2026-08-09_fb749a7627921ed861b998491086269c_bkransomware_darkgate_elex_hijackloader_maze_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_fb749a7627921ed861b998491086269c_bkransomware_darkgate_elex_hijackloader_maze_remcos
Size 14.4MB
Sample260809-zf3apacd52
SHA256 df3770b6cdb6277e35dd9eb61accf8828c8ea3e9fde64ba56d869f2f23584b4f
MD5 fb749a7627921ed861b998491086269c
SHA1 f66deb660afb303d921ab335323b091e0fef7026
SHA512 5567294a86fff3c79490b46c3367f76d5e99999303b6a0c91665518e62a32f5e3569277d542a0042bfd59889379dbf212731df56fc10560ce47cce73c614e158
SSDEEP 196608:tUiptfQlHVrwtRIEqBwzF2f0jjNYEfgeXS:XptfW9wteEqORYte
TLSH
T1A3E65B01FACA4075CE7702718A59AAEE03ED1E6D17212BDF516CF96938311C1B83AF67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_fb749a7627921ed861b998491086269c_bkransomware_darkgate_elex_hijackloader_maze_remcos

File Explorer

2026-08-09_fb749a7627921ed861b998491086269c_bkransomware_darkgate_elex_hijackloader_maze_remcos

.exe 14.4MB

2026-08-09_fb749a7627921ed861b998491086269c_bkransomware_darkgate_elex_hijackloader_maze_remcos

IMPHASH 7c3f457b44cd466fd956784fa92ad932
SHA256 df3770b6cdb6277e35dd9eb61accf8828c8ea3e9fde64ba56d869f2f23584b4f
MD5 fb749a7627921ed861b998491086269c
SHA1 f66deb660afb303d921ab335323b091e0fef7026
SHA512 5567294a86fff3c79490b46c3367f76d5e99999303b6a0c91665518e62a32f5e3569277d542a0042bfd59889379dbf212731df56fc10560ce47cce73c614e158
SSDEEP 196608:tUiptfQlHVrwtRIEqBwzF2f0jjNYEfgeXS:XptfW9wteEqORYte
TLSH
T1A3E65B01FACA4075CE7702718A59AAEE03ED1E6D17212BDF516CF96938311C1B83AF67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6559938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Work\PLAY\GOMPlayer\2504\Player\project\GOMPlayer\map_pdb\GOM32R_vc120_ReleaseU.pdb

