Solara.zip
- SHA256 1584752709b6b0c5cd83ed8d075a29915abadd32ffdd7c8974f45bb45e7aac40
Password
github
Overview
overview
10Static
static
3Solara.zip
windows11-21h2-x64
1Password - github.txt
windows11-21h2-x64
3Solara/Deb...on.dll
windows11-21h2-x64
1Solara/Deb...er.ini
windows11-21h2-x64
3Solara/Deb...PF.tmp
windows11-21h2-x64
3Solara/Deb...PT.tmp
windows11-21h2-x64
3Solara/Deb...er.dll
windows11-21h2-x64
1Solara/Deb...nt.log
windows11-21h2-x64
3Solara/Deb...ce.dll
windows11-21h2-x64
1Solara/Debug/main.ini
windows11-21h2-x64
3Solara/Debug/ukm_db
windows11-21h2-x64
1Solara/Pac...in.xml
windows11-21h2-x64
1Solara/Pac...ce.dll
windows11-21h2-x64
1Solara/Pac...ls.xml
windows11-21h2-x64
1Solara/Solara.exe
windows11-21h2-x64
10Solara/acc...pl.dll
windows11-21h2-x64
1Solara/buf...ed.xml
windows11-21h2-x64
1Solara/buf...py.xml
windows11-21h2-x64
1Solara/buf...de.xml
windows11-21h2-x64
1Solara/buf...al.xml
windows11-21h2-x64
1Solara/buf...up.xml
windows11-21h2-x64
1Solara/buf...na.xml
windows11-21h2-x64
1Solara/oleprn.dll
windows11-21h2-x64
1Solara/wwancfg.dll
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Solara.zip
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
Password - github.txt
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
600 seconds
Behavioral task
behavioral3
Sample
Solara/Debug/Addition.dll
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral4
Sample
Solara/Debug/Autoupdater.ini
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
600 seconds
Behavioral task
behavioral5
Sample
Solara/Debug/DebugPPF.tmp
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
600 seconds
Behavioral task
behavioral6
Sample
Solara/Debug/DebugPPT.tmp
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
600 seconds
Behavioral task
behavioral7
Sample
Solara/Debug/Helper.dll
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral8
Sample
Solara/Debug/Management.log
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
600 seconds
Behavioral task
behavioral9
Sample
Solara/Debug/Resource.dll
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral10
Sample
Solara/Debug/main.ini
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
600 seconds
Behavioral task
behavioral11
Sample
Solara/Debug/ukm_db
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral12
Sample
Solara/Packaged/Main.xml
Resource
win11-20240802-en
windows11-21h2-x64
2 signatures
600 seconds
Behavioral task
behavioral13
Sample
Solara/Packaged/Resource.dll
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral14
Sample
Solara/Packaged/Utils.xml
Resource
win11-20240802-en
windows11-21h2-x64
2 signatures
600 seconds
Behavioral task
behavioral15
Sample
Solara/Solara.exe
Resource
win11-20240802-en
windows11-21h2-x64
5 signatures
600 seconds
Behavioral task
behavioral16
Sample
Solara/accessibilitycpl.dll
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral17
Sample
Solara/buffed/chidedOcurred.xml
Resource
win11-20240802-en
windows11-21h2-x64
2 signatures
600 seconds
Behavioral task
behavioral18
Sample
Solara/buffed/decineSatoriiCoppy.xml
Resource
win11-20240802-en
windows11-21h2-x64
2 signatures
600 seconds
Behavioral task
behavioral19
Sample
Solara/buffed/ecocide.xml
Resource
win11-20240802-en
windows11-21h2-x64
2 signatures
600 seconds
Behavioral task
behavioral20
Sample
Solara/buffed/gheddaOptimal.xml
Resource
win11-20240802-en
windows11-21h2-x64
2 signatures
600 seconds
Behavioral task
behavioral21
Sample
Solara/buffed/pickup.xml
Resource
win11-20240802-en
windows11-21h2-x64
2 signatures
600 seconds
Behavioral task
behavioral22
Sample
Solara/buffed/pictaviSina.xml
Resource
win11-20240802-en
windows11-21h2-x64
2 signatures
600 seconds
Behavioral task
behavioral23
Sample
Solara/oleprn.dll
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral24
Sample
Solara/wwancfg.dll
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
600 seconds
General
