dialog
initDialog
show
Overview
overview
7Static
static
71346数码...nt.vbs
windows7-x64
11346数码...nt.vbs
windows10-2004-x64
11346数码...ow.vbs
windows7-x64
11346数码...ow.vbs
windows10-2004-x64
11346数码...ner.js
windows7-x64
31346数码...ner.js
windows10-2004-x64
31346数码...ode.js
windows7-x64
31346数码...ode.js
windows10-2004-x64
31346数码...xed.js
windows7-x64
31346数码...xed.js
windows10-2004-x64
31346数码...oat.js
windows7-x64
31346数码...oat.js
windows10-2004-x64
31346数码...ove.js
windows7-x64
31346数码...ove.js
windows10-2004-x64
31346数码...Pop.js
windows7-x64
31346数码...Pop.js
windows10-2004-x64
31346数码..._A.vbs
windows7-x64
11346数码..._A.vbs
windows10-2004-x64
11346数码...in.asp
windows7-x64
31346数码...in.asp
windows10-2004-x64
31346数码...wd.asp
windows7-x64
31346数码...wd.asp
windows10-2004-x64
31346数码...nt.asp
windows7-x64
31346数码...nt.asp
windows10-2004-x64
31346数码...ce.asp
windows7-x64
31346数码...ce.asp
windows10-2004-x64
31346数码...le.asp
windows7-x64
31346数码...le.asp
windows10-2004-x64
31346数码...te.asp
windows7-x64
31346数码...te.asp
windows10-2004-x64
31346数码...JS.asp
windows7-x64
31346数码...JS.asp
windows10-2004-x64
3Behavioral task
behavioral1
Sample
1346数码港/AD/ADCount.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1346数码港/AD/ADCount.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
1346数码港/AD/ADShow.vbs
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
1346数码港/AD/ADShow.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
1346数码港/AD/ADTemplate/Template_Banner.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
1346数码港/AD/ADTemplate/Template_Banner.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
1346数码港/AD/ADTemplate/Template_Code.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
1346数码港/AD/ADTemplate/Template_Code.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
1346数码港/AD/ADTemplate/Template_Fixed.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
1346数码港/AD/ADTemplate/Template_Fixed.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
1346数码港/AD/ADTemplate/Template_Float.js
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
1346数码港/AD/ADTemplate/Template_Float.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
1346数码港/AD/ADTemplate/Template_Move.js
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
1346数码港/AD/ADTemplate/Template_Move.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
1346数码港/AD/ADTemplate/Template_Pop.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
1346数码港/AD/ADTemplate/Template_Pop.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
1346数码港/ASPAdmin_A.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
1346数码港/ASPAdmin_A.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
1346数码港/Admin/Admin_Admin.asp
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
1346数码港/Admin/Admin_Admin.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
1346数码港/Admin/Admin_AdminModifyPwd.asp
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
1346数码港/Admin/Admin_AdminModifyPwd.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
1346数码港/Admin/Admin_Advertisement.asp
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
1346数码港/Admin/Admin_Advertisement.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
1346数码港/Admin/Admin_Announce.asp
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
1346数码港/Admin/Admin_Announce.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
1346数码港/Admin/Admin_Article.asp
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
1346数码港/Admin/Admin_Article.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
1346数码港/Admin/Admin_ArticleCreate.asp
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
1346数码港/Admin/Admin_ArticleCreate.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
1346数码港/Admin/Admin_ArticleJS.asp
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
1346数码港/Admin/Admin_ArticleJS.asp
