f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89

Sharing

Copy URL Twitter E-mail

General

Target
f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89
Size 2.1MB
Sample260715-allgpaf15p
SHA256 f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89
MD5 af546268e6628869fea10e6dc643bc6d
SHA1 f175c89979826a2de8b0c45a6445c5f2a8f26985
SHA512 c7367c1618c95cb5472aa516c449705ca0a65bc14d33a55ef7856ba930f312ce0e1f8f7266b390d7048fcd04dd72a099fdd42803702451aa9b08849106cded82
SSDEEP 24576:gY68fIjvUv5WtFOuZMeNQJV6MnaX5uoLwKsXnA9b7bXYU4llET:P6LLQUiZi5/w12TJEE
TLSH
T18BA54A45F612E8A0D9339239489FD37E173CBE218462CF53EE95FF4ABD33A912945242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89

File Explorer

f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89

.dll 2.1MB

f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89

IMPHASH 20c5cb2a67be3b8c19fc4e41079e1e28
SHA256 f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89
MD5 af546268e6628869fea10e6dc643bc6d
SHA1 f175c89979826a2de8b0c45a6445c5f2a8f26985
SHA512 c7367c1618c95cb5472aa516c449705ca0a65bc14d33a55ef7856ba930f312ce0e1f8f7266b390d7048fcd04dd72a099fdd42803702451aa9b08849106cded82
SSDEEP 24576:gY68fIjvUv5WtFOuZMeNQJV6MnaX5uoLwKsXnA9b7bXYU4llET:P6LLQUiZi5/w12TJEE
TLSH
T18BA54A45F612E8A0D9339239489FD37E173CBE218462CF53EE95FF4ABD33A912945242
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

624832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

GetTokenInformation InitializeSecurityDescriptor RegCloseKey RegGetValueW RegOpenKeyW

gdi32

BitBlt CombineRgn CreateBitmap CreateBitmapIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateDIBitmap CreateFontIndirectA CreateFontIndirectW CreateFontW CreatePalette CreatePatternBrush CreatePen CreateRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteEnhMetaFile DeleteMetaFile DeleteObject Ellipse ExtCreatePen ExtTextOutW GdiConvertToDevmodeW GdiGetCharDimensions GdiGetCodePage GetBitmapBits GetBkColor GetBkMode GetCharABCWidthsA GetCharABCWidthsW GetCharWidthInfo GetCharWidthW GetClipBox GetClipRgn GetCurrentObject GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileHeader GetGraphicsMode GetLayout GetMetaFileBitsEx GetObjectA GetObjectType GetObjectW GetPaletteEntries GetPixel GetRgnBox GetStockObject GetTextCharsetInfo GetTextColor GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointW GetTextMetricsA GetTextMetricsW GetViewportExtEx GetWinMetaFileBits GetWindowExtEx IntersectClipRect LineTo MoveToEx OffsetViewportOrgEx PatBlt Pie PlayEnhMetaFile Polygon Rectangle ScriptBreak ScriptStringAnalyse ScriptStringCPtoX ScriptStringFree ScriptStringGetLogicalWidths ScriptStringOut ScriptStringXtoCP ScriptString_pSize ScriptString_pcOutChars SelectClipRgn SelectObject SetBkColor SetBkMode SetEnhMetaFileBits SetLayout SetMapMode SetMetaFileBitsEx SetROP2 SetRectRgn SetStretchBltMode SetTextAlign SetTextColor SetWinMetaFileBits SetWindowOrgEx StretchBlt StretchDIBits TextOutA TextOutW UnrealizeObject

kernel32

AddAtomA AddAtomW DelayLoadFailureHook DeleteAtom FindResourceA GetAtomNameA GetAtomNameW GetProfileIntA GlobalAddAtomA GlobalAddAtomW GlobalDeleteAtom GlobalGetAtomNameA GlobalGetAtomNameW GlobalHandle GlobalLock GlobalReAlloc GlobalSize GlobalUnlock IsBadStringPtrA IsBadStringPtrW LocalSize RaiseException ResolveDelayLoadedAPI RtlUnwind WinExec