kernel32

GetTimeZoneInformation ReadConsoleW UnregisterWaitEx QueryDepthSList InterlockedFlushSList FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber ChangeTimerQueueTimer GetLogicalProcessorInformation SignalObjectAndWait MoveFileA SetFileAttributesA CreateDirectoryA GetDriveTypeA FindNextFileA FindFirstFileA IsDBCSLeadByte DeleteFileA GetSystemTime GetTempPathA CreateFileMappingA SetFilePointerEx HeapValidate SetEnvironmentVariableA GetFileAttributesA FormatMessageA UnlockFileEx FlushViewOfFile TryEnterCriticalSection HeapCompact CreateMutexW GetThreadPriority ReleaseSemaphore SetThreadContext GetThreadContext GlobalMemoryStatus GetDiskFreeSpaceA GetEnvironmentStrings FreeEnvironmentStringsA GetVersionExA InterlockedCompareExchange InterlockedExchange InterlockedDecrement InterlockedIncrement WaitForSingleObjectEx SleepConditionVariableCS WakeConditionVariable InitializeConditionVariable SwitchToThread lstrlenA GetExitCodeThread VirtualFree InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead GetConsoleMode GetConsoleCP GetFullPathNameA WriteConsoleW EnumSystemLocalesW IsValidLocale LCMapStringW GetTimeFormatW HeapCreate GetDateFormatW GetOEMCP IsValidCodePage GetStringTypeW CreateSemaphoreW UnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW GetStartupInfoW GetStdHandle GetFileType SetStdHandle HeapQueryInformation VirtualAlloc RtlUnwind GetCPInfo AreFileApisANSI GetModuleHandleExW ExitProcess MoveFileExW IsProcessorFeaturePresent IsDebuggerPresent ExitThread SearchPathW SetErrorMode GetSystemDefaultUILanguage GlobalFlags LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc GetProfileIntW GlobalGetAtomNameW LocalFileTimeToFileTime GetFileSizeEx GetFileAttributesExW SystemTimeToFileTime ReplaceFileW SetFileTime FileTimeToSystemTime FileTimeToLocalFileTime GetThreadLocale MoveFileW DuplicateHandle UnlockFile SetEndOfFile LockFile SuspendThread lstrcmpA GlobalFindAtomW GlobalAddAtomW GlobalDeleteAtom InitializeCriticalSectionAndSpinCount EncodePointer UnmapViewOfFile MapViewOfFile CreateFileMappingW SetFileAttributesW GetProcessId SetThreadExecutionState GetSystemDirectoryA LoadLibraryExW SetPriorityClass RemoveDirectoryW LocalAlloc GetLocaleInfoW GetLongPathNameW TerminateThread GetUserDefaultLCID CreateThread GetCurrentProcessId CompareStringW FindResourceExW WideCharToMultiByte QueryPerformanceCounter GetFullPathNameW GlobalSize GetACP GetLogicalDrives SetCurrentDirectoryW SetDllDirectoryW GetDllDirectoryW DeleteTimerQueueEx CreateTimerQueue GetDiskFreeSpaceW GetCommandLineW GetCurrentDirectoryW GetSystemDirectoryW GetFileTime SetThreadPriority GetTempFileNameW GetVersion IsDBCSLeadByteEx FreeResource FindClose FindNextFileW FindFirstFileW SetLastError FlushInstructionCache CreateTimerQueueTimer DeleteTimerQueueTimer ResetEvent SetEvent CreateEventW GetExitCodeProcess WaitForSingleObject lstrcpynW GetUserDefaultLangID GetCurrentThread IsBadWritePtr VirtualQuery FormatMessageW SetUnhandledExceptionFilter FlushFileBuffers WriteFile CreateFileA WaitForMultipleObjects ResumeThread GetDriveTypeW OutputDebugStringA DecodePointer HeapSize HeapDestroy GetProcessHeap HeapFree HeapAlloc HeapReAlloc CreateToolhelp32Snapshot Process32NextW Process32FirstW TerminateProcess OpenProcess GetWindowsDirectoryW GetVolumeInformationW GetSystemWindowsDirectoryW GetQueuedCompletionStatus ReadDirectoryChangesW PostQueuedCompletionStatus CreateIoCompletionPort GetTempPathW GetModuleHandleW CreateNamedPipeW WritePrivateProfileStringW GetPrivateProfileStringW GlobalFree lstrcpyW GetCurrentThreadId WinExec MulDiv GetFileSize ReadFile SetFilePointer CreateProcessW WritePrivateProfileStringA lstrcmpiW GetTickCount GetPrivateProfileIntW DeviceIoControl CreateFileW GlobalMemoryStatusEx GetProcessTimes GetSystemTimeAsFileTime GetSystemInfo GetNativeSystemInfo CopyFileW LocalFree VerifyVersionInfoW VerSetConditionMask OutputDebugStringW GetVersionExW GetUserDefaultUILanguage LoadLibraryW GetDiskFreeSpaceExW GetLocalTime GetFileAttributesW CreateDirectoryW GlobalUnlock GlobalLock GlobalAlloc DeleteFileW lstrcmpW MultiByteToWideChar lstrlenW CloseHandle VirtualProtect GetModuleHandleA LoadLibraryA GetProcAddress GetModuleFileNameW Sleep GetCurrentProcess FreeLibrary RaiseException InitializeCriticalSectionEx GetLastError LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection FindResourceW LoadResource LockResource SizeofResource LockFileEx