- Target Solara.zip
- Size 11.4MB
- Sample240829-wpnbcawcmp
- SHA256 1584752709b6b0c5cd83ed8d075a29915abadd32ffdd7c8974f45bb45e7aac40
- MD5 6aceff5f2f960a504898c91e2c13f907
- SHA1 4dfe9afc90bf8f1bf726b1f0be8e5120a8f390d6
- SHA512 079807d02985c5261548654f7318f6fb67ba78c790e9fdc3a77c1c02ba673fc56b30a70a55b40c8a824467e5d36d35c7fc39c76f739328a244b51137caf9f448
- SSDEEP 196608:+HWmlHe7xXtMZnwxG4wmtzfS33gnvfAe48WQ17bUGlgriBrxhNT/g3dbkHU5DBhn:+H7gx90ywmq3gvGQ1HUPri1xktbsUjV
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/Solara/Solara.exe unpack001/Solara/accessibilitycpl.dll unpack001/Solara/oleprn.dll unpack001/Solara/wwancfg.dll
File Explorer
-
Solara.zip.zip 11.4MB
-
Password - github.txt17B
-
Solara/Debug/Addition.dll30KB
-
Solara/Debug/Autoupdater.ini5KB
-
Solara/Debug/DebugPPF.tmp11KB
-
Solara/Debug/DebugPPT.tmp11KB
-
Solara/Debug/Helper.dll189B
-
Solara/Debug/Management.log8KB
-
Solara/Debug/Resource.dll10.7MB
-
Solara/Debug/main.ini4KB
-
Solara/Debug/ukm_db96KB
-
Solara/Packaged/Main.ini.xml 1KB
-
Solara/Packaged/Resource.dll189B
-
Solara/Packaged/Utils.dll.xml 1KB
-
Solara/Solara.exe.exe 433KB
-
Solara/accessibilitycpl.dll.dll 274KB
-
Solara/buffed/chidedOcurred.xml.xml 14KB
-
Solara/buffed/decineSatoriiCoppy.xml.xml 582B
-
Solara/buffed/ecocide.xml.xml 12KB
-
Solara/buffed/gheddaOptimal.xml.xml 7KB
-
Solara/buffed/pickup.xml.xml 4KB
-
Solara/buffed/pictaviSina.xml.xml 292B
-
Solara/oleprn.dll.dll 148KB
-
Solara/wwancfg.dll.dll 103KB
Password - github.txt
- SHA256 4ae8508642027b5e5373a40b38da75c2a36ee3e99f693650c0803168533dbbc7
- MD5 37681049ce7c84867108bfb4216689be
- SHA1 f95e814713dfe83170513a6014aec373c9c0d006
- SHA512 0b46362b0ae7afd192dee66e0fac2f213f2d93603adf9c2325eef23a22076f7eeccb2515313660881ebba1058fa5762f51eab143fb92c0c7e05b103a52d1b9fc
- MD5 SHA1 SHA512
Solara/Debug/Addition.dll
- SHA256 8be1f5581437b6f5ba48705e8956c8bc0765bbd1d6053242640c75bd94048aa9
- MD5 f22e849a370cdf127f48beab596bdd81
- SHA1 fb1da47c7a246f2cda7f7686a468efafd9933b1e
- SHA512 6ded81fe4d4db69586d74fdb425c4fc8c092508e7e0b49eb141a9045abf40626d14659fa6237a3920e58571ca7acf4911cdf03c4307fd89b6dc5e54172afbc14
- SSDEEP 768:Fol18SuOO3bBAughXjNPQsXVjWuu7jqWdTS2gS:er6tAugVjN4sXJYjqWdm2V
- MD5 SHA1 SHA512 SSDEEP
Solara/Debug/Autoupdater.ini
- SHA256 dcae62d049c4dd496effab6f02220bc270c6c098ebb55a5a6e55fbafad2974d2
- MD5 f78b8f3d265b4e9a706ed0aae70bdf9c
- SHA1 6d73ad3954fd8fda80911071efca1910fd2d0a3d
- SHA512 c44887c08d1239969aaf9934921f1a7341b87faded169136fcc0539d62de3104ecec0e3ac7a28eb3135cb449f58310b49f868963b64b920210d1c55104e7e7cb
- SSDEEP 48:K3Px9Vz69T0oXIGXTWGXsP9JEX98TNx9P8k9zZ8G958d8lx9Vz69T0oXIGXTWGXe:FvTlEGvTlUOy
- MD5 SHA1 SHA512 SSDEEP
Solara/Debug/DebugPPF.tmp
- SHA256 63909409d9c79950289701c4a58605ea7fcd30703163fce0b4ac81204f0b3cca
- MD5 b1e68fabd5c19aaa21de6351554aae2e
- SHA1 66e7cf5d041a6ed9252ee4f6104ec0abb57d60b8
- SHA512 6e080f64d583e29a503282022ba587eb88903e2cf2bf943f9f9849fedf7f25dbfdeb02fae2803f03acf18b7a2bb37be1a1834e3b5ef7ef9098cfb0ee80a410dd
- SSDEEP 192:fXBY6p0nsAXXOZfZz2zgJNGayrKy8pJErK7EuKr3eEohK11pS:PcnFneZz2zE/+rK7EuJ6S
- MD5 SHA1 SHA512 SSDEEP
Solara/Debug/DebugPPT.tmp
- SHA256 9f2b02ba814c2975a7b6ed5aa03345046a9c9d3036481a8a109b132a951e82a0
- MD5 4969578a5fd8d113ab7783812849c1ed
- SHA1 580f84362a74337b2ed25bd58700e9a002e51bc9
- SHA512 49dc150be750ff0a5b03fbe384debcc136d6dad513fa1c6284469de8e8aed1b865b2bd8271937030818094bcc5358dde6e146e3c784dd88fa9681a84c7a557ef
- SSDEEP 192:W7F8knwe/KZztz2XFuUpcWOEai+S7UeAJo9pDWhuDyG/WE8cHtENQmfsB:WNn1y1p2XMUpcWb+qUerShuDl+8HerfQ
- MD5 SHA1 SHA512 SSDEEP
Solara/Debug/Helper.dll
- SHA256 6b325cadd8992d998c4fbc8ed56079c2850b68ea2d38432d51c26ce82b0a5419
- MD5 9bb9aba5dd893bbccfa45e2d75d55d26
- SHA1 5714796513341ac3159a6a3c23d4769209063d35
- SHA512 f57df9a4a02bd17772acb3ac1a0d961c53f6940600b58834ae38c198a98ae651a21b382450b267aeffbca4ab262668ae471a78ed99bf9dfa414c1316056a289b
- MD5 SHA1 SHA512