kernelbase

CharLowerA CharLowerBuffA CharLowerBuffW CharLowerW CharNextA CharNextExA CharNextW CharPrevA CharPrevExA CharPrevW CharUpperA CharUpperBuffA CharUpperBuffW CharUpperW CloseHandle CompareStringW CreateFileMappingW CreateFileW CreateProcessW EnterCriticalSection FindClose FindFirstFileW FindNextFileW FindResourceExW FindResourceW FreeLibrary FreeResource GetCPInfo GetCurrentDirectoryW GetDriveTypeW GetFileSize GetFileVersionInfoSizeW GetFileVersionInfoW GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessVersion GetSystemDirectoryW GetTickCount GetUserDefaultLCID GetUserDefaultLangID GetVersion GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree HeapAlloc HeapFree HeapReAlloc InitOnceExecuteOnce IsCharAlphaA IsCharAlphaNumericA IsCharAlphaNumericW IsCharAlphaW IsCharLowerA IsCharLowerW IsCharUpperA IsCharUpperW IsDBCSLeadByte IsDBCSLeadByteEx IsValidLocale LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFree LocalLock LocalReAlloc LocalUnlock LockResource MapViewOfFile MulDiv MultiByteToWideChar QueryActCtxSettingsW SearchPathW SetCurrentDirectoryW SizeofResource UnmapViewOfFile VerQueryValueW WideCharToMultiByte Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection lstrcmpiA lstrcmpiW

ntdll

LdrGetDllFullName LdrQueryImageFileExecutionOptions NtCallbackReturn NtOpenDirectoryObject RtlAllocateHeap RtlCreateUnicodeStringFromAsciiz RtlFindActivationContextSectionString RtlFreeHeap RtlFreeUnicodeString RtlImageDirectoryEntryToData RtlImageNtHeader RtlImageRvaToVa RtlInitUnicodeString RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlNtStatusToDosError RtlSetLastWin32Error RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize _vsnprintf wine_server_call wine_get_version

sechost

I_ScRegisterDeviceNotification I_ScUnregisterDeviceNotification

ucrtbase

__acrt_iob_func __intrinsic_setjmp __stdio_common_vsprintf __stdio_common_vsscanf __stdio_common_vswprintf _assert _errno _gmtime32 _strdup _wcsicmp abort atof calloc fclose ferror fflush fopen fread free frexp fwrite getenv longjmp malloc memchr memcmp memcpy memmove memset modf pow remove sqrt strchr strcmp strcpy strcspn strerror strlen strtol strtoul towupper wcscat wcschr wcscmp wcscpy wcslen wcspbrk wcsrchr wcsspn wcstoul

