Extracted

• cred.dll

  .dll windows:6 windows x86 arch:x86

  7e8b0331b68a47254f7000efd39b30a8

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  crypt32

  CryptUnprotectData

  kernel32

  GetFullPathNameA

  SetEndOfFile

  UnlockFileEx

  GetTempPathW

  CreateMutexW

  WaitForSingleObject

  CreateFileW

  GetFileAttributesW

  GetCurrentThreadId

  UnmapViewOfFile

  HeapValidate

  HeapSize

  MultiByteToWideChar

  Sleep

  GetTempPathA

  FormatMessageW

  GetDiskFreeSpaceA

  GetLastError

  GetFileAttributesA

  GetFileAttributesExW

  OutputDebugStringW

  CreateFileA

  LoadLibraryA

  WaitForSingleObjectEx

  DeleteFileA

  DeleteFileW

  HeapReAlloc

  CloseHandle

  GetSystemInfo

  LoadLibraryW

  HeapAlloc

  HeapCompact

  HeapDestroy

  UnlockFile

  GetProcAddress

  CreateFileMappingA

  LocalFree

  LockFileEx

  GetFileSize

  DeleteCriticalSection

  GetCurrentProcessId

  GetProcessHeap

  SystemTimeToFileTime

  FreeLibrary

  WideCharToMultiByte

  GetSystemTimeAsFileTime

  GetSystemTime

  FormatMessageA

  CreateFileMappingW

  MapViewOfFile

  QueryPerformanceCounter

  GetTickCount

  FlushFileBuffers

  SetHandleInformation

  FindFirstFileA

  Wow64DisableWow64FsRedirection

  K32GetModuleFileNameExW

  FindNextFileA

  CreatePipe

  PeekNamedPipe

  lstrlenA

  FindClose

  GetCurrentDirectoryA

  lstrcatA

  OpenProcess

  SetCurrentDirectoryA

  CreateToolhelp32Snapshot

  ProcessIdToSessionId

  CopyFileA

  Wow64RevertWow64FsRedirection

  Process32NextW

  Process32FirstW

  CreateThread

  CreateProcessA

  CreateDirectoryA

  ReadConsoleW

  InitializeCriticalSection

  LeaveCriticalSection

  LockFile

  OutputDebugStringA

  GetDiskFreeSpaceW

  WriteFile

  GetFullPathNameW

  EnterCriticalSection

  HeapFree

  HeapCreate

  TryEnterCriticalSection

  ReadFile

  AreFileApisANSI

  SetFilePointer

  SetFilePointerEx

  GetConsoleMode

  GetConsoleOutputCP

  SetEnvironmentVariableW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCommandLineW

  GetCommandLineA

  GetOEMCP

  GetACP

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  SetStdHandle

  GetCurrentDirectoryW

  GetStdHandle

  GetTimeZoneInformation

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  IsDebuggerPresent

  GetStartupInfoW

  GetModuleHandleW

  InitializeSListHead

  LCMapStringEx

  InitializeCriticalSectionEx

  EncodePointer

  DecodePointer

  CompareStringEx

  GetCPInfo

  GetStringTypeW

  RaiseException

  InterlockedFlushSList

  RtlUnwind

  SetLastError

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  ExitThread

  FreeLibraryAndExitThread

  GetModuleHandleExW

  GetDriveTypeW

  GetFileInformationByHandle

  GetFileType

  SystemTimeToTzSpecificLocalTime

  FileTimeToSystemTime

  ExitProcess

  GetModuleFileNameW

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  WriteConsoleW

  advapi32

  GetSidSubAuthority

  RegEnumValueW

  RegEnumKeyA

  RegCloseKey

  RegQueryInfoKeyW

  RegOpenKeyA

  RegQueryValueExA

  GetSidSubAuthorityCount

  RegOpenKeyExA

  GetUserNameA

  RegEnumKeyExW

  LookupAccountNameA

  GetSidIdentifierAuthority

  shell32

  SHFileOperationA

  SHGetFolderPathA

  wininet

  HttpOpenRequestA

  InternetReadFile

  InternetConnectA

  HttpSendRequestA

  InternetCloseHandle

  InternetOpenA

  HttpAddRequestHeadersA

  HttpSendRequestExW

  HttpEndRequestA

  InternetOpenW

  InternetWriteFile

  bcrypt

  BCryptOpenAlgorithmProvider

  BCryptSetProperty

  BCryptGenerateSymmetricKey

  BCryptDecrypt

  Exports

  Exports

  Main

  Save

  Sections

  .text

  Size: 905KB - Virtual size: 904KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 105KB - Virtual size: 104KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 11KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 248B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