9e7c4e0e46ef8f33fc434985fad8b70956ece9bc83689b46ef264159f48209ba

Sharing

Copy URL Twitter E-mail

General

Target
9e7c4e0e46ef8f33fc434985fad8b70956ece9bc83689b46ef264159f48209ba
Size 6.3MB
Sample260310-exdcnsay9w
SHA256 9e7c4e0e46ef8f33fc434985fad8b70956ece9bc83689b46ef264159f48209ba
MD5 7e163160ad4b35cdbda6d24404d268ef
SHA1 03f2efd2d9ad47fc03565551091b9674577c5518
SHA512 d16a730e5cdb5fedfc7d512bf1dfa7aab8e58b062fa616da6094ca485efc8a7adc5ae087dabd836b19a9856769caf720606b511606405f471337368eba4604d1
SSDEEP 196608:cGEywNdtTs2+uU96mDXBw/7g+qd9+yAoNq4BHIVOG6V:sywNd1Hw96mrBw/7s+yASq4BHhfV
TLSH
T1D066336A74CC5798DAEF9C516164B0F4A2A5154A3EF6248286F37433BAD70CF5E30C8B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SbieDll.dll

Untrusted Codesign Signers 1 IoCs

Codesigned binary was signed by an untrusted entity.

resource
unpack001/bulk quick order 2025.exe

File Explorer

9e7c4e0e46ef8f33fc434985fad8b70956ece9bc83689b46ef264159f48209ba

.zip 6.3MB
SbieDll.dll

.dll 15.3MB
bulk quick order 2025.exe

.exe 119KB
concrt141.dll

468KB

9e7c4e0e46ef8f33fc434985fad8b70956ece9bc83689b46ef264159f48209ba

SHA256 9e7c4e0e46ef8f33fc434985fad8b70956ece9bc83689b46ef264159f48209ba
MD5 7e163160ad4b35cdbda6d24404d268ef
SHA1 03f2efd2d9ad47fc03565551091b9674577c5518
SHA512 d16a730e5cdb5fedfc7d512bf1dfa7aab8e58b062fa616da6094ca485efc8a7adc5ae087dabd836b19a9856769caf720606b511606405f471337368eba4604d1
SSDEEP 196608:cGEywNdtTs2+uU96mDXBw/7g+qd9+yAoNq4BHIVOG6V:sywNd1Hw96mrBw/7s+yASq4BHhfV
TLSH
T1D066336A74CC5798DAEF9C516164B0F4A2A5154A3EF6248286F37433BAD70CF5E30C8B
MD5 SHA1 SHA512 SSDEEP TLSH

SbieDll.dll

IMPHASH 9aeb03cefa4cd961c89af0ad9b420411
SHA256 0b2f7eb45c4eede5a3cfe9d47ce56865caaac0339b345fd0801611e93db665de
MD5 f44b9c97ed9ac03f4a3c21854430a341
SHA1 ca4db130a49be215909ff15513ceba91fe5c067a
SHA512 9a6c768fcb15dc6494a96e56e66665ee33a970dbefc82fc58b36559b7484f1b7f20d3565c620100625368b88ff14672fd926722746848b58d6607c96e1a29848
SSDEEP 98304:3jccBR1X721QV/2tNWfCgbS0QRKFxxtcLy9NgS14nE:3gcBn5eNg/buRy9cLy9w
TLSH
T162F63A70C39151A1D197C470CE954FF865E1787B803A5D0D1AC4F8AA3AFEF21AF9D2A2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

545764

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegEnumKeyExW RegEnumValueW GetTokenInformation OpenThreadToken RevertToSelf ImpersonateLoggedOnUser RegCreateKeyExW RegSetValueExW

bcrypt

BCryptOpenAlgorithmProvider BCryptImportKeyPair BCryptImportKey BCryptHashData BCryptGetProperty BCryptFinishHash BCryptExportKey BCryptDecrypt BCryptEncrypt BCryptCreateHash BCryptDestroyKey BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptGenRandom BCryptSetProperty

crypt32

PFXImportCertStore PFXExportCertStore CryptQueryObject CryptMsgGetParam CryptMsgClose CryptImportPublicKeyInfoEx2 CryptFormatObject CryptDecodeObject CertVerifyTimeValidity CertSetCertificateContextProperty CertSerializeCertificateStoreElement CertSaveStore CertOpenStore CertNameToStrW CertGetValidUsages CertGetNameStringW CertVerifyCertificateChainPolicy CertFreeCertificateContext CertEnumCertificatesInStore CertDuplicateCertificateContext CertGetCertificateContextProperty CryptProtectMemory CryptUnprotectMemory CertFreeCertificateChainEngine CryptFindOIDInfo CertAddCertificateContextToStore CertAddCertificateLinkToStore CertCloseStore CertControlStore CertCreateCertificateChainEngine CertFindCertificateInStore CertFindExtension CertFreeCertificateChain CertGetCertificateChain CertGetIntendedKeyUsage

