleCP
SetProcessShutdownParameters
GetThreadSelectorEntry
AddScopedPolicyIDAce
SetThreadUILanguage
GetLocaleInfoEx
SetConsoleWindowInfo
GetUserDefaultLocaleName
GetCompressedFileSizeTransactedW
GetNumaNodeNumberFromHandle
CheckTokenCapability
LocalHandle
GetProcessId
SignalObjectAndWait
DeleteTimerQueueEx
GetNamedPipeClientComputerNameW
GetProductInfo
DnsHostnameToComputerNameW
InitializeCriticalSectionAndSpinCount
CreateConsoleScreenBuffer
GetThreadPreferredUILanguages
GetProcessVersion
GetNamedPipeClientProcessId
GetDynamicTimeZoneInformation
CreatePipe
GetConsoleAliasExesW
FoldStringW
InitializeCriticalSection
AllocateUserPhysicalPages
Wow64GetThreadContext
SetSystemTime
SetErrorMode
SetFilePointer
TryAcquireSRWLockShared
EnumUILanguagesW
GetNumaAvailableMemoryNode
GetQueuedCompletionStatus
GetCompressedFileSizeW
GetFileMUIPath
GetNumaProcessorNode
GetConsoleTitleW
OpenFileById
WriteFileEx
GetSystemPowerStatus
FindFirstFileTransactedW
WaitForThreadpoolIoCallbacks
EnumResourceNamesW
UnlockFileEx
PeekNamedPipe
FatalExit
EnumCalendarInfoExW
GetWriteWatch
CreateMutexW
TrySubmitThreadpoolCallback
WaitForThreadpoolTimerCallbacks
SystemTimeToTzSpecificLocalTimeEx
CreateHardLinkW
GetConsoleScreenBufferInfoEx
FindClose
IsNLSDefinedString
GetVolumePathNameW
WaitForSingleObject
LocalAlloc
CreateFileW
GetDateFormatEx
GetFileAttributesW
GetNumberFormatEx
GetTapePosition
FreeLibraryAndExitThread
SetComputerNameExW
GetFileAttributesTransactedW
OpenJobObjectW
MapViewOfFileExNuma
DebugActiveProcessStop
OpenEventW
GetVersionExW
EnumSystemCodePagesW
GetThreadDescription
GetPrivateProfileSectionNamesW
WriteTapemark
UnregisterApplicationRecoveryCallback
OpenFileMappingW
GetUserPreferredUILanguages
WaitForThreadpoolWorkCallbacks
GetCommTimeouts
SetThreadpoolThreadMinimum
ApplicationRecoveryFinished
SetupComm
GetSystemDirectoryW
IsSystemResumeAutomatic
HeapWalk
CallbackMayRunLong
QueryMemoryResourceNotification
GlobalDeleteAtom
GetAtomNameW
DuplicateHandle
HeapValidate
IsProcessInJob
GetModuleHandleA
GetSystemDefaultLangID
GetACP
PrepareTape
GetSystemDefaultLocaleName
DisconnectNamedPipe
FreeResource
GlobalAddAtomW
FindFirstChangeNotificationW
LCIDToLocaleName
HeapSize
CloseThreadpoolWait
GetNamedPipeInfo
ApplicationRecoveryInProgress
PostQueuedCompletionStatus
GetVolumeNameForVolumeMountPointW
QueueUserWorkItem
SetFileAttributesW
IsValidCodePage
GetLogicalDriveStringsW
CloseThreadpoolCleanupGroup
EndUpdateResourceW
CreateEventW
RemoveSecureMemoryCacheCallback
SetFileAttributesTransactedW
MultiByteToWideChar
CloseThreadpoolCleanupGroupMembers
GetSystemWow64DirectoryW
GetPrivateProfileStringW
SetVolumeLabelW
GetConsoleMode
LoadPackagedLibrary
QueryThreadProfiling
BuildCommDCBAndTimeoutsW
WritePrivateProfileStructW
GetDurationFormat
GetTimeZoneInformation
LocalFileTimeToFileTime
