C:\xocogapuzote sawi_wopoza.pdb
Overview
overview
10Static
static
3mixazed_20...20.exe
windows7-x64
10mixazed_20...20.exe
windows10-2004-x64
10mixazed_20...23.exe
windows7-x64
10mixazed_20...23.exe
windows10-2004-x64
10mixazed_20...04.exe
windows7-x64
10mixazed_20...04.exe
windows10-2004-x64
10mixazed_20...25.exe
windows7-x64
10mixazed_20...25.exe
windows10-2004-x64
10mixazed_20...06.exe
windows7-x64
10mixazed_20...06.exe
windows10-2004-x64
10mixazed_20...07.exe
windows7-x64
10mixazed_20...07.exe
windows10-2004-x64
10mixazed_20...48.exe
windows7-x64
10mixazed_20...48.exe
windows10-2004-x64
10mixsix_202...11.exe
windows7-x64
10mixsix_202...11.exe
windows10-2004-x64
10usfive_202...29.exe
windows7-x64
10usfive_202...29.exe
windows10-2004-x64
10usfive_202...19.exe
windows7-x64
10usfive_202...19.exe
windows10-2004-x64
10usfive_202...38.exe
windows7-x64
10usfive_202...38.exe
windows10-2004-x64
10usfive_202...22.exe
windows7-x64
10usfive_202...22.exe
windows10-2004-x64
10usfive_202...45.exe
windows7-x64
10usfive_202...45.exe
windows10-2004-x64
10usfive_202...26.exe
windows7-x64
10usfive_202...26.exe
windows10-2004-x64
10usfive_202...26.exe
windows7-x64
10usfive_202...26.exe
windows10-2004-x64
10Static task
static1
Behavioral task
behavioral1
Sample
mixazed_20210808-071120.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
mixazed_20210808-071120.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
mixazed_20210808-075823.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
mixazed_20210808-075823.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
mixazed_20210808-090104.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
mixazed_20210808-090104.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
mixazed_20210808-093225.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
mixazed_20210808-093225.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
mixazed_20210808-094806.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
mixazed_20210808-094806.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
mixazed_20210808-103507.exe
Resource
win7-20241023-en
Behavioral task
behavioral12
Sample
mixazed_20210808-103507.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
mixazed_20210808-113748.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
mixazed_20210808-113748.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
mixsix_20210808-081411.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
mixsix_20210808-081411.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
usfive_20210807-233729.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
usfive_20210807-233729.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
usfive_20210808-050619.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
usfive_20210808-050619.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
usfive_20210808-053738.exe
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
usfive_20210808-053738.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
usfive_20210808-090122.exe
Resource
win7-20241023-en
Behavioral task
behavioral24
Sample
usfive_20210808-090122.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
usfive_20210808-101945.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
usfive_20210808-101945.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
usfive_20210808-112226.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
usfive_20210808-112226.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
usfive_20210808-120926.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
usfive_20210808-120926.exe
Resource
win10v2004-20241007-en
General
-
Target
5f830899b3b1cb680b762b896862e87fb11e68526fda9568d1e135160014413c
-
Size
5.7MB
-
MD5
a8a371dd99b0bffc68cb7d5a6df85df2
-
SHA1
f60b5828793175456408464d2b30aa64f35980ea
-
SHA256
5f830899b3b1cb680b762b896862e87fb11e68526fda9568d1e135160014413c
-
SHA512
cc326cb3f52b264996a9b4cd457131af700434af9728df598c515b4a21c7aedf1dc037b3dfe98e13f46872d198a5a2496bbc1b5c4163b95fd94e26051eeb8b3f
-
SSDEEP
98304:SCePwTUAfZGjFzEYdfdCqj2wpa5C5gMXwFTmq2BdD6ZG8rDIf8qUi4/tVP:uYTUswjFzE2fdt2wpa5ERgFyq4l8nIf0
Malware Config
Signatures
-
Unsigned PE 15 IoCs
Checks for missing Authenticode signature.