user32

CheckMenuItem CheckMenuRadioItem EnableMenuItem GetDoubleClickTime PostThreadMessageW PostQuitMessage GetCapture DrawEdge DrawFocusRect IsWindowEnabled MessageBeep wsprintfA CharUpperW GetMenu AdjustWindowRectEx SetLayeredWindowAttributes GetClassInfoW SubtractRect AppendMenuW GetNextDlgTabItem SetMenuInfo SetMenuItemInfoW GetWindowDC GetMenuItemRect GetMenuInfo DrawFrameControl SetForegroundWindow AttachThreadInput GetWindowThreadProcessId GetMenuCheckMarkDimensions DestroyIcon LoadMenuW CheckDlgButton SetRectEmpty UnionRect ModifyMenuW GetMenuItemInfoW GetMenuItemID GetMenuStringW EnumChildWindows GetDlgCtrlID GrayStringW DrawTextExW TabbedTextOutW MonitorFromPoint MonitorFromRect IsChild CharNextW RedrawWindow CreateAcceleratorTableW InvalidateRgn GetDesktopWindow DestroyAcceleratorTable RemoveMenu SetParent GetClassLongW SetClassLongW DestroyCursor MessageBoxW UpdateWindow GetClassInfoExW RegisterClassExW DestroyMenu TrackPopupMenu GetMenuItemCount GetSubMenu GetKeyState GetWindow GetTopWindow GetClassNameW GetWindowPlacement EndDialog EndPaint BeginPaint GetForegroundWindow DialogBoxIndirectParamW RemovePropW SetPropW GetPropW SetDlgItemTextW DispatchMessageW TranslateMessage PeekMessageW FindWindowA ShowScrollBar IsProcessDPIAware AnimateWindow SetLastErrorEx GetMenuState GetAsyncKeyState MapDialogRect GetLastActivePopup CreateDialogIndirectParamW GetMessagePos GetMessageTime SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos SetMenu ValidateRect ScrollWindow SetScrollPos GetScrollPos SetScrollRange GetCursor EnumWindows ChangeDisplaySettingsExW EnumDisplaySettingsW DeleteMenu CreateMenu GetActiveWindow SetActiveWindow ShowCursor ExitWindowsEx mouse_event InsertMenuA MapVirtualKeyW GetKeyNameTextW RegisterHotKey LoadCursorFromFileW UnregisterHotKey IntersectRect CharToOemBuffA CharUpperA OemToCharA CharLowerA CharToOemA OemToCharBuffA RegisterWindowMessageW EnableWindow PtInRect IsRectEmpty PostMessageW DefWindowProcW UnregisterClassW GetClientRect RegisterWindowMessageA LoadCursorW LoadIconW RegisterClassW GetWindowRect GetWindowRgn SetWindowRgn GetDC ReleaseDC CopyRect GetCursorPos OffsetRect SetCursor IsWindow IsWindowVisible ClientToScreen SetTimer FindWindowW SendMessageTimeoutW ScreenToClient SystemParametersInfoW OpenClipboard EmptyClipboard SetClipboardData CloseClipboard SendMessageW GetSysColor FillRect GetSystemMetrics GetParent InvalidateRect KillTimer MoveWindow SetRect SetCapture ReleaseCapture MonitorFromWindow wsprintfW FindWindowExW BringWindowToTop UpdateLayeredWindow GetWindowLongW SetWindowLongW TrackMouseEvent CallWindowProcW SetFocus LoadImageW CreateWindowExW DestroyWindow GetWindowTextLengthW GetWindowTextW SetWindowPos SetWindowTextW ShowWindow GetFocus DrawIconEx DrawTextW InflateRect LoadBitmapW LoadAcceleratorsW IsIconic DrawIcon IsDialogMessageW GetMessageW SendDlgItemMessageA WindowFromPoint TranslateAcceleratorW CallNextHookEx GetScrollRange MapWindowPoints SetScrollInfo GetScrollInfo SetWindowsHookExW UnhookWindowsHookEx CopyImage EqualRect GetCursorInfo CreatePopupMenu InsertMenuW GetDlgItem keybd_event WinHelpW SetMenuItemBitmaps GetMonitorInfoW InsertMenuItemW UnpackDDElParam ReuseDDElParam IsZoomed IsClipboardFormatAvailable SetWindowContextHelpId ShowOwnedPopups RegisterClipboardFormatW NotifyWinEvent GetSysColorBrush RealChildWindowFromPoint CopyAcceleratorTableW GetSystemMenu GetNextDlgGroupItem GetMenuDefaultItem GetIconInfo EnableScrollBar HideCaret InvertRect LockWindowUpdate DrawStateW IsMenu GetComboBoxInfo WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState SetCursorPos CopyIcon SetMenuDefaultItem CharUpperBuffW FrameRect DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel GetUpdateRect wvsprintfW EnumDisplayMonitors EnumDisplayDevicesW