Solara/Debug/Management.log
- SHA256 4dd051de9b04902fc59d411b1c27c42007cacca4ea52e88d71c897cad1d990cc
- MD5 ff765d6581fe6568aaae19de239b2e7a
- SHA1 78b09b0ce2e59ce87f65251ea903842c1c77046a
- SHA512 8fa7c766fc1ac48408d964eb9844f9c4a2fb3e33357e736230024788ec71cb3c338397e16f8e556bbcaafd83c58f3af6a55ceaa9daff290b0e687093e5c97a2e
- SSDEEP 192:+jfkNaok8wITITp8dNOgNH34lxeDKOgWNh0ctcoAd8dq5XrOGB3Wr:UkNaz8wWWp8dMA34lbLsq5Xqq3a
- MD5 SHA1 SHA512 SSDEEP
Solara/Debug/Resource.dll
- SHA256 883aefb081a1f9ef974ceb16e12c215e92fee13531c052279404bd11b2f8e479
- MD5 641dadbb3f03938da99bf7c6c4cc482f
- SHA1 b21bdb69a17642ade8e62fcbd779ff1bc89ea809
- SHA512 7aea5f0db9b261a17801124d6eef0df2d3ada4a6f624c8f4f2ee519a61171a3f06de9032493e3309a1a982fd1218613dde73a942942df2a8ec367e7f66a531f5
- SSDEEP 196608:8B4DNtjVoWhIdAXplnpnh4uIKZ2K245peMKU3lRM9RVIO+QvSNG2uM+XGE4:04vWGIun1GKZ/2aZKU3lRvO+QvQgGP
- MD5 SHA1 SHA512 SSDEEP
Solara/Debug/main.ini
- SHA256 d3d79eda930253d1ad388f60a56775f7d6bff80ce5a4e07c812d7d338fc93593
- MD5 d2e799c6b2467a0a4aeb0cba508e8a30
- SHA1 349e50e830cca26b03a0e32bac1f9045a72eb406
- SHA512 f1d14875a6379b450eb5dc2513a1791ec65a6fb237db94a74621c70ca5d579428b7cded35ce3bece884faaabca4f0705de73fb5cc8b2d60be995b2be66cb20c2
- SSDEEP 96:38acVNxLPdLB3fhvKSEnQRkB6Ip1ImmoM:38xxzd93fASEnNIy1ImmoM
- MD5 SHA1 SHA512 SSDEEP
Solara/Debug/ukm_db
- SHA256 502483b0d0d9ba2d0c50565c296cb685c9098cded6ffeb74f924eca85af11443
- MD5 98472e91a63229be8bf542ef28c56111
- SHA1 65c3b300e972704246294d1b822d01a0eba36349
- SHA512 424e7ebb1a8d97da12fffec76a4dbaa47b1bbb83974e2099a05cd89b7f9256f05439c3f63162bbb70deda86405afc9ee5a8952c428ded13f33c77d6676b4898c
- SSDEEP 1536:ABvhM6JBRI3kYiZYVGVuA5F0tjogInznsHK+WtuRTvWXNZ1VMUP9H:SvhVBR2kYiNVuA5WjogInzMWtuRTvWXP
- MD5 SHA1 SHA512 SSDEEP
Solara/Packaged/Main.ini
- SHA256 b975c9251ef7394dcc69f49e54dc5aa5e8df32f9b5e8c687484ddd840eb94d20
- MD5 7b53ebd64e5781e02eaefb6739a6b556
- SHA1 d5332b200cf5dcea0419afdb66a15d89b9eb619f
- SHA512 c4a25c07e19760547e91818ba6e9ec3fe89206c29429668731c7563b7407cb56d8c0adca519bf96dc82a1631e82cfe63b68439cad4102ea2a1df438bac8400fd
- MD5 SHA1 SHA512
Solara/Packaged/Resource.dll
- SHA256 a9661f89b8d957f4e71cbe1ba0342a39e5b50a1d80d974e2e1b349a273967f1b
- MD5 4427aeee68321d0f4d7befa74e669f83
- SHA1 4670003762a1c217c9e8ea48fcc53f2871a7c341
- SHA512 9d9156aa8fdebf19363fed2edb82235642c8c20549369470e44fdc0db41324e2160968fd7dd43eecce1ce3da9c03dd05cdefc8d903a9d0394f5ca9a73f5c5fa3
- MD5 SHA1 SHA512
Solara/Packaged/Utils.dll
- SHA256 b7b8b412ab1e4f32da8a7cd42aeaa6e7d8d340cf14977d3e87f7d8f5eb689b0f
- MD5 73e051427246dd4ca45935b1a4bd7e2d
- SHA1 7216f05041252f1c3a9d84aacdf84ef62f1a1045
- SHA512 3fc10dea91962244389214d189c141466f5630e99b01af5761738ce884df14050cd08a43802dc45bbe9117290c34143b85a75694b6301954b51972180dca1e36
- MD5 SHA1 SHA512
Solara/Solara.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 cb6b38f445f334599088702569ed9c9d4b0a54c7c88097a16ec6e58055517a3c
- MD5 511f208e7b396defb7dce554e5d43ea4
- SHA1 890ab67abca71bd4785204cede30a39d5a168aef
- SHA512 32b4cdbc0c5b4205e0ec02a38dc5b6086b35388ec76aadfc6565497c2466bca1e4ecc601a581856078c77719131e6c19e867e59c038605e3a430dfc1e8f13ecd
- SSDEEP 12288:CCouY2+3Q1uRGysHZR0Ea6uatj8vxn8DDXOSb:vc1Q1pj5eEa6uS8ZnWX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
github
Minor OS version
0
Major OS version
4
Entry point
449118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\pfrscj2dd41tb\obj\Re\ease\fsB.pdb
mscoree
_CorExeMain
Name
.text
Size
431KB
Virtual Size
430KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
578B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Solara/accessibilitycpl.dll
- IMPHASH 164af912471cbe0c60259e8ab08b3a77
- SHA256 a28ef80b49f85f95f929d5c40245b05f95d58bb672764c3539ce69098db9bcc2
- MD5 f316026e08074300cbdcd8453bfd3116
- SHA1 c7494558e98e42930b83349ea816963147242fba