resource unpack001/mixazed_20210808-071120 unpack001/mixazed_20210808-075823 unpack001/mixazed_20210808-090104 unpack001/mixazed_20210808-093225 unpack001/mixazed_20210808-094806 unpack001/mixazed_20210808-103507 unpack001/mixazed_20210808-113748 unpack001/mixsix_20210808-081411 unpack001/usfive_20210807-233729 unpack001/usfive_20210808-050619 unpack001/usfive_20210808-053738 unpack001/usfive_20210808-090122 unpack001/usfive_20210808-101945 unpack001/usfive_20210808-112226 unpack001/usfive_20210808-120926
Files
-
5f830899b3b1cb680b762b896862e87fb11e68526fda9568d1e135160014413c.zip
-
mixazed_20210808-071120.exe windows:5 windows x86 arch:x86
c27a98a29b21693846ec47ce91a249f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetFileSize
GetNativeSystemInfo
SetFilePointer
lstrlenA
GetConsoleAliasesLengthW
CopyFileExW
SetLocalTime
GetConsoleAliasExesLengthA
InterlockedIncrement
VerSetConditionMask
GetCommState
InterlockedDecrement
ZombifyActCtx
CompareFileTime
GetSystemWindowsDirectoryW
SetEnvironmentVariableW
GlobalLock
SetConsoleScreenBufferSize
WriteConsoleInputA
SetComputerNameW
FreeEnvironmentStringsA
VirtualFree
SetProcessPriorityBoost
FindResourceExA
GetComputerNameExA
GetFileAttributesW
GetBinaryTypeA
ReadFile
UnregisterWait
InterlockedExchange
SetCurrentDirectoryA
GetStartupInfoA
GetCPInfoExW
OpenMutexW
GetCurrentDirectoryW
GetProcAddress
CreateNamedPipeA
WriteProfileSectionA
ReadFileEx
SetStdHandle
DisableThreadLibraryCalls
GetPrivateProfileStringA
LoadLibraryA
CreateSemaphoreW
GetConsoleScreenBufferInfo
LocalAlloc
FindAtomA
EnumResourceNamesA
WriteProfileStringW
CompareStringA
FatalAppExitA
GetVersionExA
TlsAlloc
FindAtomW
DeleteFileW
LCMapStringW
AreFileApisANSI
GetOverlappedResult
GetComputerNameA
GetLastError
MoveFileA
GetCommandLineA
HeapValidate
IsBadReadPtr
RaiseException
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleW
Sleep
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA
GetModuleHandleA
gdi32
GetBoundsRect
Sections
.text Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 271KB - Virtual size: 46.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
mixazed_20210808-075823.exe windows:6 windows x86 arch:x86
ae4197a0f891759eaef7252707a54fa7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleWindow
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
UnhandledExceptionFilter
user32
ShowWindow
msvcp140
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
_CxxThrowException
__current_exception
__std_exception_destroy
__CxxFrameHandler3
memcpy
__current_exception_context
__std_exception_copy
memset
_except_handler4_common
memmove
api-ms-win-crt-runtime-l1-1-0
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_exit
_invalid_parameter_noinfo_noreturn
exit
_initialize_onexit_table
_register_onexit_function
_cexit
_crt_atexit
_controlfp_s
terminate
_initterm_e
_initterm
_seh_filter_exe
_set_app_type
_get_initial_narrow_environment
__p___argv
_initialize_narrow_environment
__p___argc
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
feof
_popen
fgets
_pclose
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
_set_new_mode
free
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
mixazed_20210808-090104.exe windows:5 windows x86 arch:x86
89cf9ac1741f99d5220268d9aa83e155
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\dujejarotoca\hosigaz-hovanibanata\dubuyola\l.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
GetConsoleAliasW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
CreateActCtxA
WriteConsoleOutputCharacterW
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
SetConsoleTitleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
RealGetWindowClassA
GetAltTabInfoA
advapi32
BackupEventLogW
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
mixazed_20210808-093225.exe windows:5 windows x86 arch:x86
9ef9b5692972468f136ccb3a25ab5d5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\geju.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
lstrcpynW
GetConsoleAliasW
GetFileAttributesW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
WriteConsoleOutputCharacterW
SetConsoleTitleA
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
CreateActCtxA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetAltTabInfoA
RealGetWindowClassA
advapi32
BackupEventLogW
Sections
.text Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
mixazed_20210808-094806.exe windows:5 windows x86 arch:x86
9ef9b5692972468f136ccb3a25ab5d5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\yiwunujawo\nuridaluyuzufi\moyo\nizesigon.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
lstrcpynW
GetConsoleAliasW
GetFileAttributesW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
WriteConsoleOutputCharacterW
SetConsoleTitleA
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
CreateActCtxA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetAltTabInfoA
RealGetWindowClassA
advapi32
BackupEventLogW
Sections
.text Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
mixazed_20210808-103507.exe windows:5 windows x86 arch:x86
7716a0ae832b8460ad78d4842155ea6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\sek.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
IsBadReadPtr
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
lstrcpynW
GetConsoleAliasW
GetFileAttributesW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
WriteConsoleOutputCharacterW
SetConsoleTitleA
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
PeekConsoleInputA
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
CreateActCtxA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetAltTabInfoA
RealGetWindowClassA
advapi32
BackupEventLogW
Sections
.text Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
mixazed_20210808-113748.exe windows:5 windows x86 arch:x86
7716a0ae832b8460ad78d4842155ea6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\dimirewa\fufizoxihod\ro.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
IsBadReadPtr
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
lstrcpynW
GetConsoleAliasW
GetFileAttributesW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
WriteConsoleOutputCharacterW
SetConsoleTitleA
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
PeekConsoleInputA
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