iphlpapi

GetAdaptersAddresses GetNetworkParams GetPerAdapterInfo if_nametoindex

kernel32

InterlockedFlushSList RtlPcToFileHeader RaiseException RtlUnwindEx InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter EncodePointer IsDebuggerPresent FormatMessageW GetCPInfoExW GetConsoleCP GetConsoleOutputCP GetStdHandle MultiByteToWideChar WideCharToMultiByte GetConsoleScreenBufferInfo GetConsoleMode GetFileType ReadFile ReadConsoleW SetConsoleTextAttribute SetConsoleTitleW WriteFile WriteConsoleW GetCurrentProcess K32EnumProcessModulesEx CloseHandle IsWow64Process GetExitCodeProcess TerminateProcess OpenProcess K32EnumProcesses K32GetModuleInformation K32GetModuleBaseNameW K32GetModuleFileNameExW GetProcessId DuplicateHandle LoadLibraryExW CancelIoEx RaiseFailFastException GetTickCount64 GetProcAddress FindNLSStringEx CompareStringEx FindStringOrdinal GetUserPreferredUILanguages InitializeConditionVariable WakeConditionVariable CreateThreadpoolTimer SetThreadpoolTimer CloseThreadpoolIo CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FileTimeToSystemTime GetLastError GetCPInfo GetCurrentProcessId GetCurrentThreadId GetSystemTime LocalAlloc LocalFree QueryPerformanceCounter QueryPerformanceFrequency SetLastError SystemTimeToFileTime WaitForMultipleObjectsEx WaitForSingleObject GetCurrentThread TzSpecificLocalTimeToSystemTime Sleep LocaleNameToLCID LCMapStringEx CompareStringOrdinal GetLocaleInfoEx EnumTimeFormatsEx GetCalendarInfoEx EnumCalendarInfoExEx ResolveLocaleName CancelSynchronousIo CreateIoCompletionPort SleepConditionVariableCS CopyFileExW CreateDirectoryW CreateFileW CreateThreadpoolIo StartThreadpoolIo CancelThreadpoolIo WaitForThreadpoolWaitCallbacks DeleteFileW DeviceIoControl ExpandEnvironmentStringsW FindClose FindFirstFileExW FlushFileBuffers FreeLibrary GetFileAttributesExW GetFileInformationByHandleEx GetFullPathNameW GetLongPathNameW GetModuleFileNameW GetOverlappedResult GetSystemDirectoryW OpenThread QueryUnbiasedInterruptTime SetFileInformationByHandle SetThreadErrorMode CreateThread ResumeThread GetThreadPriority SetThreadPriority GetDynamicTimeZoneInformation GetTimeZoneInformation GetCurrentProcessorNumberEx SetEvent ResetEvent CreateEventExW GetEnvironmentVariableW FreeConsole AllocConsole SetThreadContext CreateProcessW GetThreadContext VirtualAllocEx FlushProcessWriteBuffers WaitForSingleObjectEx RtlVirtualUnwind RtlCaptureContext RtlRestoreContext AddVectoredExceptionHandler FlsAlloc FlsGetValue FlsSetValue CreateEventW SwitchToThread SuspendThread FlushInstructionCache VirtualAlloc VirtualProtect VirtualFree QueryInformationJobObject GetModuleHandleW GetModuleHandleExW GetProcessAffinityMask InitializeContext GetEnabledXStateFeatures SetXStateFeaturesMask VirtualQuery GetSystemTimeAsFileTime InitializeCriticalSectionEx DebugBreak SleepEx GlobalMemoryStatusEx GetSystemInfo GetLogicalProcessorInformation GetLogicalProcessorInformationEx GetLargePageMinimum VirtualUnlock VirtualAllocExNuma IsProcessInJob GetNumaHighestNodeNumber GetProcessGroupAffinity K32GetProcessMemoryInfo RtlLookupFunctionEntry InitializeSListHead

ncrypt

NCryptFreeObject NCryptImportKey NCryptDeleteKey NCryptOpenStorageProvider NCryptGetProperty NCryptSetProperty NCryptOpenKey

ole32

CoInitializeEx CoUninitialize CoTaskMemFree CoGetApartmentType CoCreateGuid CoWaitForMultipleHandles CoTaskMemAlloc

user32

LoadStringW

ws2_32

WSAGetOverlappedResult WSAConnect shutdown setsockopt send WSARecv recv ioctlsocket getsockopt getpeername bind WSAIoctl select WSASend WSAStartup WSACleanup FreeAddrInfoExW closesocket GetNameInfoW GetAddrInfoW FreeAddrInfoW WSASocketW GetAddrInfoExW WSAEventSelect

api-ms-win-crt-math-l1-1-0

ceil cos floor log10 pow sin sqrt tan modf

api-ms-win-crt-heap-l1-1-0

_callnewh calloc malloc free

api-ms-win-crt-string-l1-1-0

strcpy_s _stricmp strcmp wcsncmp strncpy_s

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _initialize_onexit_table _initterm_e _register_onexit_function _execute_onexit_table _crt_atexit _seh_filter_dll _cexit _configure_narrow_argv terminate abort _initterm