win32u

NtUserActivateKeyboardLayout NtUserAddClipboardFormatListener NtUserAttachThreadInput NtUserBeginPaint NtUserCallHwnd NtUserCallHwndParam NtUserCallMsgFilter NtUserCallNextHookEx NtUserCallNoParam NtUserCallOneParam NtUserCallTwoParam NtUserChangeClipboardChain NtUserChangeDisplaySettings NtUserCheckMenuItem NtUserChildWindowFromPointEx NtUserClipCursor NtUserCloseClipboard NtUserCloseDesktop NtUserCloseWindowStation NtUserCopyAcceleratorTable NtUserCountClipboardFormats NtUserCreateAcceleratorTable NtUserCreateCaret NtUserCreateDesktopEx NtUserCreateWindowEx NtUserCreateWindowStation NtUserDeferWindowPosAndBand NtUserDeleteMenu NtUserDestroyAcceleratorTable NtUserDestroyCursor NtUserDestroyMenu NtUserDestroyWindow NtUserDispatchMessage NtUserDisplayConfigGetDeviceInfo NtUserDragDetect NtUserDragObject NtUserDrawCaptionTemp NtUserDrawIconEx NtUserDrawMenuBarTemp NtUserEmptyClipboard NtUserEnableMenuItem NtUserEnableMouseInPointer NtUserEnableScrollBar NtUserEndDeferWindowPosEx NtUserEndMenu NtUserEndPaint NtUserEnumDisplayDevices NtUserEnumDisplayMonitors NtUserEnumDisplaySettings NtUserExcludeUpdateRgn NtUserFindExistingCursorIcon NtUserFindWindowEx NtUserFlashWindowEx NtUserGetAncestor NtUserGetAsyncKeyState NtUserGetCaretBlinkTime NtUserGetCaretPos NtUserGetClassInfoEx NtUserGetClassName NtUserGetClipboardData NtUserGetClipboardFormatName NtUserGetClipboardOwner NtUserGetClipboardSequenceNumber NtUserGetClipboardViewer NtUserGetCursor NtUserGetCursorFrameInfo NtUserGetCursorInfo NtUserGetDC NtUserGetDCEx NtUserGetDisplayConfigBufferSizes NtUserGetDoubleClickTime NtUserGetDpiForMonitor NtUserGetForegroundWindow NtUserGetGUIThreadInfo NtUserGetIconInfo NtUserGetIconSize NtUserGetInternalWindowPos NtUserGetKeyNameText NtUserGetKeyState NtUserGetKeyboardLayout NtUserGetKeyboardLayoutList NtUserGetKeyboardLayoutName NtUserGetKeyboardState NtUserGetLayeredWindowAttributes NtUserGetMenuBarInfo NtUserGetMenuItemRect NtUserGetMessage NtUserGetMouseMovePointsEx NtUserGetObjectInformation NtUserGetOpenClipboardWindow NtUserGetPriorityClipboardFormat NtUserGetProcessDpiAwarenessContext NtUserGetProcessWindowStation NtUserGetProp NtUserGetQueueStatus NtUserGetRawInputBuffer NtUserGetRawInputData NtUserGetRawInputDeviceInfo NtUserGetRawInputDeviceList NtUserGetRegisteredRawInputDevices NtUserGetScrollBarInfo NtUserGetSystemDpiForProcess NtUserGetSystemMenu NtUserGetThreadDesktop NtUserGetTitleBarInfo