ReadThreadProfilingData
EnumSystemLanguageGroupsW
PowerCreateRequest
GetDevicePowerState
BuildCommDCBW
VerifyScripts
LCMapStringEx
OpenWaitableTimerW
MoveFileWithProgressW
GetMaximumProcessorCount
Wow64RevertWow64FsRedirection
GetLastError
GetLargestConsoleWindowSize
GetCurrencyFormatEx
CreateFileTransactedW
ChangeTimerQueueTimer
EscapeCommFunction
GetConsoleAliasesLengthW
TzSpecificLocalTimeToSystemTime
ReleaseSRWLockExclusive
SetCriticalSectionSpinCount
AddResourceAttributeAce
OutputDebugStringW
GetMaximumProcessorGroupCount
ReadConsoleInputW
SetThreadpoolTimerEx
FlushViewOfFile
GlobalSize
GetThreadUILanguage
GetUserDefaultLCID
GetLogicalProcessorInformation
FileTimeToSystemTime
GetNumaNodeProcessorMask
CloseThreadpoolTimer
GetNamedPipeHandleStateW
GetSystemFileCacheSize
OfferVirtualMemory
DisableThreadLibraryCalls
GetCurrentThread
GetMailslotInfo
ReadConsoleOutputW
InitOnceComplete
AcquireSRWLockExclusive
TerminateThread
GetActiveProcessorGroupCount
GetNumaProximityNodeEx
EnumDateFormatsExEx
FindCloseChangeNotification
lstrcatW
GetApplicationRestartSettings
WaitForSingleObjectEx
SetWaitableTimerEx
PulseEvent
ReclaimVirtualMemory
ClearCommBreak
GetFullPathNameTransactedW
QueryPerformanceFrequency
CreateSemaphoreExW
GlobalFlags
CreateHardLinkTransactedW
GlobalAlloc
DeleteFileW
OpenSemaphoreW
InterlockedPushListSListEx
TransmitCommChar
GetSystemDEPPolicy
MoveFileTransactedW
GlobalFree
HeapReAlloc
CloseHandle
SetProcessPreferredUILanguages
WriteConsoleOutputAttribute
CreateThreadpoolCleanupGroup
EnumResourceLanguagesW
FindNLSStringEx
RaiseException
FreeConsole
GetSystemInfo
WriteProfileSectionW
BindIoCompletionCallback
SetThreadpoolWait
SetProcessWorkingSetSizeEx
QueryProcessCycleTime
LoadLibraryW
CancelIoEx
HeapSetInformation
GetThreadIOPendingFlag
FindResourceExW
ResetEvent
IsDBCSLeadByte
ScrollConsoleScreenBufferW
SetComputerNameW
GetActiveProcessorCount
DeleteProcThreadAttributeList
DiscardVirtualMemory
EnumDateFormatsExW
GlobalFindAtomW
HeapAlloc
Wow64SuspendThread
GetCurrencyFormatW
ClearCommError
FileTimeToLocalFileTime
DeleteSynchronizationBarrier
QueueUserAPC
GetLocalTime
GetConsoleOriginalTitleW
GetDefaultCommConfigW
GetMemoryErrorHandlingCapabilities
GetNLSVersionEx
GetQueuedCompletionStatusEx
FillConsoleOutputAttribute
GetProcessPreferredUILanguages
SetStdHandle
GetOverlappedResult
CloseThreadpoolIo
HeapCompact
SwitchToThread
AddSIDToBoundaryDescriptor
SetVolumeMountPointW
GetNamedPipeServerProcessId
AddVectoredExceptionHandler
FindNextFileNameW
HeapDestroy
GetNamedPipeClientSessionId
QueryIdleProcessorCycleTimeEx
GetCurrentProcessorNumber
UnlockFile
GetDurationFormatEx
SubmitThreadpoolWork
DeleteFileTransactedW
SetLocaleInfoW
InitAtomTable
SetCurrentDirectoryW
GetWindowsDirectoryW
PeekConsoleInputW
GetErrorMode
SetThreadPriorityBoost
VirtualLock
GetProcAddress
GlobalLock
