LangDialog
Overview
overview
8Static
static
37tt_setup.exe
windows7-x64
77tt_setup.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
37+ Taskbar...er.exe
windows7-x64
17+ Taskbar...er.exe
windows10-2004-x64
1bin/64/inject.dll
windows7-x64
8bin/64/inject.dll
windows10-2004-x64
8inject.dll
windows7-x64
8inject.dll
windows10-2004-x64
8Static task
static1
Behavioral task
behavioral1
Sample
7tt_setup.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7tt_setup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
7+ Taskbar Tweaker.exe
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
7+ Taskbar Tweaker.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
bin/64/inject.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
bin/64/inject.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
inject.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
inject.dll
Resource
win10v2004-20240709-en
General
-
Target
7tt_setup.exe
-
Size
1.7MB
-
MD5
fbc5504e792378c779756be0ff91fb19
-
SHA1
677e34cc460029b9aa278da0c1eccf3f8a3984f0
-
SHA256
c7a5f922ca023949f2ef896893e5e669d8d04e7d7d4994eb86b2a9ed8d730752
-
SHA512
8c4b011b3adbedaaf6d561dba3d4c165fc534a65571d568690d6d913b7e596f864bdf2fef79042f60a38016ca69b2f49e337bb90d35bcc10c1037980b0c51782
-
SSDEEP
49152:uyfMJ/t2/YbR3UWlA1dicNcMStzq/zAJMre6a:6gYbyWlATiw5StWbr7a
Malware Config
Signatures
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource 7tt_setup.exe unpack001/$PLUGINSDIR/LangDLL.dll unpack001/$PLUGINSDIR/System.dll unpack001/$PLUGINSDIR/nsDialogs.dll unpack001/7+ Taskbar Tweaker.exe unpack001/bin/64/7+ Taskbar Tweaker.ex2 unpack001/bin/64/inject.dll unpack001/inject.dll
Files
-
7tt_setup.exe.exe windows:4 windows x86 arch:x86
1f23f452093b5c1ff091a2f9fb4fa3e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
SetCurrentDirectoryW
GetFileAttributesW
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
CopyFileW
GetShortPathNameW
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalUnlock
GetDiskFreeSpaceW
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
user32
GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
advapi32
AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/LangDLL.dll.dll windows:4 windows x86 arch:x86
3e8d18bb71c7ebbda2ddc2a4bb03547b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW
user32
DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 681B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
fc0224e99e736751432961db63a41b76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 867B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/modern-header.bmp
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/nsDialogs.dll.dll windows:4 windows x86 arch:x86
6b5c4f7d679059f68f1269aad3a5cecd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetFileAttributesW
lstrcpyW
MulDiv
lstrlenW
HeapFree
GetCurrentDirectoryW
lstrcmpiW
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
SetCurrentDirectoryW
HeapAlloc
user32
DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
GetPropW
CharPrevW
DrawFocusRect
GetWindowLongW
DrawTextW
GetClientRect
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapDialogRect
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
CharNextW
SendMessageW
MapWindowPoints
RemovePropW
GetWindowTextW
gdi32
SetTextColor
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
ole32
CoTaskMemFree
Exports
Exports
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 638B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
7+ Taskbar Tweaker.exe.exe .vbs windows:6 windows x64 arch:x64 polyglot
31bea6ae1a64463407bd804385a96363
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
ord345
InitCommonControlsEx
wininet
HttpSendRequestW
InternetReadFile
HttpOpenRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetSetStatusCallbackW
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
HttpQueryInfoW
uxtheme
SetWindowTheme
dbghelp
SymInitialize
SymFromAddrW
SymCleanup
MiniDumpWriteDump
shlwapi
PathFindFileNameW
PathCombineW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
HeapFree
GetCurrentProcess
RtlCaptureStackBackTrace
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
GetVersionExW
GetProcessTimes
GetSystemTimeAsFileTime
HeapReAlloc
lstrlenW
lstrcmpA
DeleteFileW
UnmapViewOfFile
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
GetTempPathW
GetTempFileNameW
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
lstrcatW
WriteFile
SetLastError
WritePrivateProfileStringW
GetLastError
GetPrivateProfileStringW
GetModuleHandleW
SizeofResource
GetThreadUILanguage
GetFileAttributesW
lstrcmpW
ReadFile
HeapSize
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetUnhandledExceptionFilter
GetCommandLineW
SetThreadUILanguage
LocalFree
ExitProcess
CreateMutexW
WaitForSingleObject
ReleaseMutex
lstrcmpiW
OpenMutexW
OpenProcess
CreateEventW
DuplicateHandle
CreateThread
ResumeThread
SetEvent
LoadLibraryW
GetProcAddress
FreeLibrary
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
WaitForMultipleObjects
ReadProcessMemory
WriteProcessMemory
VerSetConditionMask
VerifyVersionInfoW
GetTickCount
CreateDirectoryW
lstrlenA
GetProcessHeap
LCIDToLocaleName
CompareStringW
EnumResourceLanguagesW
FindResourceExW
MultiByteToWideChar
RemoveDirectoryW
HeapAlloc
GetModuleHandleExW
CreateProcessW
user32
MessageBoxW
DestroyWindow
GetClientRect
GetWindowRect
GetDlgItem
EnableWindow
DefWindowProcW
IsWindowEnabled
GetFocus
GetKeyState
GetDlgCtrlID
BeginDeferWindowPos
EndDeferWindowPos
GetSystemMetrics
MapWindowPoints
CreateWindowExW
SetWindowPos
SetWindowLongW
ClientToScreen
CreatePopupMenu
AppendMenuW
TrackPopupMenu
DestroyMenu
RedrawWindow
DeferWindowPos
SetWindowsHookExW
SetFocus
GetWindowTextW
UnhookWindowsHookEx
CallWindowProcW
CallNextHookEx
FindWindowW
GetWindowThreadProcessId
AllowSetForegroundWindow
PostMessageW
RegisterWindowMessageW
wsprintfW
SetWindowTextW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
LoadImageW
GetSysColor
KillTimer
SetTimer
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
GetCursorPos
ReplyMessage
PostQuitMessage
DestroyIcon
GetDC
ReleaseDC
SystemParametersInfoW
GetSystemMenu
GetMenuItemCount
InsertMenuItemW
PtInRect
WaitForInputIdle
GetClassInfoW
RegisterClassW
LoadStringW
GetWindow
GetClassNameW
MoveWindow
CheckDlgButton
SendDlgItemMessageW
DialogBoxParamW
IsDlgButtonChecked
EndDialog
wvsprintfW
GetWindowLongPtrW
SetDlgItemTextW
GetUserObjectInformationW
GetParent
SetWindowLongPtrW
ShowWindow
CreateDialogParamW
CreateDialogIndirectParamW
GetThreadDesktop
GetWindowLongW
SendMessageW
gdi32
CreatePatternBrush
SelectObject
DeleteObject
SetBrushOrgEx
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectW
SetBkMode
GetTextExtentPoint32W
advapi32
DuplicateToken
RegCreateKeyExW
RegCloseKey
RegDeleteTreeW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
GetFileSecurityW
GetUserNameW
RegOpenKeyExW
AccessCheck
MapGenericMask
RegGetValueW
OpenProcessToken
shell32
SetCurrentProcessExplicitAppUserModelID
CommandLineToArgvW
ShellExecuteW
Shell_NotifyIconW
Shell_NotifyIconGetRect
ole32
CoUninitialize
CoInitializeEx
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 383KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bin/64/7+ Taskbar Tweaker.ex2.exe .vbs windows:6 windows x64 arch:x64 polyglot
31bea6ae1a64463407bd804385a96363
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
ord345
InitCommonControlsEx
wininet
HttpSendRequestW
InternetReadFile
HttpOpenRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetSetStatusCallbackW
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
HttpQueryInfoW
uxtheme
SetWindowTheme
dbghelp
SymInitialize
SymFromAddrW
SymCleanup
MiniDumpWriteDump
shlwapi
PathFindFileNameW
PathCombineW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
HeapFree
GetCurrentProcess
RtlCaptureStackBackTrace
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
GetVersionExW
GetProcessTimes
GetSystemTimeAsFileTime
HeapReAlloc
lstrlenW
lstrcmpA
DeleteFileW
UnmapViewOfFile
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
GetTempPathW
GetTempFileNameW
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
lstrcatW
WriteFile
SetLastError
WritePrivateProfileStringW
GetLastError
GetPrivateProfileStringW
GetModuleHandleW
SizeofResource
GetThreadUILanguage
GetFileAttributesW
lstrcmpW
ReadFile
HeapSize
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetUnhandledExceptionFilter
GetCommandLineW
SetThreadUILanguage
LocalFree
ExitProcess
CreateMutexW
WaitForSingleObject
ReleaseMutex
lstrcmpiW
OpenMutexW
OpenProcess
CreateEventW
DuplicateHandle
CreateThread
ResumeThread
SetEvent
LoadLibraryW
GetProcAddress
FreeLibrary
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
WaitForMultipleObjects
ReadProcessMemory
WriteProcessMemory
VerSetConditionMask
VerifyVersionInfoW
GetTickCount
CreateDirectoryW
lstrlenA
GetProcessHeap
LCIDToLocaleName
CompareStringW
EnumResourceLanguagesW
FindResourceExW
MultiByteToWideChar
RemoveDirectoryW
HeapAlloc
GetModuleHandleExW
CreateProcessW
user32
MessageBoxW
DestroyWindow
GetClientRect
GetWindowRect
GetDlgItem
EnableWindow
DefWindowProcW
IsWindowEnabled
GetFocus
GetKeyState
GetDlgCtrlID
BeginDeferWindowPos
EndDeferWindowPos
GetSystemMetrics
MapWindowPoints
CreateWindowExW
SetWindowPos
SetWindowLongW
ClientToScreen
CreatePopupMenu
AppendMenuW
TrackPopupMenu
DestroyMenu
RedrawWindow
DeferWindowPos
SetWindowsHookExW
SetFocus
GetWindowTextW
UnhookWindowsHookEx
CallWindowProcW
CallNextHookEx
FindWindowW
GetWindowThreadProcessId
AllowSetForegroundWindow
PostMessageW
RegisterWindowMessageW
wsprintfW
SetWindowTextW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
LoadImageW
GetSysColor
KillTimer
SetTimer
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
GetCursorPos
ReplyMessage
PostQuitMessage
DestroyIcon
GetDC
ReleaseDC
SystemParametersInfoW
GetSystemMenu
GetMenuItemCount
InsertMenuItemW
PtInRect
WaitForInputIdle
GetClassInfoW
RegisterClassW
LoadStringW
GetWindow
GetClassNameW
MoveWindow
CheckDlgButton
SendDlgItemMessageW
DialogBoxParamW
IsDlgButtonChecked
EndDialog
wvsprintfW
GetWindowLongPtrW
SetDlgItemTextW
GetUserObjectInformationW
GetParent
SetWindowLongPtrW
ShowWindow
CreateDialogParamW
CreateDialogIndirectParamW
GetThreadDesktop
GetWindowLongW
SendMessageW
gdi32
CreatePatternBrush
SelectObject
DeleteObject
SetBrushOrgEx
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectW
SetBkMode
GetTextExtentPoint32W
advapi32
DuplicateToken
RegCreateKeyExW
RegCloseKey
RegDeleteTreeW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
GetFileSecurityW
GetUserNameW
RegOpenKeyExW
AccessCheck
MapGenericMask
RegGetValueW
OpenProcessToken
shell32
SetCurrentProcessExplicitAppUserModelID
CommandLineToArgvW
ShellExecuteW
Shell_NotifyIconW
Shell_NotifyIconGetRect
ole32
CoUninitialize
CoInitializeEx
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 383KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bin/64/inject.dll.dll windows:6 windows x64 arch:x64
1856e9189c9dedb30092319ed21708fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
comctl32
ord338
ord328
ord412
ord410
ImageList_Remove
ImageList_SetImageCount
ImageList_ReplaceIcon
ImageList_Create
ord336
ord334
ord413
shlwapi
SHStrDupW
StrCmpLogicalW
PathFindFileNameW
uxtheme
SetWindowTheme