gdi32

PtInRegion GetCurrentObject GetClipBox RestoreDC SaveDC SetMapMode SelectPalette RealizePalette CopyMetaFileW CreateDCW CreateHatchBrush GetObjectType GetViewportExtEx GetWindowExtEx IntersectClipRect ExtSelectClipRgn SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign CreateBitmap SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx PatBlt GetMapMode SetRectRgn DPtoLP LPtoDP GetTextColor GetCharWidthW CreatePalette GetNearestPaletteIndex GetSystemPaletteEntries EnumFontFamiliesW GetTextCharsetInfo Polyline ExtFloodFill SetPaletteEntries GetBoundsRect CreatePolygonRgn GetViewportOrgEx GetTextFaceW Polygon GetBkColor Ellipse Escape RectVisible PtVisible OffsetRgn CombineRgn Rectangle CreatePen StretchDIBits CreateFontIndirectW GetObjectA CreateRectRgnIndirect CreateRoundRectRgn CreateEllipticRgn CreatePatternBrush GetDIBits GetDIBColorTable SetDIBColorTable ExtTextOutW SelectClipRgn CreateDIBSection SetBkMode GetRgnBox CreateDiscardableBitmap StretchBlt DeleteDC GetTextMetricsW SetBkColor DeleteObject CreateFontA CreateFontW SelectObject SetTextCharacterExtra GetTextExtentPoint32A GetTextExtentPoint32W TextOutA TextOutW BeginPath CloseFigure EndPath GetPath AbortPath CreateRectRgn GetDeviceCaps GetObjectW CreateDIBitmap CreateSolidBrush GetStockObject BitBlt GetPixel RoundRect CreateCompatibleDC FillRgn LineTo MoveToEx CreateHalftonePalette GetPaletteEntries GetTextExtentPointW EnumFontFamiliesExW ExcludeClipRect FrameRgn GetWindowOrgEx SetPixel SetTextColor CreateCompatibleBitmap SetPixelV

msimg32

TransparentBlt GradientFill AlphaBlend

comdlg32

GetSaveFileNameW GetOpenFileNameW

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA SetFileSecurityW GetFileSecurityW CryptHashData CryptDestroyHash CheckTokenMembership CryptCreateHash CryptReleaseContext RegEnumKeyW CryptAcquireContextW CryptGetHashParam RegSetValueExA RegSetValueW RegSetValueA RegQueryValueExA RegQueryValueA RegQueryInfoKeyA RegOpenKeyExA RegOpenKeyA RegEnumValueA RegEnumKeyExA RegDeleteValueA RegDeleteKeyA RegCreateKeyExW RegCreateKeyExA RegCreateKeyA RegFlushKey RegQueryValueW RegOpenKeyW RegEnumValueW RegQueryInfoKeyW FreeSid EqualSid AllocateAndInitializeSid GetTokenInformation OpenProcessToken OpenThreadToken RegDeleteValueW RegQueryValueExW RegCreateKeyW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegCloseKey RegDeleteKeyW SetFileSecurityA

shell32

SHGetDesktopFolder SHGetSpecialFolderLocation SHFileOperationW SHGetFileInfoW SHAppBarMessage DragQueryPoint SHChangeNotify DragFinish DragQueryFileW DragAcceptFiles Shell_NotifyIconW SHGetSpecialFolderPathW SHBrowseForFolderW SHGetPathFromIDListW SHCreateDirectoryExW ShellExecuteExW ShellExecuteW SHGetFolderPathW

comctl32

ImageList_Create ImageList_Draw ImageList_Add _TrackMouseEvent ImageList_AddMasked

shlwapi

UrlUnescapeW PathStripToRootW PathIsUNCW PathAddBackslashW StrCmpLogicalW PathFindFileNameW PathFindExtensionW PathRemoveFileSpecW PathFileExistsW StrFormatKBSizeW

uxtheme

GetThemeColor OpenThemeData CloseThemeData DrawThemeBackground GetThemePartSize IsAppThemed DrawThemeText IsThemeBackgroundPartiallyTransparent DrawThemeParentBackground GetWindowTheme GetCurrentThemeName GetThemeSysColor