UnregisterApplicationRestart
VirtualAllocEx
CreateMutexExW
UnregisterWaitEx
FindFirstFileNameTransactedW
LocalFree
HeapQueryInformation
GetTimeFormatW
MoveFileExW
GetThreadId
GetProcessorSystemCycleTime
GetOverlappedResultEx
ReplaceFileW
SetThreadStackGuarantee
IsProcessorFeaturePresent
GetFileSize
SetDefaultCommConfigW
CreateMemoryResourceNotification
DeleteCriticalSection
ExitProcess
FindAtomW
VerSetConditionMask
LCMapStringW
ReadProcessMemory
FindVolumeClose
DisableThreadProfiling
FindFirstStreamW
GetCurrentProcessId
UnhandledExceptionFilter
EnumSystemLocalesW
GetProcessHeap
SystemTimeToFileTime
CreateProcessW
SetThreadExecutionState
GetModuleHandleW
FreeLibrary
SetFirmwareEnvironmentVariableExW
CreateSemaphoreW
TransactNamedPipe
CopyFileW
GetProfileStringW
SetThreadpoolStackInformation
WideCharToMultiByte
CreateSymbolicLinkW
GetConsoleWindow
SetCommBreak
GetVolumePathNamesForVolumeNameW
CreateRemoteThread
DeleteBoundaryDescriptor
SleepConditionVariableSRW
RemoveVectoredContinueHandler
LocaleNameToLCID
GetThreadTimes
BeginUpdateResourceW
FreeUserPhysicalPages
CommConfigDialogW
LocalReAlloc
GetTempFileNameW
SetConsoleOutputCP
ConvertFiberToThread
GetSystemTimeAsFileTime
AddAtomW
TerminateJobObject
LocalFlags
QueryIdleProcessorCycleTime
EnumSystemFirmwareTables
Wow64GetThreadSelectorEntry
GetThreadGroupAffinity
GlobalMemoryStatus
GetFirmwareType
DeleteVolumeMountPointW
ReleaseSemaphoreWhenCallbackReturns
SetThreadErrorMode
VirtualFreeEx
CopyFileExW
IsBadReadPtr
DebugBreak
SetProcessWorkingSetSize
CreateFileMappingW
BackupRead
GetTapeStatus
InterlockedPushEntrySList
SetConsoleCursorPosition
SetThreadPreferredUILanguages
SetThreadContext
FindNextVolumeW
SetFileValidData
IsValidLocaleName
BackupSeek
QueryPerformanceCounter
GetProcessGroupAffinity
GetNLSVersion
GetSystemRegistryQuota
CreateMailslotW
GetStringTypeW
GetDateFormatW
InitializeSListHead
GetSystemPreferredUILanguages
FreeLibraryWhenCallbackReturns
CreateIoCompletionPort
OpenMutexW
FindNextStreamW
SetCommTimeouts
GetTickCount
GetEnvironmentStringsW
WaitNamedPipeW
CreateFiberEx
GlobalUnlock
FlsFree
SetCommState
SetCommConfig
GetCalendarInfoEx
AllocConsole
lstrcmpW
EnumDateFormatsW
WriteConsoleOutputW
GetDllDirectoryW
GetProcessHandleCount
MulDiv
SetConsoleTitleW
InitializeSynchronizationBarrier
LocalUnlock
MapViewOfFileEx
RegisterBadMemoryNotification
MoveFileW
VirtualQuery
RegisterApplicationRestart
CreateFiber
GetVolumeInformationByHandleW
GetProcessTimes
GetFileTime
InterlockedPopEntrySList
OpenThread
GlobalReAlloc
AddIntegrityLabelToBoundaryDescriptor
DebugBreakProcess
IsDebuggerPresent
VirtualQueryEx
DebugSetProcessKillOnExit
QueryDepthSList
CheckRemoteDebuggerPresent
ReadConsoleOutputAttribute
WriteConsoleOutputCharacterW
CreateDirectoryExW
SetUnhandledExceptionFilter
IsBadStringPtrW
FlushFileBuffers

user32

GetWindowThreadProcessId
GetMessageW
IsWinEventHookInstalled
ReuseDDElParam
AdjustWindowRectEx
GetKeyState
CharUpperW
RegisterShellHookWindow
GetUpdateRgn
LoadImageA
VkKeyScanExW
CheckMenuRadioItem
SendMessageTimeoutW
GetFocus
InsertMenuItemW
DestroyWindow
GetDC
DeregisterShellHookWindow
IsWindowVisible
keybd_event
GetClipboardOwner
CheckRadioButton
MonitorFromWindow
MessageBoxExW
CalculatePopupWindowPosition
EnumDisplayMonitors
FillRect
CreateWindowExW
ShowOwnedPopups
GetSystemMetrics
UnregisterClassW
MsgWaitForMultipleObjects
GetWindowLongPtrW
GetScrollPos
GetWindowPlacement
DrawIcon
DefWindowProcW
SetThreadDesktop
ShowWindow
GetClassInfoW
BeginDeferWindowPos
CopyAcceleratorTableW
GetListBoxInfo
OffsetRect
GetRawInputDeviceInfoW
LookupIconIdFromDirectory
DispatchMessageW
GetCursorInfo
MapVirtualKeyExW
GetMenuCheckMarkDimensions
DdeConnect
GetInputState
GetMonitorInfoW
SetCaretBlinkTime
EmptyClipboard
ExitWindowsEx
MsgWaitForMultipleObjectsEx
WindowFromDC
RegisterClassW
MapWindowPoints
BroadcastSystemMessageExW
CallMsgFilterW
SetWindowPlacement
GetMenuContextHelpId
SetMenuInfo
GetKBCodePage
EnumPropsW
LoadKeyboardLayoutW
AttachThreadInput
IsProcessDPIAware
SetMenuDefaultItem
MessageBoxA
SetProcessWindowStation
UnhookWindowsHookEx
DdeQueryStringW
CloseWindow
SetKeyboardState
UpdateLayeredWindowIndirect
CreateAcceleratorTableW
ChangeWindowMessageFilter
GetWindowRgnBox
TranslateAcceleratorW
SetPropW
IsImmersiveProcess
TranslateMessage
GetClipboardData
EnumDesktopWindows
LoadCursorW
IsWow64Message
GetWindowDC
AnimateWindow
SetCursor
GetScrollBarInfo
SwitchDesktop
GetClientRect
GetDlgItem
DrawTextW
KillTimer
PostQuitMessage
SetScrollPos
OpenWindowStationW
LoadCursorFromFileW
UpdateWindow
UnhookWinEvent
ShowCursor
InvalidateRect
GetDCEx
IsIconic
ReleaseDC
DdeCmpStringHandles
BeginPaint
CharNextExA
EndPaint
SendMessageCallbackW
GetWindowTextW
EnumDesktopsW

gdi32

RoundRect
GetCurrentObject
SetMapMode
CloseFigure
ArcTo
CreateSolidBrush
DeleteObject
LPtoDP
RestoreDC
MoveToEx
GetTextColor
SetViewportOrgEx
GetEnhMetaFileDescriptionW
LineTo
GetCharABCWidthsI
CreateFontIndirectExW
SetBkMode
SetTextColor
ExtEscape
TextOutW
DeleteDC
GetPixel
CreatePatternBrush
DeleteEnhMetaFile
GetDIBits
FillRgn
SetWindowExtEx
CreateEllipticRgnIndirect
SetWindowOrgEx
GetTextCharset
CreateDCW
StretchDIBits
ResetDCW
Chord
EndDoc
GetStretchBltMode
CreateBrushIndirect
AbortDoc
StretchBlt
SetPixel
GetTextExtentExPointW
RectVisible
CreateCompatibleDC
GetKerningPairsW
GetDIBColorTable
Arc
GetDCPenColor
SetWinMetaFileBits
SelectObject
CreateCompatibleBitmap
GetRgnBox
WidenPath
ExtFloodFill
GetViewportOrgEx
GetROP2

