m:\tafje\cpqtaanl\uateco
Static task
static1
Behavioral task
behavioral1
Sample
2a6ae9c92f230fe6345fc29b032a2937_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a6ae9c92f230fe6345fc29b032a2937_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a6ae9c92f230fe6345fc29b032a2937_JaffaCakes118
-
Size
504KB
-
MD5
2a6ae9c92f230fe6345fc29b032a2937
-
SHA1
586b31b386c1db5339f87f2b92a626e984af8859
-
SHA256
72fabd694fa873e7274d54dc0177ebe9c6c98817276ed1d0fe45e87c75f9a202
-
SHA512
a87c991e4d30f45230acd9ccfb67ce0bdef6b6cb85ce33c0b777a8de400b4f813b3fa573aec1cae48a36a5243bef919b38ddf55eff75639e56121846e8a92199
-
SSDEEP
12288:E6/vTgXlKm6J1WaaCPd/w5Mq5N7gJvyaeTkDDKINvkbXP:E6CYm6JW4Q9Mne4XKOAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a6ae9c92f230fe6345fc29b032a2937_JaffaCakes118
Files
-
2a6ae9c92f230fe6345fc29b032a2937_JaffaCakes118.exe windows:4 windows x86 arch:x86
88fe818347e962714fdf20b44b371fb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
ExtractIconExA
SHChangeNotify
DuplicateIcon
ExtractIconA
SHBindToParent
DoEnvironmentSubstW
SHCreateDirectoryExA
SHGetFileInfoA
SHFreeNameMappings
SHEmptyRecycleBinA
SHCreateDirectoryExW
SHGetDesktopFolder
SHGetDataFromIDListW
DragQueryPoint
SHGetMalloc
CommandLineToArgvW
SHGetFolderLocation
SHAppBarMessage
ShellExecuteExW
SHGetInstanceExplorer
SHGetSpecialFolderLocation
FindExecutableW
SHGetDataFromIDListA
DragQueryFileA
ExtractIconW
ExtractIconExW
SHGetSpecialFolderPathA
SHFileOperationW
SHGetPathFromIDListA
DragAcceptFiles
SHGetPathFromIDListW
SHGetFolderPathA
SHGetFolderPathW
Shell_NotifyIconA
SHBrowseForFolderW
Shell_NotifyIconW
ShellExecuteW
SHGetFileInfoW
SHGetSpecialFolderPathW
SHBrowseForFolderA
DragQueryFileW
SHFileOperationA
ShellExecuteA
SHAddToRecentDocs
ord155
ShellExecuteExA
FindExecutableA
DragFinish
winspool.drv
GetPrinterA
SetPrinterDataW
GetJobW
DeletePrinterDriverA
FreePrinterNotifyInfo
StartDocPrinterW
EnumPrintersW
EndPagePrinter
DeletePrinter
ClosePrinter
DeviceCapabilitiesA
DeletePrintProcessorW
AddPrinterDriverA
StartDocPrinterA
DocumentPropertiesW
DeviceCapabilitiesW
SetPrinterW
EnumPortsA
AbortPrinter
OpenPrinterW
OpenPrinterA
EnumJobsA
EnumFormsW
EnumJobsW
FindNextPrinterChangeNotification
SetJobW
StartPagePrinter
FindFirstPrinterChangeNotification
EnumPrinterDriversA
SetPrinterA
AddPrinterA
DocumentPropertiesA
AddFormW
DeleteFormW
GetPrinterDriverDirectoryA
DeletePrintProcessorA
ord204
WritePrinter
EnumPortsW
GetJobA
GetPrinterW
GetFormW
PrinterProperties
GetPrinterDriverA
EndDocPrinter
EnumPrintersA
advapi32
QueryServiceStatus
SetSecurityDescriptorGroup
InitializeSecurityDescriptor
RegCreateKeyA
SetEntriesInAclW
BuildTrusteeWithSidW
GetEffectiveRightsFromAclA
RegEnumKeyW
AccessCheck
AddAccessAllowedAce
DeregisterEventSource
CryptImportKey
RegDeleteValueA
InitiateSystemShutdownA
LsaLookupNames
CryptGetHashParam
ControlService
RevertToSelf
DuplicateToken
LsaRemoveAccountRights
BuildTrusteeWithNameW
CryptDestroyHash
CryptAcquireContextW
RegEnumValueW
