f:\jnks\workspace\K29_Production_Build\build4644\SxS\src\x64\Release\DeviceSetup.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-09-06_4a919f4f8a992561d9ab94d925958307_ryuk.exe
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
General
-
Target
2024-09-06_4a919f4f8a992561d9ab94d925958307_ryuk
-
Size
26.6MB
-
MD5
4a919f4f8a992561d9ab94d925958307
-
SHA1
bb5807573007987f78efb8629610fc2f3ddabc7f
-
SHA256
345d5364b924134f5ead2e94fbfb04454e9e31caf4c6251913a32d61b92e9e88
-
SHA512
eafbfc93020a0c0a25aab0754c10f6b59b5f14f8f166e91372ebe8be5ff3fe75b3d045345668664e940285d2577ea075598783d2e28dee4197eea3ac9fd9f783
-
SSDEEP
196608:rMs8y6HRtR6IhQtj35CWfHmq+fq3A3mWYaz5h5:rMs8bRrWtj35CWfiq3A3m05h
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-06_4a919f4f8a992561d9ab94d925958307_ryuk
Files
-
2024-09-06_4a919f4f8a992561d9ab94d925958307_ryuk.exe windows:5 windows x64 arch:x64
38b440ba1189d6e04f2533c0f978fe5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
VirtualProtect
lstrcpyW
FileTimeToSystemTime
SystemTimeToFileTime
GetThreadLocale
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
UnlockFile
DuplicateHandle
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetWindowsDirectoryW
VerSetConditionMask
GetProfileIntW
ActivateActCtx
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
GetStringTypeW
LCMapStringW
GetCPInfo
DebugBreak
SetDllDirectoryW
RtlPcToFileHeader
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
ExitProcess
GetStdHandle
GetACP
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
VirtualFree
GetModuleHandleA
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
QueueUserWorkItem
ReleaseSemaphore
WakeConditionVariable
SleepConditionVariableCS
InitializeConditionVariable
LocalSize
lstrlenW
lstrcatW
GetGeoInfoW
WritePrivateProfileStringA
GetPrivateProfileStringA
RemoveDirectoryW
CreateActCtxW
GlobalFindAtomW
GlobalAddAtomW
GetModuleHandleExW
GetModuleHandleW
FreeResource
EncodePointer
GlobalGetAtomNameW
MulDiv
GlobalSize
SetErrorMode
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetCurrentThread
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
lstrcmpiW
GetUserDefaultLCID
GetSystemDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
ProcessIdToSessionId
VerifyVersionInfoW
GetVersionExW
GetComputerNameExW
WaitNamedPipeW
CreateNamedPipeW
MoveFileExW
CopyFileW
FindNextFileW
FindFirstFileW
DeleteFileW
GetFileAttributesW
SetFileAttributesW
CreateDirectoryW
GetDiskFreeSpaceExW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetTempPathW
GetSystemDirectoryW
FindResourceExW
FindResourceW
GetEnvironmentVariableW
GetStartupInfoW
CreateProcessW
OpenFileMappingW
OpenEventW
CreateEventW
OpenMutexW
FlushViewOfFile
PeekNamedPipe
DisconnectNamedPipe
ConnectNamedPipe
CreatePipe
GetLocalTime
GetSystemTime
GetFileTime
FindClose
DeviceIoControl
GetFileSizeEx
SizeofResource
LoadResource
WaitForMultipleObjects
ResetEvent
SetEvent
TryEnterCriticalSection
GetExitCodeThread
TerminateThread
CreateThread
GetExitCodeProcess
GetCurrentProcess
GetShortPathNameW
LocalAlloc
GlobalMemoryStatusEx
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingW
WaitForSingleObject
CreateMutexW
LocalFree
FormatMessageW
SearchPathW
GetLongPathNameW
GetTempFileNameW
GetCommandLineW
GetFileAttributesExW
OpenProcess
GetCurrentThreadId
OutputDebugStringW
CloseHandle
WriteFile
SetFilePointer
Sleep
CreateFileW
GetTickCount
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
InitializeCriticalSection
ExpandEnvironmentStringsW
QueryPerformanceFrequency
GetCurrentProcessId
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
QueryPerformanceCounter
SetLastError
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
GlobalFlags
CompareStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
LocalReAlloc
HeapFree
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
QueryActCtxW
FindActCtxSectionStringW
OutputDebugStringA
DeactivateActCtx
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetOverlappedResult
CancelIo