DrawThemeParentBackground
CloseThemeData
OpenThemeData
dwmapi
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wininet
InternetOpenW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetReadFile
InternetCloseHandle
kernel32
GetFileType
GetStdHandle
LCMapStringW
HeapAlloc
GetProcessHeap
GetModuleHandleExW
HeapFree
GetCurrentProcess
RtlCaptureStackBackTrace
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
GetVersionExW
GetProcessTimes
GetSystemTimeAsFileTime
HeapReAlloc
lstrlenW
lstrcmpA
DeleteFileW
UnmapViewOfFile
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
GetTempPathW
GetTempFileNameW
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
lstrcatW
WriteFile
SetLastError
WritePrivateProfileStringW
GetLastError
GetPrivateProfileStringW
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
SetUnhandledExceptionFilter
K32GetModuleInformation
GetModuleHandleW
WaitForMultipleObjects
FreeLibraryAndExitThread
CreateThread
DuplicateHandle
Sleep
lstrcmpiA
VirtualProtect
GetProcAddress
OpenProcess
TerminateProcess
MulDiv
DebugBreak
HeapSize
lstrcmpW
lstrcmpiW
CreateEventW
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
GetProcessId
OpenMutexW
CreateProcessW
SetThreadUILanguage
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
ReleaseMutex
GlobalFindAtomW
HeapCreate
Thread32Next
CreateMutexW
Thread32First
SuspendThread
CreateToolhelp32Snapshot
HeapDestroy
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedFlushSList
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
FreeLibrary
RaiseException
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetStringTypeW
GetTickCount
user32
PostQuitMessage
TranslateMessage
DispatchMessageW
UnhookWindowsHookEx
CallNextHookEx
GetForegroundWindow
GetDesktopWindow
WaitForInputIdle
FindWindowW
GetGUIThreadInfo
GetWindowTextLengthW
SetForegroundWindow
GetClassNameW
EnumThreadWindows
FindWindowExW
InflateRect
CalculatePopupWindowPosition
ShowWindow
GetWindowLongPtrW
DialogBoxParamW
SystemParametersInfoW
GetDlgItem
SetWindowLongW
EndDialog
MonitorFromWindow
SetWindowLongPtrW
MoveWindow
SetCapture
ReleaseCapture
SetWindowTextW
LoadImageW
DestroyIcon
GetClassLongPtrW
CreatePopupMenu
AppendMenuW
SetMenuItemInfoW
TrackPopupMenu
DestroyMenu
GetMenuItemInfoW
CascadeWindows
TileWindows
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetFocus
DefWindowProcW
SetPropW
RemovePropW
GetDoubleClickTime
SendInput
SetRectEmpty
SetWindowsHookExW
UnregisterClassW
CreateWindowExW
RegisterClassW
UnregisterHotKey
IntersectRect
GetParent
GetWindowRect
PtInRect
MapWindowPoints
LoadCursorW
SetCursor
WindowFromPoint
PeekMessageW
PostThreadMessageW
GetClientRect
GetKeyState
RegisterHotKey
GetMessageW
GetCapture
GetPropW
GetCursorPos
RedrawWindow
IsChild
SetWindowPos
ReleaseDC
GetDC
GetSystemMetrics
ClientToScreen
MonitorFromPoint
SendMessageW
InternalGetWindowText
InvalidateRect
IsWindow
KillTimer
SetTimer
SwitchToThisWindow
ShowWindowAsync
GetWindow
IsWindowVisible
GetAncestor
GetLastActivePopup
IsZoomed
GetMenuState
GetSystemMenu
GetWindowLongW
IsWindowEnabled
IsIconic
PostMessageW
GetScrollInfo
GetClassLongW
GetClassInfoW
AllowSetForegroundWindow
GetWindowThreadProcessId
SendMessageTimeoutW
LoadStringW
RegisterWindowMessageW
wsprintfW
wvsprintfW
DestroyWindow
EnableWindow
gdi32
GetDeviceCaps
advapi32
RegEnumValueW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegGetValueW
shell32
Shell_NotifyIconGetRect
SHGetPropertyStoreForWindow
ole32
PropVariantClear
CoCreateInstance
Exports
Exports
Init
Sections
.text Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
inject.dll.dll windows:6 windows x64 arch:x64
1856e9189c9dedb30092319ed21708fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
comctl32
ord338
ord328
ord412
ord410
ImageList_Remove
ImageList_SetImageCount
ImageList_ReplaceIcon
ImageList_Create
ord336
ord334
ord413
shlwapi
SHStrDupW
StrCmpLogicalW
PathFindFileNameW
uxtheme
SetWindowTheme
DrawThemeParentBackground
CloseThemeData
OpenThemeData
dwmapi
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wininet
InternetOpenW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetReadFile
InternetCloseHandle
kernel32
GetFileType
GetStdHandle
LCMapStringW
HeapAlloc
GetProcessHeap
GetModuleHandleExW
HeapFree
GetCurrentProcess
RtlCaptureStackBackTrace
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
GetVersionExW
GetProcessTimes
GetSystemTimeAsFileTime
HeapReAlloc
lstrlenW
lstrcmpA
DeleteFileW
UnmapViewOfFile
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
GetTempPathW
GetTempFileNameW
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
lstrcatW
WriteFile
SetLastError
WritePrivateProfileStringW
GetLastError
GetPrivateProfileStringW
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
SetUnhandledExceptionFilter
K32GetModuleInformation
GetModuleHandleW
WaitForMultipleObjects
FreeLibraryAndExitThread
CreateThread
DuplicateHandle
Sleep
lstrcmpiA
VirtualProtect
GetProcAddress
OpenProcess
TerminateProcess
MulDiv
DebugBreak
HeapSize
lstrcmpW
lstrcmpiW
CreateEventW
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
GetProcessId
OpenMutexW
CreateProcessW
SetThreadUILanguage
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
ReleaseMutex
GlobalFindAtomW
HeapCreate
Thread32Next
CreateMutexW
Thread32First
SuspendThread
CreateToolhelp32Snapshot
HeapDestroy
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedFlushSList
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
FreeLibrary
RaiseException
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetStringTypeW
GetTickCount
user32
PostQuitMessage
TranslateMessage
DispatchMessageW
UnhookWindowsHookEx
CallNextHookEx
GetForegroundWindow
GetDesktopWindow
WaitForInputIdle
FindWindowW
GetGUIThreadInfo
GetWindowTextLengthW
SetForegroundWindow
GetClassNameW
EnumThreadWindows
FindWindowExW
InflateRect
CalculatePopupWindowPosition
ShowWindow
GetWindowLongPtrW
DialogBoxParamW
SystemParametersInfoW
GetDlgItem
SetWindowLongW
EndDialog
MonitorFromWindow
SetWindowLongPtrW
MoveWindow
SetCapture
ReleaseCapture
SetWindowTextW
LoadImageW
DestroyIcon
GetClassLongPtrW
CreatePopupMenu
AppendMenuW
SetMenuItemInfoW
TrackPopupMenu
DestroyMenu
GetMenuItemInfoW
CascadeWindows
TileWindows
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetFocus
DefWindowProcW
SetPropW
RemovePropW
GetDoubleClickTime
SendInput
SetRectEmpty
SetWindowsHookExW
UnregisterClassW
CreateWindowExW
RegisterClassW
UnregisterHotKey
IntersectRect
GetParent
GetWindowRect
PtInRect
MapWindowPoints
LoadCursorW
SetCursor
WindowFromPoint
PeekMessageW
PostThreadMessageW
GetClientRect
GetKeyState
RegisterHotKey
GetMessageW
GetCapture
GetPropW
GetCursorPos
RedrawWindow
IsChild
SetWindowPos
ReleaseDC
GetDC
GetSystemMetrics
ClientToScreen
MonitorFromPoint
SendMessageW
InternalGetWindowText
InvalidateRect
IsWindow
KillTimer
SetTimer
SwitchToThisWindow
ShowWindowAsync
GetWindow
IsWindowVisible
GetAncestor
GetLastActivePopup
IsZoomed
GetMenuState
GetSystemMenu
GetWindowLongW
IsWindowEnabled
IsIconic
PostMessageW
GetScrollInfo
GetClassLongW
GetClassInfoW
AllowSetForegroundWindow
GetWindowThreadProcessId
SendMessageTimeoutW
LoadStringW
RegisterWindowMessageW
wsprintfW
wvsprintfW
DestroyWindow
EnableWindow
gdi32
GetDeviceCaps
advapi32
RegEnumValueW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegGetValueW
shell32
Shell_NotifyIconGetRect
SHGetPropertyStoreForWindow
ole32
PropVariantClear
CoCreateInstance
Exports
Exports
Init
Sections
.text Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