NtUserGetUpdateRect NtUserGetUpdateRgn NtUserGetUpdatedClipboardFormats NtUserGetWindowDC NtUserGetWindowPlacement NtUserGetWindowRgnEx NtUserHideCaret NtUserHiliteMenuItem NtUserInitializeClientPfnArrays NtUserInternalGetWindowIcon NtUserInternalGetWindowText NtUserInvalidateRect NtUserInvalidateRgn NtUserIsClipboardFormatAvailable NtUserIsMouseInPointerEnabled NtUserKillTimer NtUserLockWindowUpdate NtUserLogicalToPerMonitorDPIPhysicalPoint NtUserMapVirtualKeyEx NtUserMenuItemFromPoint NtUserMessageCall NtUserMoveWindow NtUserMsgWaitForMultipleObjectsEx NtUserNotifyWinEvent NtUserOpenClipboard NtUserOpenDesktop NtUserOpenInputDesktop NtUserOpenWindowStation NtUserPeekMessage NtUserPerMonitorDPIPhysicalToLogicalPoint NtUserPostMessage NtUserPostThreadMessage NtUserPrintWindow NtUserQueryDisplayConfig NtUserRealChildWindowFromPoint NtUserRedrawWindow NtUserRegisterClassExWOW NtUserRegisterHotKey NtUserRegisterRawInputDevices NtUserReleaseDC NtUserRemoveClipboardFormatListener NtUserRemoveMenu NtUserRemoveProp NtUserScrollDC NtUserScrollWindowEx NtUserSendInput NtUserSetActiveWindow NtUserSetCapture NtUserSetClassLong NtUserSetClassLongPtr NtUserSetClassWord NtUserSetClipboardData NtUserSetClipboardViewer NtUserSetCursor NtUserSetCursorIconData NtUserSetCursorPos NtUserSetFocus NtUserSetInternalWindowPos NtUserSetKeyboardState NtUserSetLayeredWindowAttributes NtUserSetMenu NtUserSetMenuContextHelpId NtUserSetMenuDefaultItem NtUserSetObjectInformation NtUserSetParent NtUserSetProcessDpiAwarenessContext NtUserSetProcessWindowStation NtUserSetProp NtUserSetScrollInfo NtUserSetShellWindowEx NtUserSetSysColors NtUserSetSystemMenu NtUserSetSystemTimer NtUserSetThreadDesktop NtUserSetTimer NtUserSetWinEventHook NtUserSetWindowLong NtUserSetWindowLongPtr NtUserSetWindowPlacement NtUserSetWindowPos NtUserSetWindowRgn NtUserSetWindowWord NtUserSetWindowsHookEx NtUserShowCaret NtUserShowCursor NtUserShowScrollBar NtUserShowWindow NtUserShowWindowAsync NtUserSystemParametersInfo NtUserSystemParametersInfoForDpi NtUserThunkedMenuInfo NtUserThunkedMenuItemInfo NtUserToUnicodeEx NtUserTrackMouseEvent NtUserTrackPopupMenuEx NtUserTranslateAccelerator NtUserTranslateMessage NtUserUnhookWinEvent NtUserUnhookWindowsHookEx NtUserUnregisterClass NtUserUnregisterHotKey NtUserUpdateLayeredWindow NtUserValidateRect NtUserVkKeyScanEx NtUserWaitForInputIdle NtUserWaitMessage NtUserWindowFromDC NtUserWindowFromPoint