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s __stdio_common_vsscanf __stdio_common_vfprintf __acrt_iob_func

BestFitMaskUtf16XmlReleaseMutex ByteViewNumericFormatgetChannel ClearShadowCopyPathIsGenericMethodParameterSECURITYATTRIBUTES ConsoleApplicationTaskStartTaskCompletedgetScheduledExclusive CustomAttributeBuildercDisplayClass19AddOrUpdate DYMgetIsMetricArgumentOutOfRangeNeedNonNegNum ExtractMostSignificantBitsBindingFlagsUTF32Decoder FileBasicInformationCalliGetPropertyGetter File_GetName GreaterThanOrEqualX86SerializeWiden HijriEraWriteSignificandLittleEndiangetCategory IsUnknownSurrogateRTSpecialNameIObservable1 Key_GetName MaximumConcurrencyLevelInterfaceIsIDispatchPow2 OrNoneViaConstructorIDictionaryEnumerator PreserveSigAttributeAccessedThroughPropertyAttributeMemoryPressure RegisterForFullGCNotificationReflectionOnlyLoadFileIdExtdBothDirectoryInformation SbieApi_Call SbieApi_CheckInternetAccess SbieApi_DisableForceProcess SbieApi_EnumBoxes SbieApi_EnumBoxesEx SbieApi_EnumProcessEx SbieApi_GetBlockedDll SbieApi_GetFileName SbieApi_GetHomePath SbieApi_GetMessage SbieApi_GetUnmountHive SbieApi_GetVersion SbieApi_GetVersionEx SbieApi_HookTramp SbieApi_Ioctl SbieApi_IsBoxEnabled SbieApi_Log SbieApi_LogEx SbieApi_LogMsgEx SbieApi_LogMsgExt SbieApi_MonitorControl SbieApi_MonitorGetEx SbieApi_MonitorPut SbieApi_MonitorPut2 SbieApi_MonitorPut2Ex SbieApi_MonitorPutEx SbieApi_MonitorPutMsg SbieApi_OpenProcess SbieApi_ProcessExemptionControl SbieApi_QueryBoxPath SbieApi_QueryConf SbieApi_QueryConfBool SbieApi_QueryConfNumber SbieApi_QueryConfNumber64 SbieApi_QueryDrvInfo SbieApi_QueryPathList SbieApi_QueryProcess SbieApi_QueryProcessEx SbieApi_QueryProcessEx2 SbieApi_QueryProcessInfo SbieApi_QueryProcessInfoEx SbieApi_QueryProcessInfoStr SbieApi_QueryProcessPath SbieApi_ReloadConf SbieApi_SessionLeader SbieApi_SetUserName SbieApi_vLogEx SbieDll_AssocQueryCommand SbieDll_AssocQueryProgram SbieDll_CallProxySvr SbieDll_CallServer SbieDll_CallServerQueue SbieDll_CheckPatternInList SbieDll_CheckProcessLocalSystem SbieDll_CheckStringInList SbieDll_CheckStringInListA SbieDll_ComCreateProxy SbieDll_ComCreateStub SbieDll_DeviceChange SbieDll_DisableCHPE SbieDll_DisableElevationHook SbieDll_ExpandAndRunProgram SbieDll_FindArgumentEnd SbieDll_FormatMessage SbieDll_FormatMessage0 SbieDll_FormatMessage1 SbieDll_FormatMessage2 SbieDll_FreeMem SbieDll_GetBorderColor SbieDll_GetDrivePath SbieDll_GetHandlePath SbieDll_GetLanguage SbieDll_GetPublicSD SbieDll_GetServiceRegistryValue SbieDll_GetSettingsForName SbieDll_GetSettingsForName_bool SbieDll_GetStartError SbieDll_GetStringForStringList SbieDll_GetStringsForStringList SbieDll_GetSysFunction SbieDll_GetTokenElevationType SbieDll_GetUserPathEx SbieDll_Hook SbieDll_HookInit SbieDll_InitPStore SbieDll_InjectLow SbieDll_InjectLow_InitHelper SbieDll_InjectLow_InitSyscalls SbieDll_InjectLow_SendHandle SbieDll_IsBoxedService SbieDll_IsDirectory SbieDll_IsDllSkipHook SbieDll_IsOpenCOM SbieDll_IsOpenClsid SbieDll_IsReservedFileName SbieDll_KillAll SbieDll_KillOne SbieDll_MatchImage SbieDll_MatchPathImpl SbieDll_Mount SbieDll_OpenProcess SbieDll_PortName SbieDll_QueryConf SbieDll_QueryFileAttributes SbieDll_QueueCreate SbieDll_QueueGetReq SbieDll_QueueGetRpl SbieDll_QueuePutReq SbieDll_QueuePutRpl SbieDll_RegisterDllCallback SbieDll_RunFromHome SbieDll_RunSandboxed SbieDll_RunStartExe SbieDll_SetFakeAdmin SbieDll_StartBoxedService SbieDll_StartCOM SbieDll_StartSbieSvc SbieDll_TraceModule SbieDll_TranslateNtToDosPath SbieDll_UnHookModule SbieDll_Unmount SbieDll_UpdateConf Sbie_snprintf Sbie_snwprintf Scm_HookCloseServiceHandle Scm_HookControlService Scm_HookOpenServiceW Scm_HookQueryServiceStatus Scm_HookQueryServiceStatusEx Scm_HookSetServiceStatus Scm_HookStartServiceCtrlDispatcherW Scm_HookStartServiceW ThreadPoolWorkingThreadCountWorkingSetSizesetNumberGroupSizes TimeZoneUtcMessageSendFunctionfilePosition corehosterrorwriterfnComposedOfNoStaticMembersICastable kernelTimeSustainedLowLatencyFromException setPositiongetFilterOffsetinvkind