RegCreateKeyW
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegCreateKeyExW
RegisterServiceCtrlHandlerExA
GetSidIdentifierAuthority
CryptVerifySignatureA
RegUnLoadKeyA
RegDisablePredefinedCache
RegQueryValueW
MakeAbsoluteSD
InitializeSid
SetTokenInformation
ChangeServiceConfigA
StartServiceW
GetSidSubAuthority
CryptSetProvParam
ConvertStringSidToSidA
GetSidLengthRequired
CryptGenKey
ChangeServiceConfigW
CryptGetKeyParam
ChangeServiceConfig2A
MakeSelfRelativeSD
GetUserNameA
LsaLookupSids
RegEnumKeyExW
RegDeleteValueW
EqualPrefixSid
RegisterEventSourceW
SetEntriesInAclA
GetAclInformation
RegGetKeySecurity
GetNamedSecurityInfoW
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetUserNameW
QueryServiceStatusEx
LookupAccountSidA
DeleteService
RegDeleteKeyA
EnumServicesStatusA
ImpersonateSelf
SetNamedSecurityInfoA
CloseServiceHandle
GetAce
LsaFreeMemory
CreateProcessAsUserA
RegOpenKeyW
ReportEventA
GetSecurityDescriptorOwner
InitiateSystemShutdownExW
RegSetValueW
RegRestoreKeyA
CryptEnumProvidersW
RegFlushKey
GetTokenInformation
ImpersonateLoggedOnUser
SetSecurityDescriptorSacl
CryptExportKey
IsValidSecurityDescriptor
RegOpenKeyA
QueryServiceConfigA
CryptEncrypt
OpenServiceW
LockServiceDatabase
LsaQueryInformationPolicy
RegSaveKeyA
GetLengthSid
GetExplicitEntriesFromAclW
RegSetValueExA
ImpersonateNamedPipeClient
RegQueryValueExW
WriteEncryptedFileRaw
RegisterServiceCtrlHandlerA
EncryptFileW
CryptCreateHash
RegSetValueExW
LookupAccountNameW
EqualSid
FreeSid
CheckTokenMembership
LookupPrivilegeValueA
StartServiceCtrlDispatcherA
QueryServiceLockStatusW
RegConnectRegistryA
RegisterEventSourceA
SetSecurityDescriptorOwner
SetServiceObjectSecurity
SetSecurityDescriptorDacl
RegisterServiceCtrlHandlerW
GetSecurityDescriptorControl
AllocateAndInitializeSid
RegEnumKeyA
CryptDecrypt
CryptDestroyKey
CryptGetUserKey
LsaNtStatusToWinError
CryptDeriveKey
LsaAddAccountRights
RegSetKeySecurity
SetServiceStatus
CryptAcquireContextA
ChangeServiceConfig2W
LsaOpenPolicy
GetSecurityDescriptorLength
InitializeAcl
SetSecurityInfo
RegUnLoadKeyW
RegQueryInfoKeyA
RegEnumKeyExA
GetFileSecurityA
OpenSCManagerW
SetThreadToken
IsValidAcl
CryptReleaseContext
CreateServiceW
RegSetValueA
RegCloseKey
RegOpenCurrentUser
LookupAccountSidW
GetFileSecurityW
RegQueryValueA
SetFileSecurityA
StartServiceCtrlDispatcherW
RegOpenKeyExA
CryptHashData
OpenSCManagerA
ConvertSidToStringSidW
RegNotifyChangeKeyValue
CreateProcessAsUserW
GetSecurityInfo
UnlockServiceDatabase
GetSecurityDescriptorGroup
MapGenericMask
LsaClose
CloseEncryptedFileRaw
StartServiceA
CreateServiceA
LogonUserW
RegLoadKeyW
RegQueryInfoKeyW
IsValidSid
CreateWellKnownSid
RegConnectRegistryW
ReportEventW
RegRestoreKeyW
RegLoadKeyA
LookupPrivilegeValueW
ConvertStringSidToSidW
AddAce
OpenServiceA
DeleteAce
SetSecurityDescriptorControl
LookupPrivilegeDisplayNameA
GetKernelObjectSecurity
ReadEncryptedFileRaw
OpenThreadToken
GetSecurityDescriptorSacl
GetNamedSecurityInfoA
CopySid
OpenProcessToken