ActivateKeyboardLayout AddClipboardFormatListener AdjustWindowRect AdjustWindowRectEx AdjustWindowRectExForDpi AlignRects AllowSetForegroundWindow AnimateWindow AnyPopup AppendMenuA AppendMenuW AreDpiAwarenessContextsEqual ArrangeIconicWindows AttachThreadInput BeginDeferWindowPos BeginPaint BlockInput BringWindowToTop BroadcastSystemMessage BroadcastSystemMessageA BroadcastSystemMessageExA BroadcastSystemMessageExW BroadcastSystemMessageW CalcChildScroll CalcMenuBar CallMsgFilter CallMsgFilterA CallMsgFilterW CallNextHookEx CallWindowProcA CallWindowProcW CascadeChildWindows CascadeWindows ChangeClipboardChain ChangeDisplaySettingsA ChangeDisplaySettingsExA ChangeDisplaySettingsExW ChangeDisplaySettingsW ChangeMenuA ChangeMenuW ChangeWindowMessageFilter ChangeWindowMessageFilterEx CharLowerA CharLowerBuffA CharLowerBuffW CharLowerW CharNextA CharNextExA CharNextExW CharNextW CharPrevA CharPrevExA CharPrevExW CharPrevW CharToOemA CharToOemBuffA CharToOemBuffW CharToOemW CharUpperA CharUpperBuffA CharUpperBuffW CharUpperW CheckDlgButton CheckMenuItem CheckMenuRadioItem CheckRadioButton ChildWindowFromPoint ChildWindowFromPointEx CliImmSetHotKey ClientThreadConnect ClientThreadSetup ClientToScreen ClipCursor CloseClipboard CloseDesktop CloseGestureInfoHandle CloseTouchInputHandle CloseWindow CloseWindowStation CopyAcceleratorTableA CopyAcceleratorTableW CopyIcon CopyImage CopyRect CountClipboardFormats CreateAcceleratorTableA CreateAcceleratorTableW CreateCaret CreateCursor CreateDesktopA CreateDesktopW CreateDialogIndirectParamA CreateDialogIndirectParamAorW CreateDialogIndirectParamW CreateDialogParamA CreateDialogParamW CreateIcon CreateIconFromResource CreateIconFromResourceEx CreateIconIndirect CreateMDIWindowA CreateMDIWindowW CreateMenu CreatePopupMenu CreateWindowExA CreateWindowExW CreateWindowStationA CreateWindowStationW DdeAbandonTransaction DdeAccessData DdeAddData DdeClientTransaction DdeCmpStringHandles DdeConnect DdeConnectList DdeCreateDataHandle DdeCreateStringHandleA DdeCreateStringHandleW DdeDisconnect DdeDisconnectList DdeEnableCallback DdeFreeDataHandle DdeFreeStringHandle DdeGetData DdeGetLastError DdeGetQualityOfService DdeImpersonateClient DdeInitializeA DdeInitializeW DdeKeepStringHandle DdeNameService DdePostAdvise DdeQueryConvInfo DdeQueryNextServer DdeQueryStringA DdeQueryStringW DdeReconnect DdeSetQualityOfService DdeSetUserHandle DdeUnaccessData DdeUninitialize DefDlgProcA DefDlgProcW DefFrameProcA DefFrameProcW DefMDIChildProcA DefMDIChildProcW DefRawInputProc DefWindowProcA DefWindowProcW DeferWindowPos DeleteMenu DeregisterShellHookWindow DestroyAcceleratorTable DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamA DialogBoxIndirectParamAorW DialogBoxIndirectParamW DialogBoxParamA DialogBoxParamW DisableProcessWindowsGhosting DispatchMessageA DispatchMessageW DisplayConfigGetDeviceInfo DlgDirListA DlgDirListComboBoxA DlgDirListComboBoxW DlgDirListW DlgDirSelectComboBoxExA DlgDirSelectComboBoxExW DlgDirSelectExA DlgDirSelectExW DragDetect DragObject DrawAnimatedRects DrawCaption DrawCaptionTempA DrawCaptionTempW DrawEdge DrawFocusRect DrawFrame DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawMenuBarTemp DrawStateA DrawStateW DrawTextA DrawTextExA DrawTextExW DrawTextW EditWndProc EmptyClipboard EnableMenuItem EnableMouseInPointer EnableNonClientDpiScaling EnableScrollBar EnableWindow EndDeferWindowPos EndDialog EndMenu EndPaint EndTask