CFLmTvsGYhngrw
GqovlWwuB
ISQqPWkZPNwXwWHCE
JEfPdNsbSQ
OtPOjtN
TBJEktGD
TMPNtPIarvgEJz
TprMbWFZoUiuWussU
UWtUlYe
WACNR
ZvovFw
dZaPuBfHhrvrRzZ
fEOVQPBWs
iBMfWdq
jfsnjWhFlSsrKTTPP
vEyzhpwvVbGNrds
xfYciAKNGbPExSYkzdP
xjEqlCCyVAUhcspO
zeIwVr
Overview
overview
10Static
static
3c8f33aebcf...18.exe
windows7-x64
10c8f33aebcf...18.exe
windows10-2004-x64
8$PLUGINSDI...EH.dll
windows7-x64
3$PLUGINSDI...EH.dll
windows10-2004-x64
3$PLUGINSDI...Uw.dll
windows7-x64
3$PLUGINSDI...Uw.dll
windows10-2004-x64
3$PLUGINSDI...lI.dll
windows7-x64
3$PLUGINSDI...lI.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
c8f33aebcfa11f236e37f939dbc9f933_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c8f33aebcfa11f236e37f939dbc9f933_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BgoIxFYLpEH.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BgoIxFYLpEH.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/glqBSuBCAUw.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/glqBSuBCAUw.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/lsmtChRlwlI.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/lsmtChRlwlI.dll
Resource
win10v2004-20240802-en
Target
c8f33aebcfa11f236e37f939dbc9f933_JaffaCakes118
Size
6.9MB
MD5
c8f33aebcfa11f236e37f939dbc9f933
SHA1
93ca7b86efb57bd45309300a063f532174cc6200
SHA256
b2425a372548050da11bd568f8dfa736e1e952c58d0c7da86e70fcde8b4801da
SHA512
594cc5ef291ca1d6200e97372d301c4babe28192870dd034211c68d8e983bf9cbbb466ee04652587163cf76a427da345bf292a4282e265f448699fb64b286921
SSDEEP
98304:st9o7zuUkzTSM7HGDkJWPEssPZ/vWSTKQ8ey2qre2M+WW/yz8epS1y4WcrS7pFAE:stqTkzzmD25PZzKQTVr+WdhQ877gh+1
Checks for missing Authenticode signature.
resource |
---|
c8f33aebcfa11f236e37f939dbc9f933_JaffaCakes118 |
unpack001/$PLUGINSDIR/BgoIxFYLpEH.dll |
unpack001/$PLUGINSDIR/glqBSuBCAUw.dll |
unpack001/$PLUGINSDIR/lsmtChRlwlI.dll |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
GetModuleFileNameW
WriteFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
ExitProcess
GetProcAddress
GetOEMCP
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetTimeZoneInformation
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
IsValidCodePage
LoadLibraryW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
EncodePointer
RaiseException
GetCommandLineA
DecodePointer
GetCurrentThreadId
GetLastError
WideCharToMultiByte
GlobalAlloc
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
VirtualAlloc
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
CloseHandle
ReadFile
GetFileSize
CreateFileW
GlobalFree
lstrcpyW
lstrcpynW
wsprintfW
CallMsgFilterW
CharToOemW
OemToCharW
SHLoadInProc
ExtractAssociatedIconW