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetFolderPathW

Exports

Exports

BHanIdeograph
CanBeginLine
CanBreakBetween
CanBreakRepeated
CanEndLine
CommandLine
Coroutine_Cancel
Coroutine_Continue
Coroutine_Create
Coroutine_DebugBreak
Coroutine_GetCurrentlyActive
Coroutine_GetStackDepth
Coroutine_IsActive
Coroutine_IsAddressInOurStack
Coroutine_ReleaseThreadMemory
Coroutine_Test
Coroutine_ValidateGlobals
Coroutine_YieldToMain
CreateInterface
CsgoisuiAiushaguieh
DebugStatsSystem
GetNameFromOSType
GetOSDetailString
GetOSType
GetPlatformFromOS
GetPlatformName
GetPlatformNameFromEPlatformType
GetPortableOsVersionInformation
InstallUniformRandomStream
KasogfuiAashguieahgui
KeyValuesSystemSteam
OSIsCompatible
OSTypesAreCompatible
StringAfterPrefix
StringAfterPrefixCaseSensitive
StringFindSuffix
TsiugasuihAusaguiesh
VStdLib_GetICVarFactory
V_AggressiveStripPrecedingAndTrailingWhitespace
V_AggressiveStripPrecedingAndTrailingWhitespaceW
V_AppendParamToURL
V_AppendSlash
V_BasicHtmlEntityEncode
V_BasicHtmlEntityEncodeBuffer
V_BuildSortTitle
V_CP437CharsToUTF8
V_ComposeFileName
V_CopyAndFixSlashes
V_DefaultExtension
V_EscapeStringForPHP
V_ExtractDomainFromURL
V_ExtractFileExtension
V_ExtractFilePath
V_FileBase
V_FixDoubleSlashes
V_FixSlashes
V_FixupPathName
V_FormatAndAppend
V_FormatAndAppendTail
V_FormatAndAppendV
V_Get2LDFromDomainName
V_GetCurrentDirectory
V_GetFileExtension
V_HtmlEntityDecodeToUTF8
V_IsAbsolutePath
V_IsDeprecatedW
V_IsInCommaDelimitedList
V_IsMeanSpaceW
V_IsSteamCloseProtocol
V_IsTLD
V_IsValidDomainNameCharacter
V_IsValidUChar32
V_IsValidURLCharacter
V_JoinNumbers
V_JoinNumbersUint
V_JoinNumbersUint64
V_LevenshteinDistance
V_LocaleSpecificANSIToUTF8
V_MakeAbsolutePath
V_MakeFileSafeName
V_MakeRelativePath
V_MatchWildcardDNSName
V_MatchWildcardString
V_NormalizeUTF8
V_NormalizeUTF8Old
V_ParseSteamOpenURLExternalProtocol
V_ParseURLQueryString
V_RemoveChar
V_RemoveDotSlashes
V_ReplaceBadFilenameCharacters
V_ReplaceBadFilenameCharactersInPlace
V_SetCurrentDirectory
V_SetExtension
V_SetURLParam
V_SplitNumbers
V_SplitNumbersUint
V_SplitStringInternal
V_StrLeft
V_StrReplaceChar
V_StrRight
V_StrSkipArticles
V_StrSlice
V_StrSubst
V_StrSubstInPlace
V_StrTrim
V_StrTrimAsciiSpaceChar
V_StripAndPreserveHTML
V_StripAndPreserveHTMLCore
V_StripBBCode
V_StripExtension
V_StripFilename
V_StripLastDir
V_StripPrecedingAndTrailingWhitespace
V_StripPrecedingAndTrailingWhitespaceW
V_StripTrailingSlash
V_StripTrailingWhitespaceASCII
V_StripUnprintable
V_StripUnprintableW
V_TruncateAbsolutePathToDiskIdentity
V_UChar32ToUTF16
V_UChar32ToUTF16Len
V_UChar32ToUTF8
V_UChar32ToUTF8Len
V_URLContainsDomain
V_URLCracker
V_URLDecode
V_URLDecodeRaw
V_URLEncode
V_URLEncodeRaw
V_URLEncodeToUtlString
V_URLParse
V_URLPartsToString
V_UTF16ToUChar32
V_UTF16ToUTF32
V_UTF16ToUTF8
V_UTF32CharsToUTF16
V_UTF32CharsToUTF8
V_UTF32ToUTF16
V_UTF32ToUTF8
V_UTF8ToUChar32
V_UTF8ToUTF16
V_UTF8ToUTF32
V_UnqualifiedFileName
V_WcsSkipArticles