EnumChildWindows EnumClipboardFormats EnumDesktopWindows EnumDesktopsA EnumDesktopsW EnumDisplayDeviceModesA EnumDisplayDeviceModesW EnumDisplayDevicesA EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsA EnumDisplaySettingsExA EnumDisplaySettingsExW EnumDisplaySettingsW EnumPropsA EnumPropsExA EnumPropsExW EnumPropsW EnumThreadWindows EnumWindowStationsA EnumWindowStationsW EnumWindows EqualRect ExcludeUpdateRgn ExitWindowsEx FillRect FindWindowA FindWindowExA FindWindowExW FindWindowW FlashWindow FlashWindowEx FrameRect FreeDDElParam GetActiveWindow GetAltTabInfo GetAltTabInfoA GetAltTabInfoW GetAncestor GetAppCompatFlags GetAppCompatFlags2 GetAsyncKeyState GetAutoRotationState GetAwarenessFromDpiAwarenessContext GetCapture GetCaretBlinkTime GetCaretPos GetClassInfoA GetClassInfoExA GetClassInfoExW GetClassInfoW GetClassLongA GetClassLongW GetClassNameA GetClassNameW GetClassWord GetClientRect GetClipCursor GetClipboardData GetClipboardFormatNameA GetClipboardFormatNameW GetClipboardOwner GetClipboardSequenceNumber GetClipboardViewer GetComboBoxInfo GetCurrentInputMessageSource GetCursor GetCursorFrameInfo GetCursorInfo GetCursorPos GetDC GetDCEx GetDesktopWindow GetDialogBaseUnits GetDisplayAutoRotationPreferences GetDisplayConfigBufferSizes GetDlgCtrlID GetDlgItem GetDlgItemInt GetDlgItemTextA GetDlgItemTextW GetDoubleClickTime GetDpiForMonitorInternal GetDpiForSystem GetDpiForWindow GetFocus GetForegroundWindow GetGUIThreadInfo GetGestureConfig GetGestureExtraArgs GetGestureInfo GetGuiResources GetIconInfo GetIconInfoExA GetIconInfoExW GetInputDesktop GetInputState GetInternalWindowPos GetKBCodePage GetKeyNameTextA GetKeyNameTextW GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardLayoutNameA GetKeyboardLayoutNameW GetKeyboardState GetKeyboardType GetLastActivePopup GetLastInputInfo GetLayeredWindowAttributes GetListBoxInfo GetMenu GetMenuBarInfo GetMenuCheckMarkDimensions GetMenuContextHelpId GetMenuDefaultItem GetMenuIndex GetMenuInfo GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuItemInfoW GetMenuItemRect GetMenuState GetMenuStringA GetMenuStringW GetMessageA GetMessageExtraInfo GetMessagePos GetMessageTime GetMessageW GetMonitorInfoA GetMonitorInfoW GetMouseMovePointsEx GetNextDlgGroupItem GetNextDlgTabItem GetOpenClipboardWindow GetParent GetPhysicalCursorPos GetPointerDevices GetPointerInfo GetPointerTouchInfo GetPointerTouchInfoHistory GetPointerType GetPriorityClipboardFormat GetProcessDefaultLayout GetProcessDpiAwarenessInternal GetProcessWindowStation GetProgmanWindow GetPropA GetPropW GetQueueStatus GetRawInputBuffer GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceInfoW GetRawInputDeviceList GetRegisteredRawInputDevices GetScrollBarInfo GetScrollInfo GetScrollPos GetScrollRange GetShellWindow GetSubMenu GetSysColor GetSysColorBrush GetSystemDpiForProcess GetSystemMenu GetSystemMetrics GetSystemMetricsForDpi GetTabbedTextExtentA GetTabbedTextExtentW GetTaskmanWindow GetThreadDesktop GetThreadDpiAwarenessContext GetThreadDpiHostingBehavior GetTitleBarInfo GetTopWindow GetTouchInputInfo GetUpdateRect GetUpdateRgn GetUpdatedClipboardFormats GetUserObjectInformationA GetUserObjectInformationW GetUserObjectSecurity GetWindow GetWindowContextHelpId GetWindowDC GetWindowDisplayAffinity GetWindowDpiAwarenessContext GetWindowDpiHostingBehavior GetWindowInfo GetWindowLongA GetWindowLongW GetWindowModuleFileName GetWindowModuleFileNameA GetWindowModuleFileNameW