Resource
win10v2004-20240910-en
Target
fb005aab4cbd61403bd787b8349436c2_JaffaCakes118
Size
9.7MB
MD5
fb005aab4cbd61403bd787b8349436c2
SHA1
d4ecf08d7b3056bc32d905a620d25f524d352eb3
SHA256
43e739e9c79239c18a61a448e0fecfe3ff63039e5df6f099ecfec6ab8abcf087
SHA512
a660ae5d118854668b50cb00f68f9b9e9cf19fae1bef55cbd11ca03e7b789c883564e4fdfae13810d00dd4a91e5a69ae9bcbf2eba938551e6e7e2e4c01e0c33f
SSDEEP
196608:z+DVdZUmD5DxdKrVjc+wf5BeX/nte6YXsnSUhc1njGYH0Lpjr369DVQVD9:z+NhD5yrd+HeXl3nSqw8369D+59
resource | yara_rule |
---|---|
static1/unpack004/$SYSDIR/PE_AdminCommon.dll | aspack_v212_v242 |
static1/unpack004/$SYSDIR/PE_Article.dll | aspack_v212_v242 |
static1/unpack004/$SYSDIR/PE_Common.dll | aspack_v212_v242 |
static1/unpack004/$SYSDIR/PE_Equipment.dll | aspack_v212_v242 |
static1/unpack004/$SYSDIR/PE_GuestBook.dll | aspack_v212_v242 |
static1/unpack004/$SYSDIR/PE_Photo.dll | aspack_v212_v242 |
static1/unpack004/$SYSDIR/PE_Shop.dll | aspack_v212_v242 |
static1/unpack004/$SYSDIR/PE_Soft.dll | aspack_v212_v242 |
static1/unpack004/$SYSDIR/PE_Upload.dll | aspack_v212_v242 |
resource | yara_rule |
---|---|
static1/unpack004/$SYSDIR/PE_AdminCommon.dll | upx |
static1/unpack004/$SYSDIR/PE_Article.dll | upx |
static1/unpack004/$SYSDIR/PE_Common.dll | upx |
static1/unpack004/$SYSDIR/PE_Equipment.dll | upx |
static1/unpack004/$SYSDIR/PE_GuestBook.dll | upx |
static1/unpack004/$SYSDIR/PE_Photo.dll | upx |
static1/unpack004/$SYSDIR/PE_Shop.dll | upx |
static1/unpack004/$SYSDIR/PE_Soft.dll | upx |
static1/unpack004/$SYSDIR/PE_Upload.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack002/unzip.exe |
unpack002/wbqinst.exe |
unpack001/1346数码港/PE2005_DLL.exe |
unpack004/$PLUGINSDIR/InstallOptions.dll |
unpack004/$PLUGINSDIR/nsExec.dll |
unpack004/$SYSDIR/PE_AdminCommon.dll |
unpack004/$SYSDIR/PE_Article.dll |
unpack004/$SYSDIR/PE_Common.dll |
unpack004/$SYSDIR/PE_Equipment.dll |
unpack004/$SYSDIR/PE_GuestBook.dll |
unpack004/$SYSDIR/PE_Photo.dll |
unpack004/$SYSDIR/PE_Shop.dll |
unpack004/$SYSDIR/PE_Soft.dll |
unpack004/$SYSDIR/PE_Upload.dll |
unpack004/uninst.exe |
resource | yara_rule |
---|---|
static1/unpack001/1346数码港/PE2005_DLL.exe | nsis_installer_1 |
static1/unpack004/uninst.exe | nsis_installer_1 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetLocaleInfoA
GetStdHandle
GetFileAttributesA
GetFileTime
FileTimeToSystemTime
ReadFile
SetConsoleMode
GetConsoleMode
LeaveCriticalSection
HeapFree
GetProcessHeap
EnterCriticalSection
lstrcpynA
lstrcmpiA
lstrlenA
InitializeCriticalSection
ReleaseMutex
WaitForSingleObject
InterlockedExchange
CreateMutexA
HeapAlloc
GetCurrentProcess
SetConsoleCtrlHandler
MultiByteToWideChar
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapReAlloc
GetCommandLineA
WriteFile
UnhandledExceptionFilter
GetCPInfo
IsValidLocale
GetDriveTypeA
GetConsoleScreenBufferInfo
GetUserDefaultLCID
GetVersionExA
WideCharToMultiByte
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
SetFilePointer
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetProcAddress
LoadLibraryA
GetLocaleInfoW
SetEndOfFile
FindNextFileA
SetVolumeLabelA
FindClose
GetVolumeInformationA
FindFirstFileA
GetFullPathNameA
GetLastError
FileTimeToLocalFileTime
CreateFileA
CloseHandle
SetFileAttributesA
SetFileTime
IsValidCodePage
EnumSystemLocalesA
GetModuleHandleA
GetCurrentDirectoryA
SetEnvironmentVariableW
DeleteFileA
CreateDirectoryA
OpenProcessToken
LookupPrivilegeValueA
GetSecurityDescriptorControl
GetKernelObjectSecurity
AdjustTokenPrivileges
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
SetKernelObjectSecurity
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
IsValidAcl
GetSecurityDescriptorGroup
GetSecurityDescriptorLength
IsValidSid
CharToOemA
OemToCharA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryA
GetTempPathA
GetModuleFileNameA
DeleteFileA
CopyFileA