ole32

IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor DoDragDrop CoRegisterMessageFilter OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoDisconnectObject CoFreeUnusedLibraries OleGetClipboard RevokeDragDrop RegisterDragDrop CoLockObjectExternal CoInitializeEx ReleaseStgMedium OleDuplicateData CoRevokeClassObject CoRegisterClassObject CoTaskMemRealloc CoGetObject CoInitialize OleLoadFromStream OleSaveToStream StgCreateDocfile StgOpenStorage MkParseDisplayName CreateBindCtx CoCreateGuid StringFromCLSID OleSetContainedObject OleCreate CoFreeLibrary CoLoadLibrary OleInitialize CLSIDFromString CLSIDFromProgID CoGetClassObject OleLockRunning OleUninitialize CoUninitialize CreateStreamOnHGlobal CoSetProxyBlanket CoInitializeSecurity CoTaskMemFree CoTaskMemAlloc StringFromGUID2 CoCreateInstance

oleaut32

VariantTimeToSystemTime SystemTimeToVariantTime VariantChangeType VarUI4FromStr VariantCopy LoadTypeLi OleCreateFontIndirect VarBstrFromDate SysStringByteLen SysAllocStringByteLen SysAllocStringLen SafeArrayCreateVector SafeArrayUnaccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayAccessData SafeArrayDestroy VariantInit VariantClear OleLoadPicturePath SysFreeString SysAllocString LoadRegTypeLi SysStringLen

oledlg

OleUIBusyW

urlmon

UrlMkSetSessionOption UrlMkGetSessionOption

gdiplus

GdipDrawImageRectI GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipGetLogFontW GdipCreateFontFromLogfontW GdipSetEmpty GdipCombineRegionRectI GdipGetRegionHRgn GdipStringFormatGetGenericDefault GdipAddPathLine GdipAddPathArc GdipCreateLineBrushFromRectI GdipResetPath GdipNewPrivateFontCollection GdipGetFontCollectionFamilyCount GdipCloneFontFamily GdipGetFontCollectionFamilyList GdipDeletePrivateFontCollection GdipDrawImageRect GdipLoadImageFromFile GdipSetPenMode GdipSetImageAttributesColorKeys GdipCreateMatrix GdipDeleteMatrix GdipTranslateMatrix GdipRotateMatrix GdipSetWorldTransform GdipSetPenDashStyle GdipSetPathFillMode GdipTransformRegion GdipIsVisibleRegionPointI GdipSetStringFormatMeasurableCharacterRanges GdipMeasureCharacterRanges GdipGetRegionBounds GdipScaleMatrix GdipTransformPath GdipAddPathPath GdipSetMatrixElements GdipWidenPath GdipAddPathRectangle GdipWarpPath GdipLoadImageFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipGetTextRenderingHint GdipSetClipRegion GdipGetClip GdipCreateRegion GdipDeleteRegion GdipBitmapLockBits GdipBitmapUnlockBits GdipCreateRegionRectI GdipGetImageWidth GdipCreateBitmapFromGdiDib GdipFree GdipAlloc GdipCreateBitmapFromStream GdipFillPolygonI GdipSetImageAttributesColorMatrix GdipGetCompositingMode GdipCreateBitmapFromFileICM GdipGetImageHorizontalResolution GdipCreateBitmapFromStreamICM GdipResetWorldTransform GdipGetInterpolationMode GdipClosePathFigure GdipAddPathLineI GdipSetInterpolationMode GdipSetPixelOffsetMode GdipCreatePen2 GdipSetSolidFillColor GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipCreateStringFormat GdipFillPath GdipDrawPath GdipSetPenLineJoin GdipGetPathWorldBounds GdipAddPathString GdipDeletePath GdipCreatePath GdipGraphicsClear GdipDeleteStringFormat GdipStringFormatGetGenericTypographic GdipCloneStringFormat GdipDrawLineI GdipSetPenColor GdipGetSmoothingMode GdipGetGenericFontFamilySansSerif GdipDrawImage GdipDrawString GdipDrawRectangleI GdipFillRectangleI GdipDeletePen GdipCreatePen1 GdipCloneBrush GdipDeleteBrush GdipCreateSolidFill GdipSetTextRenderingHint GdipCreateFont GdipFillRectangle GdipGetFontHeight GdipGetStringFormatFlags GdipSetStringFormatTrimming GdipSetStringFormatHotkeyPrefix GdipSetPathGradientSurroundColorsWithCount GdipSetStringFormatFlags GdipGetImageRawFormat GdipSetPathGradientCenterPointI GdipFillEllipseI GdipImageRotateFlip GdipGetPixelOffsetMode GdipSetCompositingMode GdipGetPropertyItemSize GdipGetImageEncoders GdipBitmapGetPixel GdipCreateImageAttributes GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromFile GdipGetImageEncodersSize GdipDisposeImageAttributes GdipAddPathArcI GdipDrawEllipseI GdipGetImageVerticalResolution GdipCloneImage GdipDisposeImage GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromScan0 GdipGetImagePixelFormat GdipGetImageGraphicsContext GdipDeleteGraphics GdipTranslateWorldTransform GdipSetPathGradientCenterColor GdipRotateWorldTransform GdipSetSmoothingMode GdipDrawImageRectRectI GdipSaveImageToFile GdipGetPathGradientPointCount GdipGetPropertyItem GdipCreatePathGradientFromPath GdipBitmapSetResolution GdipGetImageHeight GdipCreateFontFamilyFromName GdipMeasureString GdipDeleteFont GdipDeleteFontFamily GdipDrawImageI GdipDrawImagePointRectI GdipCreateFromHDC GdipCreateBitmapFromResource GdiplusShutdown GdiplusStartup