ShellExecuteExW
SysAllocString
VarBoolFromDate
VarDateFromI4
VarR4FromDate
VarUI1FromUI2
VariantTimeToSystemTime
SysAllocStringByteLen
SystemTimeToVariantTime
VarBstrCmp
SysAllocStringLen
SysStringByteLen
SysFreeString
VarDateFromUI4
VarI2FromR4
VarBstrFromDec
DispInvoke
ImageNtHeader
MapFileAndCheckSumA
UpdateDebugInfoFile
ImageRvaToVa
GetImageUnusedHeaderBytes
ImageGetCertificateData
SnmpUtilOidNCmp
SnmpUtilVarBindListFree
SnmpUtilOidAppend
SnmpUtilOctetsNCmp
SnmpSvcGetEnterpriseOID
SnmpUtilVarBindFree
SnmpUtilOidCpy
SetupGetFieldCount
SetupQueueRenameW
CM_Get_Device_Interface_List_SizeW
CM_Get_Depth
CM_Register_Device_Interface_ExA
SetupInitializeFileLogA
RtmHoldDestination
MgmGetNextMfe
RtmGetListEnumRoutes
MgmGetProtocolOnInterface
CertFindSubjectInCTL
CryptMsgCountersignEncoded
CertEnumSystemStoreLocation
CertOpenSystemStoreW
RouterLogEventStringW
RouterLogEventDataW
LogErrorW
TracePutsExA
MprSetupProtocolFree
LogEventW
PeerGroupDeleteRecord
PeerGroupUnregisterEvent
PeerGroupRegisterEvent
PeerIdentityGetFriendlyName
AuthzFreeAuditEvent
AuthzUninstallSecurityEventSource
AuthzInitializeContextFromSid
AuthzInitializeContextFromAuthzContext
AuthzReportSecurityEventFromParams
AuthziLogAuditEvent
AuthzFreeResourceManager
AuthzRegisterSecurityEventSource
AuthzCachedAccessCheck
AuthzEnumerateSecurityEventSources
AuthzInitializeResourceManager
IdentifyMIMEType
DitherTo8
CFLmTvsGYhngrw
GqovlWwuB
ISQqPWkZPNwXwWHCE
JEfPdNsbSQ
OtPOjtN
TBJEktGD
TMPNtPIarvgEJz
TprMbWFZoUiuWussU
UWtUlYe
WACNR
ZvovFw
dZaPuBfHhrvrRzZ
fEOVQPBWs
iBMfWdq
jfsnjWhFlSsrKTTPP
vEyzhpwvVbGNrds
xfYciAKNGbPExSYkzdP
xjEqlCCyVAUhcspO
zeIwVr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStartupInfoW
GetFileType
GetStdHandle
SetLastError
GetModuleHandleExW
ExitProcess
IsProcessorFeaturePresent
RtlUnwind
GetCurrentThreadId
GetCommandLineA
EncodePointer
GetProcAddress
LoadLibraryW
FreeLibrary
lstrcpynW
GlobalFree
LoadLibraryA
GetModuleHandleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetFileSize
LockResource
SizeofResource
LoadResource
FindResourceW
FindResourceExW
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
WriteFile
GetModuleFileNameW
LoadLibraryExW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
HeapReAlloc
CloseHandle
CreateFileW
MultiByteToWideChar
DeleteCriticalSection
DecodePointer
HeapSize
GetLastError
RaiseException
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
Sleep
AdvancedDocumentPropertiesW
AddPortA
EnumPrintProcessorsA
SHGetSpecialFolderPathW
ShellExecuteA
SHBrowseForFolderA
SysAllocStringLen
SysAllocStringByteLen
VarBstrCmp
SysStringByteLen
SysFreeString
SysAllocString