Name

.text

Size

566KB

Virtual Size

566KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.managed

Size

9.2MB

Virtual Size

9.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

hydrated

Size

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4.8MB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

37KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

643KB

Virtual Size

643KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

bulk quick order 2025.exe

IMPHASH 56493b98a1e53add4f09af2e5ead93ec
SHA256 39cd0acf3f09b635c0d1324e3245cee6bbfa5301b3d319b53fcfea660414e07b
MD5 f91f23eb34ba3884e2628527817fd942
SHA1 7ab4bceb4c0c1710f49f6eacd06472d3cc67939a
SHA512 da3bd0018cba57b9dd5c8d353caf993b54c5f8670ba8ecbb4bbff3434614ef8049035db68405560a4ce24000f425e00edbdc76806958e398efe3d0d0b894c490
SSDEEP 3072:2fTLB26sk5Yy8mQVf7ToyUZWYn6ySlpRrk:2fx26sk5XQVDThKybI
TLSH
T16EC37C4BB7E834F9E5B78678C4510A06D772B8320B609BAF07A443561F237919E3AF71
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

68:7e:8f:69:17:45:04:23:b1:d2:55:20:9c:e4:68:88:d9:53:8f:b7:ee:0d:02:45:34:9f:74:51:d3:e2:29:d5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=475036h,CN=Tonalio GmbH,O=Tonalio GmbH,STREET=Badner Strasse 8,L=Bad Voeslau,ST=Niederösterreich,C=AT,1.2.840.113549.1.9.1=#0c106365727440746f6e616c696f2e636f6d,1.3.6.1.4.1.311.60.2.1.1=#130f5769656e6572204e65757374616474,1.3.6.1.4.1.311.60.2.1.2=#13114e69656465726f65737465727265696368,1.3.6.1.4.1.311.60.2.1.3=#13024154,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 1, 2025

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

30:e4:c5:b0:c5:d7:7d:c1:5f:fa:ca:77

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 31, 2023 - Nov 30, 2026

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

5912

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\Sandboxie\Sandboxie\Sandboxie\Bin\x64\SbieRelease\SandboxieWUAU.pdb

sbiedll

SbieDll_Hook SbieApi_EnumProcessEx SbieApi_QueryProcess

ntdll

RtlVirtualUnwind RtlUnwindEx RtlPcToFileHeader RtlCaptureContext RtlLookupFunctionEntry

kernel32

FlsSetValue FlsGetValue FlsAlloc FlsFree SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WriteConsoleW CreateFileW GetConsoleMode GetConsoleOutputCP GetStringTypeW EnterCriticalSection FlushFileBuffers HeapReAlloc HeapSize HeapFree SetLastError GetCurrentThreadId GetVersionExW GetLastError CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetCurrentProcessId GetProcessHeap CreateProcessW GetModuleHandleW WideCharToMultiByte SetFilePointerEx LCMapStringW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent MultiByteToWideChar LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW

Name

.text

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

9e7c4e0e46ef8f33fc434985fad8b70956ece9bc83689b46ef264159f48209ba

SbieDll.dll

advapi32

bcrypt

crypt32

iphlpapi

kernel32

ncrypt

ole32

user32

ws2_32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

generic

bulk quick order 2025.exe

PE Signature issue

sbiedll

ntdll

kernel32

generic

concrt141.dll