pdh

PdhCloseQuery PdhAddCounterW PdhCollectQueryData PdhOpenQueryW PdhRemoveCounter PdhGetFormattedCounterValue

crypt32

CertGetNameStringW CryptUnprotectData

psapi

GetProcessMemoryInfo

wininet

HttpQueryInfoW InternetOpenW InternetQueryOptionW HttpSendRequestExW InternetCrackUrlW InternetReadFile InternetConnectW InternetWriteFile HttpSendRequestW InternetSetOptionW HttpAddRequestHeadersW HttpOpenRequestW HttpEndRequestW InternetCanonicalizeUrlW InternetGetCookieW InternetCrackUrlA InternetCreateUrlW InternetSetCookieW InternetCloseHandle InternetSetCookieExW

ws2_32

getservbyport ntohs inet_ntoa htonl getservbyname WSAGetLastError WSASetLastError gethostbyaddr gethostname WSAStartup gethostbyname connect inet_addr htons socket closesocket ntohl recv send WSAAsyncSelect WSACleanup

iphlpapi

GetAdaptersInfo

imm32

ImmGetContext ImmSetConversionStatus ImmReleaseContext ImmGetDefaultIMEWnd ImmGetConversionStatus ImmGetOpenStatus

wintrust

WTHelperGetProvSignerFromChain WTHelperGetProvCertFromChain WinVerifyTrust WTHelperProvDataFromStateData

winmm

mixerClose mixerGetNumDevs mixerGetID mixerOpen mixerGetLineControlsW mixerGetDevCapsW mixerGetLineInfoW mixerSetControlDetails mixerGetControlDetailsW PlaySoundW waveOutGetNumDevs

d3d9

Direct3DCreate9

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

Name

.text

Size

7.6MB

Virtual Size

7.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

131KB

Virtual Size

259KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.GOMSH

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4.4MB

Virtual Size

4.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

572KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=17, id=205, version=50522,

count=18, productName=Unmarked objects (old),

count=4, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=33, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=11, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=82, id=260, version=30151,

count=21, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=4, id=208, version=65501,

count=1, id=207, version=65501,

count=59, id=203, version=65501,

count=1265, id=1, productName=Unmarked objects,

count=1, id=199, version=41118,

count=3, id=209, version=65501,

count=19, id=206, version=65501,

count=150, id=225, productName=VS2013 build 21005, version=21005,

count=74, id=223, productName=VS2013 build 21005, version=21005,

count=304, id=224, productName=VS2013 build 21005, version=21005,

count=332, id=225, version=20806,

count=685, id=229, version=40629,

count=1, id=223, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,