- SHA512 cb205111f99cdd4ab930644dfc910f82015175c452be330dcdbee3cff3a07234bf6e77c5967a33fb02ec0bdd993b96b19964160a5511dcfa684a77508aede047
- SSDEEP 6144:2f/fsr6htcMmmdxeAXXDoDGNIPTympgJp3P:O/fsr6hCtUxeLymW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
github
Minor OS version
0
Major OS version
10
Entry point
191904
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
AccessibilityCpl.pdb
msvcrt
wcsspn
_vsnprintf_s
_wcslwr_s
__CxxFrameHandler3
wcscspn
wcsrchr
_ltow_s
_vsnwprintf
memcpy
memcmp
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
memset
_onexit
__dllonexit
_unlock
_lock
_initterm
_amsg_exit
_XcptFilter
calloc
wcsstr
_wcsicmp
__C_specific_handler
malloc
free
vswprintf_s
_vscwprintf
memmove_s
_itow_s
memcpy_s
_wtoi
wcschr
wcscmp
api-ms-win-core-heap-l1-1-0
HeapFree
GetProcessHeap
HeapReAlloc
HeapSize
HeapDestroy
HeapAlloc
api-ms-win-eventing-classicprovider-l1-1-0
UnregisterTraceGuids
GetTraceLoggerHandle
TraceMessage
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
api-ms-win-core-libraryloader-l1-2-0
LoadStringW
SizeofResource
GetModuleHandleW
FreeLibrary
DisableThreadLibraryCalls
GetModuleFileNameA
GetProcAddress
FindResourceExW
LoadResource
LockResource
GetModuleHandleExW
api-ms-win-eventing-provider-l1-1-0
EventSetInformation
EventWriteTransfer
EventUnregister
EventRegister
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
api-ms-win-core-com-l1-1-0
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CreateStreamOnHGlobal
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
RaiseException
UnhandledExceptionFilter
GetLastError
SetLastError
oleaut32
VariantClear
SysAllocString
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-registry-l1-1-0
RegQueryValueExW
RegGetValueW
RegCloseKey
RegLoadMUIStringW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
api-ms-win-core-localization-l1-2-0
FormatMessageW
GetLocaleInfoW
GetUserDefaultLCID
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
DebugBreak
OutputDebugStringW
api-ms-win-core-synch-l1-1-0
ReleaseSemaphore
ReleaseMutex
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObjectEx
CreateMutexExW
CreateSemaphoreExW
OpenSemaphoreW
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
api-ms-win-core-processenvironment-l1-1-0
ExpandEnvironmentStringsW
api-ms-win-core-synch-l1-2-0
InitOnceBeginInitialize
InitOnceComplete
Sleep
api-ms-win-core-heap-l2-1-0
GlobalAlloc
GlobalFree
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
MultiByteToWideChar
api-ms-win-core-libraryloader-l1-2-1
LoadLibraryW
api-ms-win-core-rtlsupport-l1-1-0
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetTickCount
ntdll
EtwEventWriteTransfer
EtwLogTraceEvent
WinSqmAddToStream
WinSqmIncrementDWORD
WinSqmSetDWORD
WinSqmIsOptedIn
kernel32
GetFileAttributesW
DeleteFileW
CompareStringOrdinal
LoadLibraryExW
OpenMutexW
OpenJobObjectW
IsProcessInJob
OOBEComplete
GetThreadUILanguage
GetProcessMitigationPolicy
LocalAlloc
ReleaseSRWLockShared
DeleteProcThreadAttributeList
CreateThreadpoolTimer
InitializeCriticalSectionEx
AcquireSRWLockShared
AcquireSRWLockExclusive
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
GetModuleFileNameW
DeactivateActCtx
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
LocalFree
ActivateActCtx
ReleaseActCtx
CreateActCtxW
ReleaseSRWLockExclusive
CreateProcessW
GetAtomNameW
GlobalLock
GlobalUnlock
K32EnumProcesses
ProcessIdToSessionId
OpenProcess
K32EnumProcessModules
K32GetModuleBaseNameW
shlwapi
SHStrDupW
ord156
ord174
ord24
ord176
ord514
ord256
ord437
ord172
ord278
ord158
ord204
ord219
ord199
ord618
shell32
ord25
SHParseDisplayName
SHGetStockIconInfo
ShellExecuteExW
ShellExecuteW
ord155
ord18
SHBindToObject
ole32
CoTaskMemAlloc
CoGetObject
user32
GetWindowLongPtrW
GetFocus
DestroyIcon
SetTimer
DestroyWindow
SystemParametersInfoW
UnregisterClassA
KillTimer
SendMessageW
DefWindowProcW
SendInput
GetKeyState
GetShellWindow
GetWindowThreadProcessId
GetUserObjectInformationW