CreateActCtxA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetAltTabInfoA
RealGetWindowClassA
advapi32
BackupEventLogW
Sections
.text Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
mixsix_20210808-081411.exe windows:5 windows x86 arch:x86
9ef9b5692972468f136ccb3a25ab5d5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\yulolewekeki_yumowep\d.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
lstrcpynW
GetConsoleAliasW
GetFileAttributesW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
WriteConsoleOutputCharacterW
SetConsoleTitleA
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
CreateActCtxA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetAltTabInfoA
RealGetWindowClassA
advapi32
BackupEventLogW
Sections
.text Size: 717KB - Virtual size: 717KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
usfive_20210807-233729.exe windows:5 windows x86 arch:x86
89cf9ac1741f99d5220268d9aa83e155
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\sorudexugex\vejit.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
GetConsoleAliasW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
CreateActCtxA
WriteConsoleOutputCharacterW
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
SetConsoleTitleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
RealGetWindowClassA
GetAltTabInfoA
advapi32
BackupEventLogW
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
usfive_20210808-050619.exe windows:5 windows x86 arch:x86
89cf9ac1741f99d5220268d9aa83e155
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\cayiwupam6 h.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
GetConsoleAliasW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
CreateActCtxA
WriteConsoleOutputCharacterW
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
SetConsoleTitleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
RealGetWindowClassA
GetAltTabInfoA
advapi32
BackupEventLogW
Sections
.text Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
usfive_20210808-053738.exe windows:5 windows x86 arch:x86
89cf9ac1741f99d5220268d9aa83e155
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\raguve\cusicatipu\naduso16\mokoh-r.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
GetConsoleAliasW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
CreateActCtxA
WriteConsoleOutputCharacterW
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
SetConsoleTitleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
RealGetWindowClassA
GetAltTabInfoA
advapi32
BackupEventLogW
Sections
.text Size: 370KB - Virtual size: 369KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
usfive_20210808-090122.exe windows:5 windows x86 arch:x86
9ef9b5692972468f136ccb3a25ab5d5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\feloxixa82\dirujahogazuki17-yegubibemi lecicuyozinepi-hikuxo.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
lstrcpynW
GetConsoleAliasW
GetFileAttributesW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
WriteConsoleOutputCharacterW
SetConsoleTitleA
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
CreateActCtxA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetAltTabInfoA
RealGetWindowClassA
advapi32
BackupEventLogW
Sections
.text Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
usfive_20210808-101945.exe windows:5 windows x86 arch:x86
7716a0ae832b8460ad78d4842155ea6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\datacurewix1\fovonozotigir78 mulinij\pif.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
IsBadReadPtr
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
lstrcpynW
GetConsoleAliasW
GetFileAttributesW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
WriteConsoleOutputCharacterW
SetConsoleTitleA
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
PeekConsoleInputA
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
CreateActCtxA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetAltTabInfoA
RealGetWindowClassA
advapi32
BackupEventLogW
Sections
.text Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
usfive_20210808-112226.exe windows:5 windows x86 arch:x86
7716a0ae832b8460ad78d4842155ea6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\luye.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
IsBadReadPtr
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
lstrcpynW
GetConsoleAliasW
GetFileAttributesW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
WriteConsoleOutputCharacterW
SetConsoleTitleA
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
PeekConsoleInputA
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
CreateActCtxA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetAltTabInfoA
RealGetWindowClassA
advapi32
BackupEventLogW
Sections
.text Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
usfive_20210808-120926.exe windows:5 windows x86 arch:x86
7716a0ae832b8460ad78d4842155ea6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\dijodak_tabuhorinamije88_womijonere\kiji59\nucuvulas-s.pdb
Imports
kernel32
lstrlenA
FindResourceExW
LocalCompact
UpdateResourceA
MoveFileExW
GetUserDefaultLCID
SetConsoleScreenBufferSize
WriteConsoleInputA
GetComputerNameW
SetEvent
GetSystemDefaultLCID
GetProcessHeap
IsBadReadPtr
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
GetVolumePathNameW
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
ReadConsoleOutputW
SetConsoleCP
InterlockedPopEntrySList
DnsHostnameToComputerNameW
lstrcpynW
GetConsoleAliasW
GetFileAttributesW
VerifyVersionInfoA
WriteConsoleW
GetMailslotInfo
GetTimeZoneInformation
WriteConsoleOutputCharacterW
SetConsoleTitleA
InterlockedExchange
GetCPInfoExW
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetConsoleDisplayMode
EnterCriticalSection
BuildCommDCBW
LoadLibraryA
GetProfileStringA
GlobalGetAtomNameW
WaitForMultipleObjects
SetEnvironmentVariableA
GetModuleHandleA
lstrcatW
EraseTape
CancelTimerQueueTimer
GetPrivateProfileSectionA
VirtualProtect
GetFileAttributesExW
PeekConsoleInputA
SetCalendarInfoA
EndUpdateResourceA
FindFirstVolumeW
GetCurrentProcessId
GlobalReAlloc
GetSystemTime
AreFileApisANSI
CreateActCtxA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetAltTabInfoA
RealGetWindowClassA
advapi32
BackupEventLogW
Sections
.text Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