V_Windows1252CharsToUTF8
V_atof
V_atoi
V_atoui64
V_binarytohex
V_hextobinary
V_isbreakablewspace
V_isbreakablewspace32
V_isnumeric
V_isstrlower
V_isvalidhex
V_iswalpha32
V_memcpy_nocache
V_pretifymem
V_pretifynum
V_snprintf
V_snwprintf
V_strcat
V_strcmp_prefix
V_stricmp_filename
V_stricmp_prefix
V_strlower_fast
V_strnappend
V_strncat
V_strncat_length
V_strncat_length_unbounded
V_strnchr
V_strncmp
V_strncpy
V_strnicmp
V_strnistr
V_strnlen
V_strristr
V_strtoi64
V_strtoui64
V_strupper_fast
V_tolower
V_toupper
V_towlower32
V_towupper32
V_vsnprintf
V_vsnprintfRet
V_vsnwprintf
V_wcscat
V_wcsncat
V_wcsncpy
V_wcstoi64
V_wcstoui64
V_whextobinary
WeakRandomChar
WeakRandomFillMemory
WeakRandomFloat
WeakRandomGaussianFloat
WeakRandomInt
WeakRandomSeed
WeakRandomUint32
assuan_begin_confidential
assuan_check_version
assuan_client_parse_response
assuan_client_read_response
assuan_close_input_fd
assuan_close_output_fd
assuan_command_parse_fd
assuan_ctx_set_system_hooks
assuan_end_confidential
assuan_fdopen
assuan_free
assuan_get_active_fds
assuan_get_assuan_log_prefix
assuan_get_command_name
assuan_get_data_fp
assuan_get_flag
assuan_get_gpg_err_source
assuan_get_input_fd
assuan_get_log_cb
assuan_get_malloc_hooks
assuan_get_output_fd
assuan_get_peercred
assuan_get_pid
assuan_get_pointer
assuan_init_pipe_server
assuan_init_socket_server
assuan_inquire
assuan_inquire_ext
assuan_new
assuan_new_ext
assuan_pending_line
assuan_pipe_connect
assuan_process
assuan_process_done
assuan_process_next
assuan_read_line
assuan_receivefd
assuan_register_bye_notify
assuan_register_cancel_notify
assuan_register_command
assuan_register_input_notify
assuan_register_option_handler
assuan_register_output_notify
assuan_register_post_cmd_notify
assuan_register_pre_cmd_notify
assuan_register_reset_notify
assuan_release
assuan_send_data
assuan_sendfd
assuan_set_assuan_log_prefix
assuan_set_assuan_log_stream
jiousrghjsiurhg_saiughseaug
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_fts3_may_be_corrupt
sqlite3_fts5_may_be_corrupt
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_initialize
sqlite3_interrupt
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
vstdlib_wcsicmp
vstdlib_wcsnicmp
vstdlib_wcstoi64
vstdlib_wcstoui64

Sections

.code
Size: 446KB - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 408KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05d8d1acb87ee31b256d24954bdd4b27

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Exports

Exports

Sections

.code Size: 446KB - Virtual size: 446KB

.data Size: 408KB - Virtual size: 422KB

.pdata Size: 20KB - Virtual size: 20KB

_RDATA Size: 512B - Virtual size: 500B

.bdata Size: 117KB - Virtual size: 116KB

.reloc Size: 4KB - Virtual size: 3KB

.code
Size: 446KB - Virtual size: 446KB

.data
Size: 408KB - Virtual size: 422KB

.pdata
Size: 20KB - Virtual size: 20KB

_RDATA
Size: 512B - Virtual size: 500B

.bdata
Size: 117KB - Virtual size: 116KB

.reloc
Size: 4KB - Virtual size: 3KB