GetWindowPlacement GetWindowRect GetWindowRgn GetWindowRgnBox GetWindowTextA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId GetWindowWord GrayStringA GrayStringW HideCaret HiliteMenuItem ImpersonateDdeClientWindow InSendMessage InSendMessageEx InflateRect InsertMenuA InsertMenuItemA InsertMenuItemW InsertMenuW InternalGetWindowIcon InternalGetWindowText IntersectRect InvalidateRect InvalidateRgn InvertRect IsCharAlphaA IsCharAlphaNumericA IsCharAlphaNumericW IsCharAlphaW IsCharLowerA IsCharLowerW IsCharUpperA IsCharUpperW IsChild IsClipboardFormatAvailable IsDialogMessage IsDialogMessageA IsDialogMessageW IsDlgButtonChecked IsGUIThread IsHungAppWindow IsIconic IsMenu IsMouseInPointerEnabled IsProcessDPIAware IsRectEmpty IsTouchWindow IsValidDpiAwarenessContext IsWinEventHookInstalled IsWindow IsWindowEnabled IsWindowRedirectedForPrint IsWindowUnicode IsWindowVisible IsZoomed KillSystemTimer KillTimer LoadAcceleratorsA LoadAcceleratorsW LoadBitmapA LoadBitmapW LoadCursorA LoadCursorFromFileA LoadCursorFromFileW LoadCursorW LoadIconA LoadIconW LoadImageA LoadImageW LoadKeyboardLayoutA LoadKeyboardLayoutW LoadLocalFonts LoadMenuA LoadMenuIndirectA LoadMenuIndirectW LoadMenuW LoadRemoteFonts LoadStringA LoadStringW LockSetForegroundWindow LockWindowStation LockWindowUpdate LockWorkStation LogicalToPhysicalPoint LogicalToPhysicalPointForPerMonitorDPI LookupIconIdFromDirectory LookupIconIdFromDirectoryEx MBToWCSEx MapDialogRect MapVirtualKeyA MapVirtualKeyExA MapVirtualKeyExW MapVirtualKeyW MapWindowPoints MenuItemFromPoint MenuWindowProcA MenuWindowProcW MessageBeep MessageBoxA MessageBoxExA MessageBoxExW MessageBoxIndirectA MessageBoxIndirectW MessageBoxTimeoutA MessageBoxTimeoutW MessageBoxW ModifyMenuA ModifyMenuW MonitorFromPoint MonitorFromRect MonitorFromWindow MoveWindow MsgWaitForMultipleObjects MsgWaitForMultipleObjectsEx NotifyWinEvent OemKeyScan OemToCharA OemToCharBuffA OemToCharBuffW OemToCharW OffsetRect OpenClipboard OpenDesktopA OpenDesktopW OpenIcon OpenInputDesktop OpenWindowStationA OpenWindowStationW PackDDElParam PaintDesktop PeekMessageA PeekMessageW PhysicalToLogicalPoint PhysicalToLogicalPointForPerMonitorDPI PlaySoundEvent PostMessageA PostMessageW PostQuitMessage PostThreadMessageA PostThreadMessageW PrintWindow PrivateExtractIconExA PrivateExtractIconExW PrivateExtractIconsA PrivateExtractIconsW PtInRect QueryDisplayConfig QuerySendMessage RealChildWindowFromPoint RealGetWindowClass RealGetWindowClassA RealGetWindowClassW RedrawWindow RegisterClassA RegisterClassExA RegisterClassExW RegisterClassW RegisterClipboardFormatA RegisterClipboardFormatW RegisterDeviceNotificationA RegisterDeviceNotificationW RegisterHotKey RegisterLogonProcess RegisterNetworkCapabilities RegisterPointerDeviceNotifications RegisterPowerSettingNotification RegisterRawInputDevices RegisterServicesProcess RegisterShellHookWindow RegisterSuspendResumeNotification RegisterSystemThread RegisterTasklist RegisterTouchHitTestingWindow RegisterTouchWindow RegisterUserApiHook RegisterWindowMessageA RegisterWindowMessageW ReleaseCapture ReleaseDC RemoveClipboardFormatListener RemoveMenu RemovePropA RemovePropW ReplyMessage ResetDisplay ReuseDDElParam ScreenToClient ScrollChildren ScrollDC ScrollWindow ScrollWindowEx SendDlgItemMessageA SendDlgItemMessageW SendIMEMessageExA SendIMEMessageExW SendInput SendMessageA SendMessageCallbackA SendMessageCallbackW SendMessageTimeoutA