GetThreadDesktop
SetDesktopColorTransform
SendNotifyMessageW
dui70
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z
?ClickDefaultButton@XProvider@DirectUI@@UEAAHXZ
?ForceThemeChange@XProvider@DirectUI@@UEAAJ_K_J@Z
?GetHostedElementID@XProvider@DirectUI@@UEAAJPEAG@Z
?FindElementWithShortcutAndDoDefaultAction@XProvider@DirectUI@@UEAAHGH@Z
?CanSetFocus@XProvider@DirectUI@@UEAAJPEA_N@Z
?Navigate@XProvider@DirectUI@@UEAAJHPEA_N@Z
?SetFocus@XProvider@DirectUI@@UEAAJPEAVElement@2@@Z
?IsDescendent@XProvider@DirectUI@@UEAAJPEAVElement@2@PEA_N@Z
?GetDesiredSize@XProvider@DirectUI@@UEAAJHHPEAUtagSIZE@@@Z
?SetParameter@XProvider@DirectUI@@UEAAJAEBU_GUID@@PEAX@Z
?AddRef@XProvider@DirectUI@@UEAAKXZ
?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ
?SetDefaultButtonTracking@XProvider@DirectUI@@UEAAJ_N@Z
?SetHandleEnterKey@XProvider@DirectUI@@IEAAX_N@Z
?CreateDUI@XProvider@DirectUI@@UEAAJPEAVIXElementCP@2@PEAPEAUHWND__@@@Z
?GetRoot@XProvider@DirectUI@@IEAAPEAVElement@2@XZ
?Initialize@XProvider@DirectUI@@QEAAJPEAVElement@2@PEAVIXProviderCP@2@@Z
?Create@XResourceProvider@DirectUI@@SAJPEAUHINSTANCE__@@PEBG11PEAPEAV12@@Z
?QueryInterface@XProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
??1XProvider@DirectUI@@UEAA@XZ
??0XProvider@DirectUI@@QEAA@XZ
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?GetClassInfoPtr@Element@DirectUI@@SAPEAUIClassInfo@2@XZ
?Register@Element@DirectUI@@SAJXZ
?GetAtomZero@Value@DirectUI@@SAPEAV12@XZ
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@PEBUPropertyInfo@2@HPEAUUpdateCache@2@@Z
?GetStringNull@Value@DirectUI@@SAPEAV12@XZ
?SetButtonClassAcceptsEnterKey@XProvider@DirectUI@@UEAAJ_N@Z
?CreateXBaby@XProvider@DirectUI@@UEAAJPEAVIXElementCP@2@PEAUHWND__@@PEAVElement@2@PEAKPEAPEAUIXBaby@2@@Z
InitProcessPriv
InitThread
?GetUnset@Value@DirectUI@@SAPEAV12@XZ
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@P6APEBUPropertyInfo@2@XZHPEAUUpdateCache@2@@Z
?CustomProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetContentString@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
?GetClassInfoPtr@TouchSwitch@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetOnText@TouchSwitch@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
?GetOffText@TouchSwitch@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
?GetToggleValue@TouchSwitch@DirectUI@@QEAAHXZ
?SliderUpdated@TouchSlider@DirectUI@@SA?AVUID@@XZ
?RemoveListener@Element@DirectUI@@QEAAXPEAUIElementListener@2@@Z
?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z
?BackgroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?ForegroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetAccName@Element@DirectUI@@QEAAJPEBG@Z
??1IDataEngine@DirectUI@@UEAA@XZ
??0IDataEngine@DirectUI@@QEAA@XZ
??1IDataEntry@DirectUI@@UEAA@XZ
??0IDataEntry@DirectUI@@QEAA@XZ
?GetClass@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
?SetActive@Element@DirectUI@@QEAAJH@Z
??0CritSecLock@DirectUI@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
??1CritSecLock@DirectUI@@QEAA@XZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UEAAHXZ
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
?GetUiaFocusDelegate@Element@DirectUI@@UEAAPEAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?GetAccessibleImpl@Element@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UEAAXPEAUtagRECT@@@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnDestroy@Element@DirectUI@@UEAAXXZ
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
??1ClassInfoBase@DirectUI@@UEAA@XZ
??0ClassInfoBase@DirectUI@@QEAA@XZ
?Destroy@Element@DirectUI@@QEAAJ_N@Z
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
?Register@ClassInfoBase@DirectUI@@QEAAJXZ
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnEvent@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnInput@Element@DirectUI@@UEAAXPEAUInputEvent@2@@Z
??1Element@DirectUI@@UEAA@XZ
??0Element@DirectUI@@QEAA@XZ