EnumDependentServicesW
RegSaveKeyW
QueryServiceConfigW
RegDeleteKeyW
LookupPrivilegeNameA
LogonUserA
GetSecurityDescriptorDacl
GetSidSubAuthorityCount
LookupAccountNameA
RegEnumValueA
SetFileSecurityW
DuplicateTokenEx
RegQueryValueExA
RegCreateKeyExA
OpenEncryptedFileRawW
SetNamedSecurityInfoW
BuildExplicitAccessWithNameW
AdjustTokenPrivileges
CryptGenRandom
comctl32
ImageList_Copy
MakeDragList
CreateToolbarEx
ImageList_SetBkColor
CreateStatusWindowW
DrawStatusTextW
ImageList_Duplicate
InitializeFlatSB
PropertySheetW
ImageList_ReplaceIcon
ImageList_Draw
ImageList_BeginDrag
ImageList_Add
ImageList_SetImageCount
CreateUpDownControl
ImageList_AddIcon
ImageList_DragEnter
ImageList_SetOverlayImage
ImageList_SetIconSize
ImageList_GetIconSize
DestroyPropertySheetPage
ImageList_Read
_TrackMouseEvent
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_SetFlags
CreatePropertySheetPageW
CreatePropertySheetPageA
ImageList_DrawIndirect
PropertySheetA
InitCommonControlsEx
ord17
ImageList_AddMasked
ImageList_Destroy
ImageList_DragMove
FlatSB_EnableScrollBar
ImageList_DragLeave
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_Merge
ImageList_Replace
ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Create
ImageList_Write
ImageList_Remove
ImageList_GetImageCount
ImageList_SetDragCursorImage
ImageList_LoadImage
ImageList_EndDrag
FlatSB_ShowScrollBar
kernel32
FindNextChangeNotification
GlobalUnlock
GetNumberFormatW
WaitForMultipleObjects
ContinueDebugEvent
SetConsoleCursorPosition
OpenEventA
GetDriveTypeA
DeleteFileW
_lcreat
SetThreadPriority
GetConsoleOutputCP
GetPriorityClass
FormatMessageA
CreateMailslotA
SetProcessWorkingSetSize
WriteConsoleOutputW
SystemTimeToFileTime
GetCommandLineW
SetFilePointer
GetFileInformationByHandle
GetExitCodeThread
GetSystemDirectoryW
SetFileTime
SetTimeZoneInformation
GetConsoleScreenBufferInfo
ReadDirectoryChangesW
GetFullPathNameA
lstrlenA
SetComputerNameW
_lread
QueryPerformanceFrequency
GetTimeFormatW
GetTimeZoneInformation
LoadLibraryA
GetCommProperties
CreateNamedPipeA
WinExec
VerifyVersionInfoA
DeviceIoControl
TlsSetValue
SetCommConfig
UpdateResourceA
lstrcatA
GetStringTypeW
GetFileAttributesW
ReadProcessMemory
HeapValidate
EscapeCommFunction
GetLastError
Module32Next
GetCommMask
SetUnhandledExceptionFilter
FindVolumeClose
CopyFileW
GetProfileStringA
CreateMutexA
PeekNamedPipe
GetTickCount
GetThreadLocale
GlobalFlags
lstrcpynA
CreateFileW
GetVolumeInformationA
GlobalSize
GlobalAlloc
GetNumberFormatA
SetCommMask
GetOverlappedResult
SetFileAttributesA
lstrcatW
FreeConsole
SetEvent
GetPrivateProfileStructA
GetThreadContext
GetConsoleMode
MapViewOfFile
GetUserDefaultUILanguage
FindFirstFileA
CreateProcessW
GlobalFindAtomA
GlobalMemoryStatusEx
ReleaseMutex
CopyFileExW
EnumUILanguagesW
FindFirstVolumeW
OpenFile
CreateProcessA
DeleteVolumeMountPointW
SystemTimeToTzSpecificLocalTime
SetWaitableTimer
MoveFileA
GetCPInfo
FindResourceW
BackupWrite
WaitCommEvent
EnumResourceNamesW
LocalFree