SendMessageTimeoutW SendMessageW SendNotifyMessageA SendNotifyMessageW ServerSetFunctionPointers SetActiveWindow SetCapture SetCaretBlinkTime SetCaretPos SetClassLongA SetClassLongW SetClassWord SetClipboardData SetClipboardViewer SetCoalescableTimer SetCursor SetCursorContents SetCursorPos SetDebugErrorLevel SetDeskWallpaper SetDisplayAutoRotationPreferences SetDisplayConfig SetDlgItemInt SetDlgItemTextA SetDlgItemTextW SetDoubleClickTime SetFocus SetForegroundWindow SetGestureConfig SetInternalWindowPos SetKeyboardState SetLastErrorEx SetLayeredWindowAttributes SetLogonNotifyWindow SetMenu SetMenuContextHelpId SetMenuDefaultItem SetMenuInfo SetMenuItemBitmaps SetMenuItemInfoA SetMenuItemInfoW SetMessageExtraInfo SetMessageQueue SetParent SetPhysicalCursorPos SetProcessDPIAware SetProcessDefaultLayout SetProcessDpiAwarenessContext SetProcessDpiAwarenessInternal SetProcessWindowStation SetProgmanWindow SetPropA SetPropW SetRect SetRectEmpty SetScrollInfo SetScrollPos SetScrollRange SetShellWindow SetShellWindowEx SetSysColors SetSysColorsTemp SetSystemCursor SetSystemMenu SetSystemTimer SetTaskmanWindow SetThreadDesktop SetThreadDpiAwarenessContext SetThreadDpiHostingBehavior SetTimer SetUserObjectInformationA SetUserObjectInformationW SetUserObjectSecurity SetWinEventHook SetWindowCompositionAttribute SetWindowContextHelpId SetWindowDisplayAffinity SetWindowLongA SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowStationUser SetWindowTextA SetWindowTextW SetWindowWord SetWindowsHookA SetWindowsHookExA SetWindowsHookExW SetWindowsHookW ShowCaret ShowCursor ShowOwnedPopups ShowScrollBar ShowStartGlass ShowWindow ShowWindowAsync ShutdownBlockReasonCreate ShutdownBlockReasonDestroy SubtractRect SwapMouseButton SwitchDesktop SwitchToThisWindow SystemParametersInfoA SystemParametersInfoForDpi SystemParametersInfoW TabbedTextOutA TabbedTextOutW TileChildWindows TileWindows ToAscii ToAsciiEx ToUnicode ToUnicodeEx TrackMouseEvent TrackPopupMenu TrackPopupMenuEx TranslateAccelerator TranslateAcceleratorA TranslateAcceleratorW TranslateMDISysAccel TranslateMessage UnhookWinEvent UnhookWindowsHook UnhookWindowsHookEx UnionRect UnloadKeyboardLayout UnlockWindowStation UnpackDDElParam UnregisterClassA UnregisterClassW UnregisterDeviceNotification UnregisterHotKey UnregisterPowerSettingNotification UnregisterSuspendResumeNotification UnregisterTouchWindow UnregisterUserApiHook UpdateLayeredWindow UpdateLayeredWindowIndirect UpdatePerUserSystemParameters UpdateWindow User32InitializeImmEntryTable UserClientDllInitialize UserHandleGrantAccess UserRealizePalette UserRegisterWowHandlers UserSignalProc ValidateRect ValidateRgn VkKeyScanA VkKeyScanExA VkKeyScanExW VkKeyScanW WCSToMBEx WINNLSEnableIME WINNLSGetEnableStatus WINNLSGetIMEHotkey WNDPROC_CALLBACK WaitForInputIdle WaitMessage WinHelpA WinHelpW WindowFromDC WindowFromPhysicalPoint WindowFromPoint keybd_event mouse_event wsprintfA wsprintfW wvsprintfA wvsprintfW

Name

.text

Size

612KB

Virtual Size

609KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

72KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

100KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

24KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

20KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

928KB

Virtual Size

924KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89

advapi32

gdi32

kernel32

kernelbase

ntdll

sechost

ucrtbase

win32u

generic