?Initialize@Element@DirectUI@@QEAAJIPEAV12@PEAK@Z
?Release@Value@DirectUI@@QEAAXXZ
?GetChildren@Element@DirectUI@@QEAAPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@PEAPEAVValue@2@@Z
?SetWidth@Element@DirectUI@@QEAAJH@Z
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z
?SetSelected@Element@DirectUI@@QEAAJ_N@Z
?SetShortcut@Element@DirectUI@@QEAAJH@Z
?SetEnabled@Element@DirectUI@@QEAAJ_N@Z
?SetSelection@Combobox@DirectUI@@QEAAJH@Z
GetElementDataEntry
?Init@NavReference@DirectUI@@QEAAXPEAVElement@2@PEAUtagRECT@@@Z
?SetDataEngine@Repeater@DirectUI@@QEAAXPEAUIDataEngine@2@@Z
?AddString@Combobox@DirectUI@@QEAAHPEBG@Z
?SelectionChange@Combobox@DirectUI@@SA?AVUID@@XZ
?Click@Button@DirectUI@@SA?AVUID@@XZ
StrToID
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
?GetClassInfoPtr@ScrollViewer@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@CCTrackBar@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@CCSysLink@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@CCCheckBox@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@CCBase@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@Combobox@DirectUI@@SAPEAUIClassInfo@2@XZ
UnInitProcessPriv
UnInitThread
?SetRegisteredDefaultButton@XProvider@DirectUI@@UEAAJPEAVElement@2@@Z
dwmapi
DwmIsCompositionEnabled
sspicli
GetUserNameExW
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
DllCanUnloadNow
DllGetClassObject
DllInstall
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
191KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=50, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=27412,
count=21, id=260, version=27412,
count=438, id=1, productName=Unmarked objects,
count=19, id=257, version=27412,
count=8, id=261, version=27412,
count=1, id=256, version=27412,
count=51, id=264, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Solara/buffed/chidedOcurred.xml
- SHA256 0e4bf326bbd329a90a8a04e755d6c2f1f6f26d67b8db3295a4e15561b7b1707d
- MD5 2cc7542482d486c23aa4fa8d77163776
- SHA1 5ac932e3532023a113230c0a426eaa6d2b51284b
- SHA512 df555bff92cabdd529088aa2071e9a4a4b5b766ed0b3183048ca46e769bd88101e4f5870dc699769f1b4383c591e73ad952adfc3c2c38256120b57ccdc387f52
- SSDEEP 384:4wuVphEutg7Rv/6Qb+QsxcUUIVInnkuRQuM8:crh1+7Pb3sxfkn9QuM8
- MD5 SHA1 SHA512 SSDEEP
Solara/buffed/decineSatoriiCoppy.xml
- SHA256 2ce025a1cfb9f7708815d2f1c3a4cc4478930432f7a5f7b9b5adc61f8868f8b4
- MD5 de41de7278a4d6a19ddd7ccb9463f1c1
- SHA1 1f2211da3b4767b562cd2d5f41363420691f337f
- SHA512 2ccd2950be7ab79035eeb6e7f28cbc4730cbaaf1abc6bdb0e038848a373e49aade573bdbf9cd86a1af46a63b16d9f5fa3cb931d73366b77fff0934e44c46b2d8
- MD5 SHA1 SHA512
Solara/buffed/ecocide.xml
- SHA256 d4df2b4bcd5d34a626bd042776f320da16845c7c7ba0c6dfacde7f46624bfac6
- MD5 ffb38dd23c3fc65fe3511aba0f723ec0
- SHA1 a08666efa05a191f8a72ed3900cf5928e8191f60
- SHA512 3e62ce31ba74ecd9700d691506aeaac91aa03c8654fdf370efefb87dec7545a4e5d7dcac6b381112cb15eabca79365bbfd892b6200f9b085f702eaf765731d70
- SSDEEP 192:pEiB6XDG609j48uHT+YLpRx4UD/KjmLmNKOMgvsiNXPC1r6aUN6NjkPaHSXs:Ki658uZxtpNO51NXG6kxkPaHSXs
- MD5 SHA1 SHA512 SSDEEP
Solara/buffed/gheddaOptimal.xml
- SHA256 06c2e9fdaf092549ec926bffb21ba09a4d3284c4804f1fa56e9e69d0bf714086
- MD5 06d269ff4d7e22a6dbf54191bf7c4f54
- SHA1 05fc3d31bf4d1f4b67742a205f1b607a8e6e527c
- SHA512 e46b346017d2cead918c019ea14c3a46b1566da7a1cb67fa1d913daccd4dbbdffe4687bd5a9300d25018fc2de32ff5430c4e3ac6ff15818715119f0ec194d820
- SSDEEP 192:u+bj9Ijj5OhySOIQj8oNexPtaxTQAaCUe:5jgj5OkSOIQZeraZ
- MD5 SHA1 SHA512 SSDEEP
Solara/buffed/pickup.xml
- SHA256 b482104f25fc6c5484d75e543a986eb8ace6104dfa809c8cad04726bbfb8f7a3
- MD5 a9f2f9f7d288d187c42f4897f8787889
- SHA1 2a643f4e1a214d62b4965dd33481714838b3f2d1
- SHA512 5354f6538dba4181798bc16c3d42b793194e7a60ce2734672d0f9609b213b62f4665eb452be9f29a69baafd02e92bdc2cf213ff9fb1427f34a7f3033a6032588
- SSDEEP 96:YTylIv7LQJc+DU9+UFKSp8gogh98f8YIVpmDAA4+sRlhQ8Iuk7:BlIDLQVDU9NF0wSDAjRo8IH
- MD5 SHA1 SHA512 SSDEEP
Solara/buffed/pictaviSina.xml
- SHA256 7da1206a59098a4a0b2259faea8949744db3259758dd17319af35d724bca4889
- MD5 2655ec9266ba5d7ab41dedae186c2ac1
- SHA1 0ebc5b783416bbfb90e71ac40a6c2d0026fd523f
- SHA512 1d5bf4feef3d0db72d4b8d8e620df954207725ce77b786345d745c5470c85e4bb6810e929e7cfe38bc755e6de50771b0ff21df9392bd8e6fdd46e9cc3b35af26
- MD5 SHA1 SHA512
Solara/oleprn.dll
- IMPHASH 5a9a8e0a0dd00c835eee8847bfab87ac
- SHA256 3e595c971729c2eb7879b6ce468d11e286ea98fa8c1abf93abbc5888542013d0
- MD5 e0f375597c9bc2d444be3dc6a65f06e9
- SHA1 11589152b702675bb211054020e33f2659c34842
- SHA512 0299035f227cf1285d1f149c5e67805d1f8c78469fd6fefdbc4616b3f555f7f52c8addc0dc004ce9971223a48892ce0ecee316e4d5dd6583a02093b7d8d866c0
- SSDEEP 3072:DcSblOUyLB7OCm6U0FRwOyu3tkdwdxyDhkpN0Fc:Dc+8UyLBOmrwOyVOl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
github
Minor OS version
0
Major OS version
10
Entry point
97120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
oleprn.pdb
msvcrt
_wtol
_wcsnicmp
_vsnwprintf
_purecall
free
__C_specific_handler
memcpy_s
_local_unwind
memcpy
_onexit
__dllonexit
_unlock
_lock
_initterm
_amsg_exit
_XcptFilter
_callnewh
wcscspn
wcsrchr
wcschr
realloc
malloc
iswalnum
iswxdigit
iswdigit
towlower
memset
atl
ord25
ord27
ord30
ord31
ord22
ord18
ord15
ord21
ord16
ord23
ord26
ord32
ntdll
NtOpenThreadToken
NtSetInformationThread
NtClose
WinSqmIncrementDWORD
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlNtStatusToDosError
kernel32
GetComputerNameW
SetLastError
lstrcmpW
CompareStringOrdinal
FormatMessageW
GetWindowsDirectoryW
GetFileAttributesW
GetSystemDefaultLocaleName
FreeLibrary
LoadLibraryExW
GlobalFree
DeleteFileW
CreateThread
WaitForSingleObject
GetExitCodeProcess
WriteFile
GetTempPathW
CreateFileW
HeapFree
VirtualFree
LoadLibraryExA
EncodePointer
HeapAlloc
DecodePointer
GetProcessHeap
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
Sleep
ReleaseSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
LocalAlloc
MultiByteToWideChar
ReleaseSemaphore
GetModuleHandleExW
ReleaseMutex
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
IsDebuggerPresent
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
LocalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CloseHandle
GetCurrentProcess
GetProcAddress
lstrcmpiW
GetModuleFileNameA
CreateSemaphoreExW
GetVersionExW
GetModuleHandleW
GetLastError
GetCurrentThreadId
RaiseException
DebugBreak
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
VirtualQuery
VirtualAlloc
VirtualProtect
AcquireSRWLockExclusive
WideCharToMultiByte
advapi32
RegOpenKeyW
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
user32
CallWindowProcW
CreateWindowExW
DefWindowProcW
UnionRect
PtInRect
GetClassInfoW
RegisterClassW
GetWindowLongPtrW
SetWindowLongPtrW
GetForegroundWindow
GetLastActivePopup
GetDesktopWindow
MessageBoxW
RegisterClassExW
wsprintfW
LoadCursorW
GetClassInfoExW
SendMessageW
GetWindow
EndPaint
GetClientRect
BeginPaint
InvalidateRect
DestroyWindow
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IsWindow
ShowWindow
SetFocus
GetParent
LoadStringW
PeekMessageW
IntersectRect
winspool.drv
ClosePrinter
XcvDataW
GetPrinterDataExW
EnumPortsW
DeviceCapabilitiesW
AddPrinterConnectionW
ConfigurePortW
ord203
ord204
EnumJobsW
GetPrinterW
GetPrinterDriverW
GetPrinterDataW
OpenPrinterW
wininet
InternetOpenW
InternetOpenUrlW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
InternetCanonicalizeUrlW
InternetErrorDlg
gdi32
SetViewportOrgEx
SetMapMode
LPtoDP
GetDeviceCaps
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
DeleteDC
CreateRectRgnIndirect
shell32
ShellExecuteExW
ole32
StringFromCLSID
CoTaskMemFree
CreateOleAdviseHolder
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
CoCreateGuid
OleRegEnumVerbs
CoCreateInstance
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
VariantClear
VariantInit
VariantChangeType
LoadRegTypeLi
SetErrorInfo