GetACP
GetSystemInfo
SetEnvironmentVariableW
GetProcAddress
FindClose
GetStringTypeA
GetCurrentThread
SetCommTimeouts
GetDiskFreeSpaceA
CreateDirectoryA
BackupRead
CreatePipe
Process32FirstW
SetProcessAffinityMask
RemoveDirectoryW
GetCommTimeouts
WritePrivateProfileStructA
IsDBCSLeadByte
IsDebuggerPresent
WriteConsoleW
GetCommState
GetPrivateProfileSectionA
GetConsoleCP
GetFullPathNameW
SetSystemTime
ExpandEnvironmentStringsA
CreateIoCompletionPort
LoadLibraryExA
WriteFileEx
lstrlenW
IsProcessorFeaturePresent
BeginUpdateResourceA
GetModuleFileNameW
IsValidCodePage
GlobalHandle
PurgeComm
CreateWaitableTimerW
HeapSize
GetEnvironmentStrings
SetThreadContext
CreateFiber
SuspendThread
TerminateThread
GetCurrentProcess
FatalAppExitA
GetFileAttributesExW
AreFileApisANSI
GetCurrentDirectoryA
GetComputerNameW
DeleteFileA
CreateToolhelp32Snapshot
CreateEventA
GetLocaleInfoW
SetPriorityClass
WriteProfileStringW
LocalFileTimeToFileTime
CreateFileMappingW
GetComputerNameExA
FileTimeToLocalFileTime
GetPrivateProfileStringA
FreeEnvironmentStringsW
VerSetConditionMask
QueryDosDeviceA
GetFileType
HeapReAlloc
GetThreadPriority
GetLocaleInfoA
DeleteCriticalSection
InterlockedCompareExchange
GetProcessVersion
WaitNamedPipeW
GetVolumeNameForVolumeMountPointA
CreateSemaphoreW
GlobalAddAtomW
InterlockedIncrement
GetTapeParameters
Heap32ListFirst
GetShortPathNameA
SizeofResource
GetWindowsDirectoryA
GetFileSize
FindNextFileW
OpenMutexA
CompareStringA
LoadLibraryW
SetFilePointerEx
GetOEMCP
BeginUpdateResourceW
_lwrite
ExpandEnvironmentStringsW
DosDateTimeToFileTime
ReleaseSemaphore
GetFileAttributesA
GetDiskFreeSpaceW
SetVolumeMountPointA
TryEnterCriticalSection
GetLogicalDrives
FormatMessageW
LocalUnlock
CreateMutexW
_hwrite
DebugActiveProcess
GetUserDefaultLangID
DeleteFiber
HeapCreate
FileTimeToSystemTime
GetVolumePathNameW
MoveFileExW
LocalSize
EnumSystemLanguageGroupsW
GetDriveTypeW
WriteConsoleA
HeapCompact
BuildCommDCBA
WritePrivateProfileSectionA
GetFileSizeEx
InterlockedExchangeAdd
OutputDebugStringW
EnumCalendarInfoA
_lopen
IsValidLocale
IsBadStringPtrW
GlobalFree
GetProcessTimes
GetSystemTimeAsFileTime
GetVolumeNameForVolumeMountPointW
FlushConsoleInputBuffer
CreateEventW
QueueUserAPC
FindFirstFileW
Beep
GetQueuedCompletionStatus
SetVolumeLabelW
GetSystemTimeAdjustment
GetFileAttributesExA
WritePrivateProfileStructW
CreateFileA
WaitForMultipleObjectsEx
VirtualAlloc
GetCurrencyFormatA
WritePrivateProfileStringA
WritePrivateProfileSectionW
GetEnvironmentStringsW
GetPrivateProfileIntW
UnmapViewOfFile
GetComputerNameA
GetModuleFileNameA
WriteProcessMemory
OpenFileMappingW
SetLastError
MoveFileExA
WaitForSingleObject
LockFile
SetProcessShutdownParameters
SetCommBreak
QueryPerformanceCounter
GetLogicalDriveStringsW
CancelIo
SetStdHandle
Heap32ListNext
ClearCommBreak
GlobalAddAtomA
MoveFileW
GetMailslotInfo
SetLocalTime
SetVolumeLabelA
VirtualFreeEx
VirtualLock
Heap32Next
EnumResourceNamesA
WideCharToMultiByte
GetStringTypeExW
FreeResource