SetHandleInformation
GetPrivateProfileSectionW
GetFileInformationByHandle
FileTimeToDosDateTime
FormatMessageA
LoadLibraryA
ExpandEnvironmentStringsA
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
user32
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowTextW
IsDialogMessageW
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
SendDlgItemMessageA
SetRectEmpty
OffsetRect
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
CopyImage
SystemParametersInfoW
GetMessageW
TranslateMessage
GetCursorPos
ShowOwnedPopups
SetCursor
GetWindowThreadProcessId
DeleteMenu
ClientToScreen
RealChildWindowFromPoint
SetTimer
KillTimer
InvalidateRect
DrawTextW
DrawTextExW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
AllowSetForegroundWindow
MsgWaitForMultipleObjects
SendMessageCallbackW
ExitWindowsEx
GetProcessWindowStation
SetProcessWindowStation
CloseWindowStation
OpenWindowStationW
GetThreadDesktop
CloseDesktop
SetThreadDesktop
OpenDesktopW
SetMenu
IsWindowEnabled
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
FillRect
GetSystemMetrics
GetSysColorBrush
LoadCursorW
DestroyMenu
GetMenuItemInfoW
InflateRect
MapDialogRect
TrackMouseEvent
DestroyIcon
LoadImageW
CharUpperW
IntersectRect
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
WaitMessage
GetKeyboardLayout
IsCharLowerW
GetMenuDefaultItem
SetWindowContextHelpId
InvalidateRgn
CharNextW
FlashWindowEx
AdjustWindowRect
RegisterClassExW
WaitForInputIdle
GetAsyncKeyState
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
SetRect
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
MapVirtualKeyW
GetKeyNameTextW
SetLayeredWindowAttributes
GetKeyboardState
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
EnumDisplayMonitors
SetClassLongPtrW
ToUnicodeEx
MapVirtualKeyExW
MsgWaitForMultipleObjectsEx
wsprintfW
SendMessageW
EnableWindow
PostMessageW
PostQuitMessage
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
LoadMenuW
GetWindowRect
GetParent
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
MonitorFromPoint
msimg32
AlphaBlend
TransparentBlt
GradientFill
shlwapi
PathFindFileNameW
PathIsFileSpecW
PathRemoveFileSpecW
PathFileExistsW
PathRemoveExtensionW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathIsDirectoryW
PathCombineW
PathFindExtensionW
uxtheme
GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
psapi
GetModuleFileNameExW
EnumProcessModules
GetModuleBaseNameW
EnumProcesses
oledlg
OleUIBusyW
oleacc
CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow
gdiplus
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipCloneImage
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipAlloc
GdipFree
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipDrawImageRectI
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
gdi32
GetWindowExtEx
IntersectClipRect
LineTo
GetViewportExtEx
PtVisible
RectVisible
RestoreDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
GetStockObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
StartDocW
GetPixel
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
CreateFontW
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
EndDoc
StartPage
EndPage
GetTextFaceW
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
DeleteEnhMetaFile
PlayEnhMetaFile
SetEnhMetaFileBits
CreateCompatibleDC
BitBlt
DeleteDC
CreateBitmap
GetObjectW
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
MoveToEx
SaveDC
DeleteObject
winspool.drv
GetPrinterDriverW
GetPrinterDriverDirectoryW
DeletePrinterDriverExW
StartDocPrinterW
StartPagePrinter
WritePrinter
EndPagePrinter
EndDocPrinter
GetPrinterDataExW
SetPrinterDataExW
EnumPrinterDriversW
FindNextPrinterChangeNotification
FindClosePrinterChangeNotification
EnumMonitorsW
AddMonitorW
DeleteMonitorW
EnumPortsW
XcvDataW
ord203
ord204
DocumentPropertiesW
OpenPrinterW
FindFirstPrinterChangeNotification
ClosePrinter
GetJobW
AddPrinterDriverW
GetPrinterW
SetPrinterW
DeletePrinter
AddPrinterW
EnumJobsW
SetJobW
EnumPrintersW
advapi32
StartServiceW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