MoveFileA
GetFileSize
GetFileTime
GetFileAttributesA
SetFileAttributesA
SetFileTime
FindClose
FindNextFileA
FindFirstFileA
GetLastError
CreateDirectoryA
RemoveDirectoryA
GetDiskFreeSpaceA
GetTimeFormatA
LocalFileTimeToFileTime
SystemTimeToFileTime
GetDateFormatA
GetDriveTypeA
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
ExitProcess
DebugBreak
OutputDebugStringA
LoadLibraryA
FreeLibrary
SizeofResource
LockResource
LoadResource
FindResourceA
CreateFileA
lstrcpyA
WriteFile
CloseHandle
CreateProcessA
SetThreadPriority
GetCurrentThread
GetCurrentProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
ResumeThread
HeapFree
GetVersionExA
SetPriorityClass
UnhandledExceptionFilter
FreeEnvironmentStringsA
CompareStringW
CompareStringA
SetEnvironmentVariableA
GetStringTypeA
GetOEMCP
GetStringTypeW
GetCPInfo
IsBadCodePtr
GetACP
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
TerminateProcess
SetEndOfFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStdHandle
InterlockedDecrement
GetProcAddress
InterlockedIncrement
VirtualFree
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualAlloc
SetStdHandle
ReadFile
SetFilePointer
FlushFileBuffers
LCMapStringA
LCMapStringW
HeapAlloc
HeapReAlloc
KillTimer
MessageBoxA
wsprintfA
GetMessageA
DispatchMessageA
TranslateMessage
LoadStringA
SetTimer
PeekMessageA
DeleteObject
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
ShellExecuteA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord17
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
CloseHandle
SetFileTime
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
GlobalFree
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
MulDiv
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
SetFilePointer
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
ReadFile
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
GetCommandLineA
ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PeekMessageA
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SetBkColor
SelectObject
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegEnumKeyA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
WritePrivateProfileStringA
lstrcpynA
lstrcatA
lstrcpyA
GetPrivateProfileIntA
MultiByteToWideChar
GetModuleHandleA
lstrcmpiA
GlobalFree
GetPrivateProfileStringA
GlobalAlloc
GetWindowLongA
DrawTextA
SetCursor
LoadCursorA
PtInRect
MapWindowPoints
GetDlgCtrlID
GetClientRect
DrawFocusRect
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
CallWindowProcA
PostMessageA
MessageBoxA
SendMessageA
SetWindowTextA
GetWindowTextA
wsprintfA
CharNextA
LoadIconA
SetTextColor
DeleteObject
GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA
ShellExecuteA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListA
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetExitCodeProcess
lstrlenA
lstrcatA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
CloseHandle
GlobalAlloc
GetModuleFileNameA
lstrcmpiA
GetCommandLineA
DeleteFileA
GlobalLock
GlobalFree
SendMessageA
CharNextA
wsprintfA
CharPrevA
FindWindowExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
Exec
ExecToLog
ExecToStack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord17
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
CloseHandle
SetFileTime
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
GlobalFree
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
MulDiv
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
SetFilePointer
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
ReadFile
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
GetCommandLineA
ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PeekMessageA
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SetBkColor
SelectObject
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegEnumKeyA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