GetCPInfoExA
CopyFileExA
DuplicateHandle
UnlockFileEx
EndUpdateResourceW
OutputDebugStringA
DeleteAtom
FindNextFileA
GetProcessHeap
GetUserDefaultLCID
LocalReAlloc
UnlockFile
GetSystemDefaultLCID
FindAtomW
VirtualAllocEx
EnumLanguageGroupLocalesW
GetCommConfig
TlsGetValue
WaitForSingleObjectEx
SearchPathW
FreeLibrary
GetPrivateProfileStringW
GetWindowsDirectoryW
GetProfileStringW
VerLanguageNameA
SwitchToThread
FreeEnvironmentStringsA
FindResourceExW
Toolhelp32ReadProcessMemory
LocalHandle
IsBadWritePtr
IsBadCodePtr
GetTempFileNameA
FindResourceA
TlsAlloc
HeapFree
_llseek
OpenMutexW
lstrcmpiA
TransmitCommChar
Process32First
SetHandleInformation
ResetEvent
FlushInstructionCache
GetVersionExA
GetDateFormatA
FindCloseChangeNotification
SetHandleCount
FindNextVolumeW
_lclose
SwitchToFiber
GetVolumePathNameA
GetEnvironmentVariableW
GetCurrentProcessId
SetConsoleTitleW
HeapDestroy
GetCurrentThreadId
GetEnvironmentVariableA
ConnectNamedPipe
PostQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
Thread32First
TerminateProcess
GetLocalTime
GlobalReAlloc
GetVersionExW
ExitProcess
SetTapePosition
FindFirstChangeNotificationA
GlobalDeleteAtom
GetStringTypeExA
VirtualQuery
GetProcessAffinityMask
ClearCommError
ProcessIdToSessionId
lstrcpynW
FindFirstFileExW
_hread
GetLongPathNameW
GetDateFormatW
LCMapStringA
DisableThreadLibraryCalls
CreateDirectoryExA
SetCurrentDirectoryW
ResumeThread
GetTempPathA
LocalCompact
GetPrivateProfileSectionNamesA
OpenEventW
DisconnectNamedPipe
GlobalGetAtomNameW
FlushFileBuffers
GetComputerNameExW
GetProfileSectionA
GetTempFileNameW
GetModuleHandleA
GetProcessWorkingSetSize
Module32First
UpdateResourceW
SetThreadExecutionState
LeaveCriticalSection
RtlUnwind
GetCurrentDirectoryW
ReadConsoleInputA
VirtualProtectEx
Sleep
LocalLock
GetStartupInfoA
CreateNamedPipeW
GetProcessHeaps
RtlFillMemory
GetSystemPowerStatus
GetVolumeInformationW
GlobalLock
MulDiv
ReadFile
OpenSemaphoreW
SetThreadLocale
UnhandledExceptionFilter
OpenProcess
Module32FirstW
GlobalGetAtomNameA
OpenThread
GetTimeFormatA
EnterCriticalSection
InterlockedDecrement
EndUpdateResourceA
LoadLibraryExW
EnumResourceTypesA
EnumSystemLocalesA
VirtualFree
WaitNamedPipeA
GetStdHandle
DebugBreak
GetProfileIntA
GetSystemTime
DefineDosDeviceA
GetCompressedFileSizeW
EnumResourceLanguagesA
SetEndOfFile
SetMailslotInfo
GetAtomNameA
VirtualQueryEx
GetShortPathNameW
CreateDirectoryW
CreateWaitableTimerA
lstrcmpW
EnumCalendarInfoW
OpenSemaphoreA
FlushViewOfFile
LoadResource
MultiByteToWideChar
WritePrivateProfileStringW
GetModuleHandleW
GetSystemDefaultLangID
LockResource
BackupSeek
CreateThread
IsDBCSLeadByteEx
PulseEvent
MapViewOfFileEx
RaiseException
ConvertDefaultLocale
GetExitCodeProcess
LockFileEx
GlobalMemoryStatus
WriteFile
GetStartupInfoW
SearchPathA
LCMapStringW
Thread32Next
GetSystemDirectoryA
LocalAlloc
Module32NextW
GetDiskFreeSpaceExW
SetNamedPipeHandleState
QueueUserWorkItem
WaitForDebugEvent
HeapAlloc
IsBadStringPtrA
SetProcessPriorityBoost