SetNamedSecurityInfoW
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid
RegQueryValueExA
RegOpenKeyExA
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
CheckTokenMembership
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceStatus
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
ChangeServiceConfigW
CreateProcessAsUserW
OpenEventLogW
CloseEventLog
BackupEventLogW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ImpersonateLoggedOnUser
LookupPrivilegeValueW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AdjustTokenPrivileges
RevertToSelf
DuplicateToken
GetUserNameW
RegQueryInfoKeyW
OpenProcessToken
RegCreateKeyExW
shell32
CommandLineToArgvW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ExtractIconW
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHAppBarMessage
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ShellExecuteExW
SHGetFolderPathW
ole32
OleRun
PropVariantCopy
RevokeDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoDisconnectObject
StringFromGUID2
ReleaseStgMedium
OleDuplicateData
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoCreateGuid
CoSetProxyBlanket
CoInitializeSecurity
OleLockRunning
RegisterDragDrop
OleDraw
GetHGlobalFromStream
CoFreeUnusedLibraries
CoGetClassObject
CoInitializeEx
CoUninitialize
CoInitialize
CLSIDFromString
CoCreateInstance
CoRevokeClassObject
CoRegisterMessageFilter
oleaut32
SafeArrayCreateVector
DispCallFunc
SafeArrayGetElemsize
OleCreateFontIndirect
GetErrorInfo
VarBstrFromDate
SafeArrayCopy
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
VariantClear
SysFreeString
SysAllocString
rpcrt4
UuidCreate
UuidToStringA
comctl32
ImageList_AddMasked
ImageList_GetImageCount
ImageList_GetIcon
_TrackMouseEvent
InitCommonControlsEx
ord17
ws2_32
closesocket
connect
bind
accept
setsockopt
socket
select
gethostbyname
__WSAFDIsSet
recv
listen
inet_addr
inet_ntoa
WSAGetLastError
getsockopt
htons
ioctlsocket
WSAAddressToStringA
htonl
ntohl
shutdown
send
WSAStartup
WSACleanup
WSACloseEvent
WSAConnect
WSACreateEvent
WSADuplicateSocketW
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSASocketW
WSAAddressToStringW
WSAStringToAddressW
getaddrinfo
freeaddrinfo
ntohs
wininet
InternetErrorDlg
InternetSetStatusCallbackW
InternetOpenUrlW
InternetReadFile
HttpAddRequestHeadersW
InternetGetConnectedState
HttpEndRequestW
InternetWriteFile
InternetReadFileExA
HttpQueryInfoA
HttpQueryInfoW
HttpSendRequestExW
HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
msi
ord8
ord94
ord72
ord232
ord49
ord19
ord96
ord205
ord70
ord32
ord159
ord160
ord114
ord118
ord120
ord141
ord221
ord116
ord47
ord137
ord34
ord169
ord88
ord17
ord125
ord171
setupapi
SetupFindFirstLineW
SetupGetLineTextW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiOpenDeviceInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiBuildDriverInfoList
SetupDiGetSelectedDriverW
SetupDiGetDriverInfoDetailW
SetupCloseInfFile
SetupOpenInfFileW
SetupDiCallClassInstaller
SetupDiRemoveDevice
SetupDiOpenClassRegKey
SetupDiCreateDevRegKeyW
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
CM_Disable_DevNode
CM_Get_Device_IDW
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status
CM_Locate_DevNodeW
SetupDiGetClassDevsW
CMP_WaitNoPendingInstallEvents
SetupDiDestroyDriverInfoList
CM_Set_DevNode_Registry_PropertyW
CM_Reenumerate_DevNode
iphlpapi
IpReleaseAddress
GetAdaptersAddresses
GetAdaptersInfo
IpRenewAddress
AddIPAddress
NotifyAddrChange
GetInterfaceInfo
GetIfEntry
IcmpCreateFile
IcmpCloseHandle
DeleteIPAddress
IcmpSendEcho
secur32
GetUserNameExW
crypt32
CertDeleteCertificateFromStore
CertAddEncodedCertificateToStore
CertCloseStore
CertOpenStore
CryptUnprotectData
wtsapi32
WTSEnumerateSessionsW
WTSQueryUserToken
WTSFreeMemory
Exports
Exports
Create_Config_JobFactory
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15.5MB - Virtual size: 15.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 892KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE