Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
7Static
static
33f7959fa3e...18.exe
windows7-x64
73f7959fa3e...18.exe
windows10-2004-x64
7$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows7-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
32345Explorer.exe
windows7-x64
2345Explorer.exe
windows10-2004-x64
2345ExplorerReg.exe
windows7-x64
2345ExplorerReg.exe
windows10-2004-x64
Addon/Capture.dll
windows7-x64
3Addon/Capture.dll
windows10-2004-x64
3Coral.dll
windows7-x64
1Coral.dll
windows10-2004-x64
1CoralApp.dll
windows7-x64
1CoralApp.dll
windows10-2004-x64
1CoralDb.dll
windows7-x64
1CoralDb.dll
windows10-2004-x64
1CoralDownload.dll
windows7-x64
1CoralDownload.dll
windows10-2004-x64
1CoralExtract.dll
windows7-x64
1CoralExtract.dll
windows10-2004-x64
1CoralHtmlWnd.dll
windows7-x64
1CoralHtmlWnd.dll
windows10-2004-x64
1CoralRender.dll
windows7-x64
1CoralRender.dll
windows10-2004-x64
1CoralTrident.dll
windows7-x64
1CoralTrident.dll
windows10-2004-x64
1CoralUI.dll
windows7-x64
1CoralUI.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
3f7959fa3eac1c799f52f8bcaff2817e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f7959fa3eac1c799f52f8bcaff2817e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
2345Explorer.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
2345Explorer.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
2345ExplorerReg.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
2345ExplorerReg.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Addon/Capture.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Addon/Capture.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Coral.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Coral.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
CoralApp.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
CoralApp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
CoralDb.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
CoralDb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
CoralDownload.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
CoralDownload.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
CoralExtract.dll
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
CoralExtract.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
CoralHtmlWnd.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
CoralHtmlWnd.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
CoralRender.dll
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
CoralRender.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
CoralTrident.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
CoralTrident.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
CoralUI.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
CoralUI.dll
Resource
win10v2004-20241007-en
Target
3f7959fa3eac1c799f52f8bcaff2817e_JaffaCakes118
Size
8.5MB
MD5
3f7959fa3eac1c799f52f8bcaff2817e
SHA1
ca4cd0bfef98aa9f8b0c9ef53401e4e10e83d180
SHA256
0b1bbcb0197ca224707d9c51818e44d78d40e1964d1e7e8c016e1c87c0c71151
SHA512
b702a41ad5d73a8be6f657eadeb4db49b51c944657a0b3c9bb4d87062b7074f09b9eccb66fc10963b539bfcd0af53c574d71ac20b31eddc338b1719febe4f8f1
SSDEEP
196608:EdW8H9CG8mv6xEfOsHoHSJT5xJ5hpXntrmHu:YCG8mbb9J5DtrSu
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
i:\Arthur\coral_tool\build_tool\CoralNSISPlugin\FileInfo\Release\FileInfo.pdb
WaitForMultipleObjects
lstrcpyW
GlobalAlloc
WideCharToMultiByte
lstrcpynW
MultiByteToWideChar
GlobalFree
LoadLibraryW
GetProcAddress
CreateProcessW
GetFileSize
SetFilePointer
WriteFile
CreateFileW
FreeLibrary
ExpandEnvironmentStringsW
GetFileAttributesW
GetModuleFileNameW
OpenProcess
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
GetConsoleMode
GetConsoleCP
InitializeCriticalSection
HeapSize
GetLocaleInfoA
CreateToolhelp32Snapshot
GetCurrentProcessId
CloseHandle
Process32FirstW
TerminateProcess
Process32NextW
MulDiv
GetStringTypeW
GetStringTypeA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetClientRect
EndPaint
GetParent
GetPropW
BeginPaint
LoadCursorW
SetWindowLongW
SetCursor
CallWindowProcW
FillRect
GetClassNameA
GetWindowLongW
SendMessageW
DrawTextW
SetPropW
wsprintfW
IsWindow
PostMessageW
FindWindowW
ReleaseDC
GetDC
DefWindowProcW
SetBkMode
SelectObject
GetDeviceCaps
SetTextColor
DuplicateTokenEx
AdjustTokenPrivileges
ShellExecuteExW
CheckInstallTime
CheckUserID_01
CheckUserID_02
CreateLowIntegrityProcess
DPIScaleX
DPIScaleY
FindProc
GetSpreadUserID
GetSpreadUserID2
GetSpreadUserID3
GetSpreadUserID4
IsUrl2345
KillProc
RegisterUrlLink
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\2345\Coral\Coral_opt0\private\install\RCSetup\build_temp\Win32\compile\Release\RCWidgetPluginRCWidgetPlugin.pdb
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GlobalLock
FlushInstructionCache
GetCurrentProcess
RaiseException
LeaveCriticalSection
SetLastError
GetCurrentThreadId
EnterCriticalSection
GetVolumeInformationW
GetDiskFreeSpaceW
GetACP
LoadLibraryW
FreeLibrary
DeleteCriticalSection
WriteFile
LoadLibraryA
InitializeCriticalSection
GetFileSizeEx
DeleteFileW
ReadFile
GetComputerNameW
GetModuleFileNameW
SetFilePointer
CreateFileW
ExpandEnvironmentStringsW
GetFileAttributesExW
ResumeThread
lstrcmpiW
GetLastError
ResetEvent
SetEvent
CreateEventW
InterlockedExchangeAdd
SetUnhandledExceptionFilter
IsDebuggerPresent
GlobalUnlock
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitThread
CreateThread
GetSystemTimeAsFileTime
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
RtlUnwind
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetVersionExW
GetSystemInfo
LocalAlloc
CreateFileA
FlushFileBuffers
LocalFree
GetProcAddress
GetModuleHandleW
GetFileAttributesW
FindFirstFileW
lstrcatW
FindClose
LockResource
SizeofResource
FindResourceW
SetErrorMode
FreeResource
LoadResource
GetVersion
GetCurrentProcessId
TerminateProcess
CloseHandle
Process32FirstW
Process32NextW
OpenProcess
GetShortPathNameW
CreateToolhelp32Snapshot
lstrcpyW
GlobalFree
MultiByteToWideChar
lstrcpynW
WideCharToMultiByte
GlobalAlloc
MulDiv
lstrlenW
InterlockedCompareExchange
IsProcessorFeaturePresent
GetCommandLineA
CallWindowProcW
GetPropW
SetForegroundWindow
UnregisterClassA
GetClassLongW
GetWindowThreadProcessId
DestroyWindow
UpdateLayeredWindow
RemovePropW
GetClassInfoExW
IsIconic
SetPropW
GetForegroundWindow
RegisterClassExW
IsWindowVisible
InflateRect
IsRectEmpty
UnionRect
SetCursor
SetRectEmpty
InvalidateRect
ReleaseCapture
TrackMouseEvent
RedrawWindow
SetRect
MapWindowPoints
SetWindowRgn
SystemParametersInfoW
DialogBoxParamW
GetWindow
BeginPaint
GetParent
ScreenToClient
GetWindowRect
EndPaint
CopyRect
ReleaseDC
GetDesktopWindow
IsWindow
OffsetRect
PtInRect
LoadCursorW
GetWindowLongW
SetWindowPos
GetDlgItem
CreateWindowExW
EnableWindow
SetFocus
CharNextW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
LoadIconW
ShowWindow
PostMessageW
GetActiveWindow
DefWindowProcW
EndDialog
SetWindowLongW
GetDC
SendMessageW
wsprintfW
CharPrevW
GetClientRect
SetCapture
SetBrushOrgEx
SetStretchBltMode
SetWorldTransform
SetGraphicsMode
SetBkMode
SetDCBrushColor
SetTextColor
SetDCPenColor
SetROP2
SelectClipRgn
CreatePolygonRgn
BitBlt
SelectObject
SetViewportOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
ExtTextOutW
SetBkColor
DeleteObject
GetStockObject
DeleteDC
EnumFontsW
GetObjectW
CreateFontIndirectW
SetArcDirection
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
StrRChrW
PathFileExistsW
StrCpyW
StrToIntA
PathIsRootW
_TrackMouseEvent
InitCommonControlsEx
GdipGetRegionHRgn
GdipSetCompositingMode
GdipCreateRegion
GdipGetClipBoundsI
GdipCloneBitmapAreaI
GdipGetClip
GdipBitmapUnlockBits
GdipTranslateWorldTransform
GdipCreateMatrix
GdipGetWorldTransform
GdipGraphicsClear
GdipGetDC
GdipRestoreGraphics
GdipBitmapLockBits
GdipGetMatrixElements
GdipScaleWorldTransform
GdipDrawImagePointRectI
GdipReleaseDC
GdipDeleteMatrix
GdipDisposeImageAttributes
GdipCreateFontFromDC
GdipSetStringFormatLineAlign
GdipCreateFontFromLogfontW
GdipCreateHBITMAPFromBitmap
GdipMeasureString
GdipDeleteFont
GdipSaveGraphics
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetTextRenderingHint
GdipDrawImageRectRectI
GdipCreateImageAttributes
GdipCreateStringFormat
GdipSetImageAttributesColorMatrix
GdiplusStartup
GdipGetImageGraphicsContext
GdipDeleteBrush
GdipDrawImageRectRect
GdipCreateBitmapFromStream
GdipCloneImage
GdipGetImagePalette
GdiplusShutdown
GdipCreateSolidFill
GdipCreateBitmapFromScan0
GdipGetImagePaletteSize
GdipFillRectangleI
GdipGetImagePixelFormat
GdipCloneBrush
GdipSetPixelOffsetMode
GdipGetImageWidth
GdipDisposeImage
GdipGetImageHeight
GdipAlloc
GdipFree
GdipDeleteGraphics
GdipCreateFromHDC
GdipTransformPointsI
GdipSetClipRectI
GdipDrawString
GdipDeleteRegion
CheckSignerInfo
CheckSoftwareIsInstall
FindProc2
GetCheckValue
GetInstDir
Init
KillProcByFilePath
OnSetup
OnSetupPost
OnUninstall
OnUpdateLater
PopInt
PopString
PushInt
PushString
SetProgress
SetRTL
ShowInstall
ShowUnInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary
wsprintfW
CLSIDFromString
StringFromGUID2
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetFileType
SetHandleCount
Sleep
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
RtlUnwind
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateFileA
FlushFileBuffers
lstrcmpW
GetTickCount
GetVersionExW
CreateDirectoryW
lstrcpynW
LockResource
SizeofResource
GetLastError
CreateMutexW
RaiseException
SetLastError
FlushInstructionCache
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
FindResourceW
GetCurrentThreadId
FindResourceExW
GetLocalTime
CloseHandle
FreeEnvironmentStringsA
LoadResource
DeleteCriticalSection
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapSize
GetProcessHeap
LoadLibraryA
GetProcAddress
InterlockedCompareExchange
InitializeCriticalSection
SetWindowLongW
IsWindow
OpenClipboard
GetWindowLongW
EmptyClipboard
SetClipboardData
CloseClipboard
IsRectEmpty
SetRect
GetSystemMetrics
EnumDisplayDevicesW
EnumDisplaySettingsW
LoadStringW
SetWindowPos
GetActiveWindow
GetParent
FillRect
PtInRect
SetRectEmpty
LoadImageW
LoadCursorW
GetCursorPos
SetCursor
SystemParametersInfoW
ChildWindowFromPointEx
EqualRect
DialogBoxParamW
GetWindowRect
SetFocus
GetClientRect
MapWindowPoints
PostMessageW
EndDialog
EndPaint
BeginPaint
SetForegroundWindow
ShowWindow
InvalidateRgn
GetKeyState
UnionRect
CreateWindowExW
DrawTextW
IntersectRect
CopyRect
UnregisterClassA
GetFocus
EnableWindow
ReleaseDC
GetDC
SetWindowTextW
MoveWindow
DrawTextExW
GetWindowTextW
GetWindowTextLengthW
InvalidateRect
RedrawWindow
CallWindowProcW
DefWindowProcW
SendMessageW
GetDlgItem
ScreenToClient
GetWindow
IsWindowVisible
GetTopWindow
CreateRectRgn
EnumFontsW
CombineRgn
StretchBlt
GetPixel
CreateFontW
SetBkMode
GetTextMetricsW
CreateFontIndirectW
GetStockObject
SetTextColor
Rectangle
GetObjectW
LineTo
MoveToEx
CreatePen
CreateSolidBrush
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateDCW
SelectClipRgn
GetOpenFileNameW
GetSaveFileNameW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
PathFileExistsW
StrCmpW
AlphaBlend
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipFree
GdipAlloc
GdipCloneImage
GdipSaveImageToFile
GdipCreateFromHDC
GdipDrawCurveI
GdipDeleteGraphics
GdipSetPenMode
GdipFillPolygonI
GdipGetSmoothingMode
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSetPenEndCap
GdipSetPenStartCap
GdipCreateSolidFill
GdipDrawEllipseI
GdipDeletePen
GdipDeleteBrush
GdipDrawRectangleI
GdipCreatePen1
GdipDrawLineI
GdipSetPenDashStyle
GdipSetSmoothingMode
ScreenShotConfDlg
ScreenshotRun
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
http://ie.2345.com/apk/qrcode.htm?iehome