PrintDlgW
ReplaceTextW
GetOpenFileNameW
PageSetupDlgW
RegUnLoadKeyA
OpenSCManagerW
OpenServiceW
AddAccessDeniedObjectAce
RegEnumKeyExA
LookupPrivilegeValueA
RegQueryMultipleValuesA
StartServiceW
ObjectCloseAuditAlarmA
RegSetKeySecurity
GetLengthSid
ClearEventLogW
SetPrivateObjectSecurity
LogonUserW
WinHttpReadData
WinHttpSendRequest
WinHttpTimeToSystemTime
WinHttpGetProxyForUrl
WinHttpCreateUrl
WinHttpSetStatusCallback
AuthzFreeHandle
AuthzCachedAccessCheck
AuthzUnregisterSecurityEventSource
AuthzFreeAuditEvent
AuthzInitializeResourceManager
AuthzInitializeContextFromSid
AuthzAccessCheck
AuthzRegisterSecurityEventSource
AuthzFreeResourceManager
AuthziLogAuditEvent
AuthzFreeContext
AuthzReportSecurityEventFromParams
AuthzGetInformationFromContext
AuthzInitializeContextFromAuthzContext
AuthzUninstallSecurityEventSource
PdhGetFormattedCounterArrayA
PdhEnumMachinesW
PdhMakeCounterPathA
GetFileVersionInfoW
VerQueryValueA
VerFindFileA
GetFileVersionInfoSizeW
VerFindFileW
GetFileVersionInfoSizeA
VerQueryValueW
VerInstallFileA
VerInstallFileW
GetFileVersionInfoA
CreateStdAccessibleProxyA
AccessibleObjectFromEvent
ObjectFromLresult
CreateStdAccessibleProxyW
GetStateTextA
AccessibleChildren
AccessibleObjectFromPoint
WindowFromAccessibleObject
AccessibleObjectFromWindow
GetRoleTextA
GetOleaccVersionInfo
OleUIInsertObjectW
ord6
OleUIEditLinksW
OleUIBusyW
OleUIConvertW
ord1
OleUIChangeSourceW
ord4
ord7
ord2
ord3
OleUIChangeIconW
OleUIAddVerbMenuW
OleUIUpdateLinksW
ord386
_TrackMouseEvent
ImageList_SetIconSize
ImageList_Read
UninitializeFlatSB
RouterGetErrorStringW
TraceVprintfExA
RouterLogEventW
GetImageConfigInformation
BindImageEx
SymEnumerateSymbols
MakeSureDirectoryPathExists
SymGetModuleBase
MapAndLoad
UpdateDebugInfoFile
ImageDirectoryEntryToData
BindImage
SymUnDName
SymUnloadModule
MapFileAndCheckSumW
ImageGetCertificateHeader
GetTimestampForLoadedLibrary
ImmGetCandidateWindow
ImmGetRegisterWordStyleA
ImmEnumRegisterWordW
ImmConfigureIMEA
ImmUnregisterWordW
ImmGetRegisterWordStyleW
ImmIsUIMessageW
ImmSimulateHotKey
ImmGetOpenStatus
ImmSetCompositionStringA
ImmDestroyContext
ImmGetIMEFileNameA
ImmRegisterWordA
ImmAssociateContext
FaxStartPrintJobW
FaxSetGlobalRoutingInfoW
FaxSendDocumentForBroadcastW
FaxGetPortW
FaxSetRoutingInfoA
SnmpUtilAsnAnyFree
SnmpUtilUTF8ToUnicode
SnmpUtilAsnAnyCpy
SnmpSvcAddrIsIpx
SnmpUtilOidAppend
SnmpUtilUnicodeToUTF8
SnmpUtilOctetsNCmp
SnmpUtilMemAlloc
SnmpTfxOpen
SnmpSvcSetLogLevel
CreateDDrawSurfaceOnDIB
ComputeInvCMAP
CreateMIMEMap
DitherTo8
GetMaxMIMEIDBytes
SniffStream
IdentifyMIMEType
DecodeImage
RtmGetDestInfo
RtmReadAddressFamilyConfig
RtmReleaseRoutes
RtmGetExactMatchRoute
RtmReleaseEntityInfo
RtmWriteAddressFamilyConfig
RtmCreateDestEnum
RtmAddRoute
RtmAddNextHop
RtmRegisterClient
RtmGetEntityInfo
RtmBlockSetRouteEnable
RtmCreateRouteList
RtmLockNextHop
UpdatePerfNameFilesA
UnloadPerfCounterTextStringsA
UpdatePerfNameFilesW
MprAdminPortDisconnect
MprAdminBufferFree
MprConfigServerGetInfo
MprAdminUserReadProfFlags
MprAdminPortEnum
MprInfoDelete
MprInfoCreate
MprAdminUserServerConnect
MprConfigTransportEnum
MprAdminUserGetInfo
CloseThemeData
DrawThemeIcon
CryptGetDefaultOIDDllList
CertGetCRLContextProperty
CertCreateCertificateChainEngine
PFXIsPFXBlob
CryptFindCertificateKeyProvInfo
CertVerifyRevocation
CryptEnumOIDInfo
CryptEncodeObjectEx
CryptSignAndEncodeCertificate
CertEnumSystemStoreLocation
CryptSetKeyIdentifierProperty
AFRPrcwtsTrHdy
DxqPjbLMC
EBRRi
GEmSfzGIJrIjbQl
GbdvVZRlYcSaawQ
GdGAeldzJAWECniyU
JmbObGCmmkwXlYUi
KXOzg
KvQwznHeEtmk
LQJnSnwfxqCLJR
LbzYDcwRRtbkAZnv
MOmArbjbGOHqxLVmmp
MwFIgCmxDCmtgtlIIFef
OcjTYQZNIYuEMjzHfEPP
PebiQtLgqROlUijWZWd
PfzfSMxNJdk
RAWInENOUrbUObAe
RrNOe
SISTLBgk
SuusyaWPczsPfRE
TefVmlyBDDDiZAr
WAYvutqKwUTeLEUT
YZxGcTlHeIBNPpKxh
ZYunfQrLadAvURZuw
ZmQlwevlcZB
aTTtVGG
aWDUhS
auDZuIup
bilZtqdUODTLam
cVrMxnaLIS
cmcFvqJ
drDWNUfGb
eqqgpBcm
fVDWeM
gZNDZDvctIZ
hCfLhpMPlEB
hiDqkJWWgHXdXRvBD
iwJKwBodhKsBfgWDav
kDiSogyBxZbXTbFaE
kvOgSEQcn
qUAfnNwTZOnYgGMLF
rJfWBdVrXr
vcoovAm
wsJDLejvGh
xoMtuwqBqITaXI
yVNBcNxX
zWGLbKHjFl
znEHtEHRGAjXFeD
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleW
GetModuleFileNameA
QueryPerformanceCounter
GetStartupInfoW
GetFileType
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameW
WriteFile
GetStdHandle
GetProcAddress
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
TlsFree
DeleteCriticalSection
DecodePointer
HeapSize
VirtualAlloc
GetLastError
RaiseException
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
GetModuleHandleExW
ExitProcess
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetCurrentProcessId
IsProcessorFeaturePresent
EncodePointer
VirtualQuery
VirtualProtect
GetSystemInfo
WideCharToMultiByte
GlobalAlloc
lstrcpynW
GlobalFree
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
wsprintfW
SetDIBColorTable
GetDCPenColor
GetClipRgn
LineDDA
DPtoLP
SetBoundsRect
SetROP2
GetBitmapDimensionEx
DeletePrintProvidorW
DeleteMonitorA
DeletePrinter
GetJobW
DeleteFormW
AddMonitorA
AddFormA
VariantCopy
VarCmp
VariantClear
SysAllocString
GetOpenFileNameA
ChooseColorA
GetFileTitleW
FindTextW
ReplaceTextW
PageSetupDlgW
AccessibleChildren
GetStateTextW
AccessibleObjectFromEvent
AccessibleObjectFromPoint
PeerGraphGetNextItem
PeerGraphShutdown
PeerGraphGetNodeInfo
PeerGraphCreate
PeerGraphSetNodeAttributes
PeerGraphGetProperties
PeerGraphAddRecord
ResUtilFindSzProperty
ResUtilGetPropertyFormats
ResUtilEnumProperties
GetMaxMIMEIDBytes
IdentifyMIMEType
DecodeImage
DitherTo8
CreateMIMEMap
ComputeInvCMAP
CreateDDrawSurfaceOnDIB
SniffStream
AuthzInitializeContextFromSid
AuthzReportSecurityEventFromParams
AuthzInitializeContextFromToken
AuthziLogAuditEvent
AuthzFreeResourceManager
AuthzRegisterSecurityEventSource
AuthzInstallSecurityEventSource
AuthzFreeAuditEvent
AuthzEnumerateSecurityEventSources
AuthzCachedAccessCheck
AuthzUnregisterSecurityEventSource
AuthzUninstallSecurityEventSource
AuthzInitializeResourceManager
EnumerateLoadedModules
UpdateDebugInfoFileEx
SymGetModuleBase
UnDecorateSymbolName
SymSetOptions
MapFileAndCheckSumW
ReadGlobalPwrPolicy
IsPwrSuspendAllowed
GetActivePwrScheme
SetSuspendState
GetDeviceDriverBaseNameW
GetProcessMemoryInfo
GetDeviceDriverFileNameW
GetWsChanges
GetPerformanceInfo
GetModuleBaseNameA
GetProcessImageFileNameW
GetProcessImageFileNameA
GetMappedFileNameW
EnumProcessModules
QueryWorkingSet
WinHttpSetTimeouts
WinHttpReceiveResponse
MprAdminServerConnect
MprAdminInterfaceDisconnect
MprConfigGetFriendlyName
MprAdminIsDomainRasServer
MprAdminIsServiceRunning
MprConfigInterfaceGetHandle
MprAdminInterfaceCreate
MprAdminInterfaceDelete
MprConfigTransportDelete
MprAdminSendUserMessage
MprAdminInterfaceEnum
MprInfoBlockSet
MprAdminMIBEntrySet
MprAdminConnectionGetInfo
FaxAccessCheck
FaxCompleteJobParamsA
FaxSetPortA
FaxEnumPortsW
FaxEnumGlobalRoutingInfoA
FaxPrintCoverPageW
FaxGetPageData
FaxGetLoggingCategoriesW
FaxSetLoggingCategoriesA
FaxGetJobW
SetupDiBuildDriverInfoList
CM_Create_DevNode_ExW
CM_Get_Hardware_Profile_InfoW
CM_Get_DevNode_Custom_PropertyW
SetupGetBackupInformationW
SetupDiSetSelectedDriverA
SetupScanFileQueue
SetupDiGetClassDescriptionExA
CM_Next_Range
SetupDiSetDeviceInstallParamsW
SetupDiGetClassRegistryPropertyW
ADtkjuaWTpNpwIiG
AvYbqQyEGmSz
BFxRrThoPor
DZBrGLsAsdZ
DiwaWszezlRPG
GPAzsaXTBPg
GssMSuQX
IavWeJRm
JuZWerGtgf
KcjnYeflvGLf
NrTnKjWWQlUtUZUVNIVy
QBUZSDQathBJGn
QFDxQKBtTutgi
QxcligiOPGBkLAtSVXfl
TOCbMHNEnK
UNkMIPlpDYcR
UlEAtDsYpglvtHKLa
VniZZGeVfkqanJpyAem
VzUNnRnKmrifG
XWopFwFXy
XaszAFpDsQriyhcGeb
YXBcKDffMgMVuawYtU
YjUncqmBxc
YsBtYxJITvkhZddhp
ZREJNn
ZtsePkLYBRWdkBTXAq
aqiSJUQKYibXeCykBi
bLfzHAqvhPCmuPNdRin
bstFV
clcZhkpmpEtAGpK
dQDWN
fXqngGkaYrOLjtmbmpK
flIOH
fxFEePUcKis
hNjWtCuQlJjtgfGN
hkhlJclueNF
llIneGKTlcjNIlNbFjmh
pXfmIDhRvGLOgPCXD
poaWW
qVUEpoSiyc
rmpujkbscxeKsAVryFL
tXQexhzHcYP
uULDl
viBOi
yVGBKrsomMgmQwajAz
yqGXiMB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