QueryDosDeviceW
TlsFree
GetProfileIntW
GetHandleInformation
VerifyVersionInfoW
WriteProfileStringA
GetLongPathNameA
CompareStringW
GlobalFindAtomW
CommConfigDialogW
CloseHandle
CreateFileMappingA
GetTempPathW
CreateSemaphoreA
GetDiskFreeSpaceExA
ConvertThreadToFiber
GetFileTime
GetThreadTimes
GetVersion
GetSystemWindowsDirectoryA
OpenFileMappingA
lstrcpyW
VirtualProtect
SleepEx
lstrcmpiW
FileTimeToDosDateTime
FindResourceExA
EnumCalendarInfoExW
SetErrorMode
IsBadReadPtr
lstrcpyA
lstrcmpA
GetLogicalDriveStringsA
FindFirstChangeNotificationW
GetCommModemStatus
Process32Next
SetFileAttributesW
CopyFileA
InitializeCriticalSection
EnumResourceLanguagesW
DeleteVolumeMountPointA
AllocConsole
GetBinaryTypeA
AddAtomW
InterlockedExchange
RemoveDirectoryA
GetCommandLineA
GetPrivateProfileIntA
oleaut32
LoadTypeLi
user32
MessageBoxA
CharNextW
TrackMouseEvent
CopyImage
GetWindowRect
MsgWaitForMultipleObjectsEx
SetTimer
DispatchMessageA
DrawStateA
GetMessagePos
CreateAcceleratorTableW
CharLowerBuffA
SetDlgItemTextW
CharLowerW
ToUnicode
GetCaretPos
SetClipboardData
LoadKeyboardLayoutA
SendNotifyMessageW
EnableWindow
SetWindowTextW
TileWindows
SetRectEmpty
DeferWindowPos
LoadCursorFromFileA
DefWindowProcW
GetClassLongW
SystemParametersInfoA
OpenInputDesktop
CloseDesktop
RealChildWindowFromPoint
SetWindowsHookExA
ExcludeUpdateRgn
SetClipboardViewer
GetScrollRange
GetMessageExtraInfo
ModifyMenuA
GetClassInfoW
DdeUnaccessData
WindowFromDC
DdeDisconnect
AttachThreadInput
GetScrollBarInfo
MoveWindow
CharNextA
DdeInitializeW
GetMenuState
GetTitleBarInfo
SendNotifyMessageA
DlgDirSelectExA
SetWindowLongW
GetDoubleClickTime
GetClassNameA
DlgDirListComboBoxA
DdeCreateStringHandleA
CloseClipboard
CreateIconIndirect
CopyAcceleratorTableW
DdeClientTransaction
GetDlgCtrlID
DialogBoxIndirectParamA
SetWindowLongA
WaitMessage
IsMenu
MenuItemFromPoint
GetKeyState
GetForegroundWindow
LoadAcceleratorsA
GetMenuInfo
DefMDIChildProcA
GetWindowDC
GetUserObjectSecurity
GetSystemMetrics
DdeCreateDataHandle
GetClipCursor
ChildWindowFromPointEx
GetKeyNameTextW
OpenWindowStationW
EnumChildWindows
SetMenuItemInfoW
CheckDlgButton
GetClassWord
GetScrollPos
ToAscii
ShowScrollBar
FindWindowA
SubtractRect
CreateDialogIndirectParamW
RegisterWindowMessageW
CreateIconFromResource
CreateIcon
GetWindowRgn
CreateDialogParamA
CharNextExA
ChangeDisplaySettingsA
GetWindowThreadProcessId
ChangeDisplaySettingsW
MessageBoxIndirectA
GetLastInputInfo
CreateWindowExW
GetClipboardFormatNameA
PackDDElParam
VkKeyScanExA
AdjustWindowRectEx
WindowFromPoint
PeekMessageA
GetWindowContextHelpId
OpenClipboard
WinHelpA
SetForegroundWindow
GetWindow
IsRectEmpty
UnregisterClassA
SetMenuContextHelpId
ChildWindowFromPoint
GetKeyNameTextA
ModifyMenuW
GetMenuStringW
UnregisterDeviceNotification
NotifyWinEvent
SetClassLongA
GetUserObjectInformationA
DdeFreeDataHandle
DestroyAcceleratorTable
DdeConnect
GetNextDlgGroupItem
GetKeyboardLayoutList
SetWindowPos
ScrollDC
InflateRect
EqualRect
SetProcessWindowStation
DdeAccessData
DdeNameService
DeleteMenu
GetMenuStringA
EnumThreadWindows
RegisterClassExA
EnumDisplaySettingsA
PeekMessageW
GetSubMenu
GetMenuContextHelpId
IsClipboardFormatAvailable
GetTabbedTextExtentA
wvsprintfA
GetWindowTextLengthA
SetScrollPos
RegisterClassExW
ToAsciiEx
FindWindowExA
GetClipboardFormatNameW
GetComboBoxInfo
GetClassInfoA
OpenDesktopW
LockSetForegroundWindow
GetInputState
EnumDesktopWindows
InvertRect
CallWindowProcW
FillRect
SetUserObjectSecurity
LockWindowUpdate
AppendMenuW
ReleaseDC
InSendMessage
MessageBoxExA
wsprintfW
ScreenToClient
InvalidateRect
mouse_event
CopyRect
SetScrollInfo
RemovePropW
CharToOemA
CreateCaret
EmptyClipboard
LoadMenuIndirectA
SetLayeredWindowAttributes
OpenIcon
CheckMenuItem
MapVirtualKeyExA
GetPropW
GetClassLongA
GetCaretBlinkTime
ValidateRgn
GrayStringA
DefFrameProcA
WaitForInputIdle
FreeDDElParam
ActivateKeyboardLayout
SetCursorPos
DrawFocusRect
SetDoubleClickTime
EnumDisplaySettingsW
DrawIcon
IsChild
LoadImageA
SwapMouseButton
ReuseDDElParam
UnionRect
IsCharAlphaA
GetMenuItemRect
GetMonitorInfoW
SetMenuItemBitmaps
SendMessageW
SetMessageExtraInfo
GetWindowTextW
SendInput
ShowWindowAsync
GetActiveWindow
IntersectRect
MonitorFromPoint
GetWindowLongW
ShowOwnedPopups
TileChildWindows
TranslateAcceleratorW
IsCharUpperA
GetGUIThreadInfo
SetPropW
LoadCursorA
ClientToScreen
DestroyWindow
EnumClipboardFormats
DlgDirListA
IsCharAlphaNumericA
PostQuitMessage
GetMenuCheckMarkDimensions
DefWindowProcA
BroadcastSystemMessage
DlgDirListComboBoxW
MapVirtualKeyA
DialogBoxIndirectParamW
WinHelpW
GetClientRect
MonitorFromWindow
PostMessageA
DlgDirSelectComboBoxExA
SendMessageA
SetKeyboardState
EndDeferWindowPos
BeginDeferWindowPos
GetMonitorInfoA
GetNextDlgTabItem
DefMDIChildProcW
OpenWindowStationA
CharUpperBuffA
CreateDialogIndirectParamA
CharLowerA
GetCursor
SetMenu
ClipCursor
VkKeyScanW
ReplyMessage
GetScrollInfo
DrawTextExW
EnableScrollBar
IsDialogMessage
FindWindowW
DdeGetLastError
TrackPopupMenu
DrawTextA
DialogBoxParamA
GetDCEx
CopyAcceleratorTableA
LoadCursorFromFileW
InvalidateRgn
DdeFreeStringHandle
InsertMenuItemW
GetFocus
GetMessageW
GetClassInfoExA
SetWindowTextA
CreateDialogParamW
MapDialogRect
SetDlgItemTextA
ArrangeIconicWindows
GetSysColorBrush
SetCapture
SwitchDesktop
EnableMenuItem
DestroyIcon
GetWindowTextA
SetWindowRgn
OemToCharBuffA
SetCursor
ChangeClipboardChain
MessageBeep
AppendMenuA
CreateMenu
GetCapture
TranslateMessage
InsertMenuA
GetDlgItem
CreateIconFromResourceEx
SendDlgItemMessageA
EndDialog
GetMenuDefaultItem
LoadAcceleratorsW
DdeCreateStringHandleW
HideCaret
IsZoomed
IsDlgButtonChecked
MapWindowPoints
SetFocus
GetDlgItemTextA
SetRect
LoadBitmapA
UnhookWindowsHookEx
GetDlgItemTextW
IsWindowUnicode
VkKeyScanA
SetPropA
DefDlgProcA
GetPropA
DdePostAdvise
GetWindowLongA
GrayStringW
InsertMenuItemA
IsIconic
LoadIconW
LookupIconIdFromDirectoryEx
IsCharAlphaNumericW
GetKeyboardLayoutNameA
CharToOemBuffA
CreateWindowExA
GetIconInfo
DrawAnimatedRects
GetProcessWindowStation
UpdateWindow
InsertMenuW
SetWindowPlacement
GetWindowWord
GetUpdateRect
CreateDesktopW
FlashWindowEx
LoadMenuIndirectW
RegisterHotKey
DdeGetData
GetDesktopWindow
DestroyCaret
CreateMDIWindowA
DialogBoxParamW
CloseWindowStation
EnumDisplayMonitors
GetWindowPlacement
DdeUninitialize
GetWindowTextLengthW
DrawStateW
GetMenu
IsWindowVisible
GetDC
MapVirtualKeyExW
UnhookWinEvent
GetMessageTime
LoadImageW
CopyIcon
GetQueueStatus
DestroyCursor
ReleaseCapture
PtInRect
BeginPaint
IsCharLowerW
TabbedTextOutA
AnimateWindow
ValidateRect
SetMenuInfo
GetLastActivePopup
RegisterDeviceNotificationW
MapVirtualKeyW
DrawTextW
RegisterClassW
GetWindowModuleFileNameW
GetSystemMenu
TranslateAcceleratorA
DdeInitializeA
DestroyMenu
CreateCursor
GetUpdateRgn
wvsprintfW
CallNextHookEx
CallMsgFilterA
OpenDesktopA
GetTopWindow
GetClassNameW
DdeQueryStringA
GetMenuItemInfoW
ToUnicodeEx
MonitorFromRect
RegisterWindowMessageA
RegisterClassA
SetThreadDesktop
wsprintfA
LoadIconA
SetMenuItemInfoA
ShowCursor
keybd_event
DrawMenuBar
BringWindowToTop
CheckMenuRadioItem
UnregisterClassW
ExitWindowsEx
RegisterClipboardFormatA
SetDlgItemInt
DrawEdge
CreateMDIWindowW
GetCursorPos
TrackPopupMenuEx
MsgWaitForMultipleObjects
EndPaint
CharPrevA
SetCaretBlinkTime
AdjustWindowRect
DispatchMessageW
DragDetect
SetMenuDefaultItem
RegisterClipboardFormatW
EnumWindows
LoadStringW
DrawFrameControl
GetDlgItemInt
PostThreadMessageA
ScrollWindow
GetMenuItemID
UnpackDDElParam
GetClipboardViewer
UnregisterHotKey
CreatePopupMenu
IsWindow
CharUpperBuffW
GetSysColor
CreateAcceleratorTableA
MessageBoxW
PostMessageW
TabbedTextOutW
FlashWindow
CharUpperA
CascadeWindows
GetClipboardData
SystemParametersInfoW
LoadBitmapW
GetMessageA
SetWindowContextHelpId
CallWindowProcA
RedrawWindow
SendDlgItemMessageW
KillTimer
GetWindowInfo
GetDialogBaseUnits
GetKeyboardState
DdeQueryStringW
DrawIconEx
GetAsyncKeyState
GetOpenClipboardWindow
LoadMenuA
AllowSetForegroundWindow
SendMessageTimeoutA
ShowWindow
RemovePropA
ShowCaret
GetParent
ScrollWindowEx
SetParent
IsDialogMessageW
GetAncestor
SetActiveWindow
OemToCharA
GetUserObjectInformationW
DrawCaption
LoadCursorW
FrameRect
TranslateMDISysAccel
SetWindowsHookExW
LookupIconIdFromDirectory
GetMenuBarInfo
GetMenuItemInfoA
IsDialogMessageA
LoadStringA
OffsetRect
GetClipboardOwner
DrawTextExA
SetScrollRange
CountClipboardFormats
CheckRadioButton
GetKeyboardLayout
GetMenuItemCount
SetCaretPos
SetClassLongW
RemoveMenu
SendMessageTimeoutW
FindWindowExW
GetThreadDesktop
CloseWindow
IsCharLowerA
IsWindowEnabled
HiliteMenuItem
GetClassInfoExW
CharUpperW
DefFrameProcW
GetCursorInfo
CharLowerBuffW
comdlg32
ChooseColorA
ReplaceTextW
PrintDlgW
GetFileTitleA
ChooseFontA
PageSetupDlgW
ChooseFontW
GetFileTitleW
FindTextA
FindTextW
GetOpenFileNameA
CommDlgExtendedError
ChooseColorW
ReplaceTextA
GetSaveFileNameW
PageSetupDlgA
PrintDlgA
PrintDlgExA
GetOpenFileNameW
GetSaveFileNameA
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