OleCreatePropertyFrame
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreate
SafeArrayDestroy
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
clusapi
GetNodeClusterState
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=259, version=27412,
count=25, id=260, version=27412,
count=311, id=1, productName=Unmarked objects,
count=27, id=257, version=27412,
count=5, id=261, version=27412,
count=1, id=256, version=27412,
count=18, id=264, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Solara/wwancfg.dll
- IMPHASH 49decdfb6773b3da00526a10323a4d5d
- SHA256 c4b1f99e87b4568b5b9ff2ded05cebc55376051d44877f5574f2c125566ce604
- MD5 997b0b584ffab0b7ff9cbbfc60d60bd2
- SHA1 2985c0144da0e9f5dcc0092ac54a5ff99a63f761
- SHA512 b77553b7a2f5a55ad4dfa49f241961ddce650dd490f0b15b52dfc3c7018e2ba7d28f8387e150177ea3cf12c827afa7a2b7b9eec863199a829a11311bd9607b69
- SSDEEP 1536:IGYSem4xUPfgSD0B7+Kcdo5j0XNijwb8Pxsr8jtlelXLZpFtBH0:xYcpPfgSDWa3dJU88pNpUlXVXjH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
github
Minor OS version
0
Major OS version
10
Entry point
67728
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
wwancfg.pdb
msvcrt
_callnewh
memcpy
memcpy_s
_wcsicmp
__C_specific_handler
_initterm
malloc
_amsg_exit
_XcptFilter
free
_wtoi
wcsstr
toupper
memcmp
__CxxFrameHandler3
iswdigit
memset
ntdll
EtwGetTraceLoggerHandle
EtwTraceMessage
EtwGetTraceEnableFlags
EtwUnregisterTraceGuids
RtlIpv4AddressToStringW
EtwGetTraceEnableLevel
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlIpv6StringToAddressW
RtlIpv4StringToAddressW
RtlIpv6AddressToStringW
EtwRegisterTraceGuidsW
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
SetLastError
GetLastError
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
LoadStringW
api-ms-win-core-com-l1-1-0
StringFromGUID2
CoCreateInstance
IIDFromString
CoUninitialize
CoInitializeEx
CLSIDFromString
CoTaskMemFree
StringFromCLSID
api-ms-win-core-synch-l1-1-0
SetEvent
CreateEventW
WaitForMultipleObjectsEx
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
api-ms-win-core-sysinfo-l1-1-0
GetTickCount64
GetTickCount
GetSystemTimeAsFileTime
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-timezone-l1-1-0
FileTimeToSystemTime
api-ms-win-core-file-l1-1-0
SetFileInformationByHandle
FileTimeToLocalFileTime
CreateFileW
api-ms-win-core-datetime-l1-1-0
GetDateFormatW
GetTimeFormatW
api-ms-win-core-processenvironment-l1-1-0
ExpandEnvironmentStringsW
api-ms-win-eventing-controller-l1-1-0
StartTraceW
ControlTraceW
api-ms-win-eventing-legacy-l1-1-0
EnableTrace
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
netsh.exe
MatchTagsInCmdLine
RegisterHelper
PrintMessageFromModule
MatchEnumTag
RegisterContext
wwapi
WwanDeleteDMConfigProfile
WwanEnumerateInterfaces
WwanSetProfile
WwanGetProfile
WwanGetProfileList
WwanRegisterNotification
WwanDeleteProfile
WwanDisconnect
WwanAllocateMemory
WwanQueryInterface
WwanScan
WwanCloseHandle
WwanSetInterface
WwanOpenHandle
WwanConnect
WwanSetDMConfigProfile
WwanFreeMemory
WwanGetDMConfigProfile
WwanGetProfileState
WwanConnectAdditionalPdpContext
WwanGetProfileListByPurpose
WwanGetDMConfigProfileList
wcmapi
WcmCloseHandle
WcmSetParameter
WcmQueryProperty
WcmFreeMemory
WcmOpenHandle
api-ms-win-core-heap-l2-1-0
LocalFree
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
api-ms-win-core-string-obsolete-l1-1-0
lstrcmpW
api-ms-win-core-heap-l1-1-0
GetProcessHeap
HeapFree
HeapAlloc
GetResourceString
InitHelperDll
Name
.text
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
440B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=44, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=13, id=260, version=27412,
count=3, id=259, version=27412,
count=125, id=1, productName=Unmarked objects,
count=11, id=257, version=27412,
count=5, id=261, version=27412,
count=1, id=256, version=27412,
count=17, id=264, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,