20082026_0430_17082026_INV-No[.]20260817021957[.]EXE[.]iso

Sharing

Copy URL Twitter E-mail

General

Target
20082026_0430_17082026_INV-No.20260817021957.EXE.iso
Size 6.9MB
Sample260820-e47j4azbne
SHA256 8f9655a0a7e868fab4c4cd98d235130b0b3d65f6350586d74dbca1a1720f38d2
MD5 657e70af424214e1fefffc6cb2ff31da
SHA1 36f0be7868bae82e8818b3bad76925c6afcd5fbd
SHA512 3e312afe1c6dbd0db83e2a87fd907a504394789310c66aeaa7e58fa285b4c4278e4bf3710ced3f3972b083b642cb7888fe1875ccd23760b534bf27c0a68002e7
SSDEEP 196608:YauleEjb38w9bkmAcmIfMV9Z4O7NADtV6v+zZR3ro2R:e5J09N7kbV
TLSH
T19F76CF117D9C4036E4AB02318EB9E6BD257DBD603B2560D763C4FA1AFD703D26A3621B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/hdpGmS.DlL

File Explorer

20082026_0430_17082026_INV-No.20260817021957.EXE.iso

.iso 6.9MB
out.iso

.iso 6.9MB
INV-No.20260817021957.EXE

.exe 1.2MB
hdpGmS.DlL

.dll 5.7MB

20082026_0430_17082026_INV-No.20260817021957.EXE.iso

SHA256 8f9655a0a7e868fab4c4cd98d235130b0b3d65f6350586d74dbca1a1720f38d2
MD5 657e70af424214e1fefffc6cb2ff31da
SHA1 36f0be7868bae82e8818b3bad76925c6afcd5fbd
SHA512 3e312afe1c6dbd0db83e2a87fd907a504394789310c66aeaa7e58fa285b4c4278e4bf3710ced3f3972b083b642cb7888fe1875ccd23760b534bf27c0a68002e7
SSDEEP 196608:YauleEjb38w9bkmAcmIfMV9Z4O7NADtV6v+zZR3ro2R:e5J09N7kbV
TLSH
T19F76CF117D9C4036E4AB02318EB9E6BD257DBD603B2560D763C4FA1AFD703D26A3621B
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

INV-No.20260817021957.EXE

IMPHASH 228516dd2bae8c2c904a4abc2a4b6850
SHA256 233a7de23438d09cbb277a0ebb11f71a2af9c53d2cf5ac9e4af368de0bf20a3f
MD5 0eb29371e8a79d9d88d4b38e14e7fede
SHA1 011ace7a722fde86968304ad2e1adff3857cf203
SHA512 729e5381747479c5d9d06a2868398858be6370ab0b72ec468707fed0b9c1525e828d658f280ee786c3d2353ecca3617d61e5c189c5c1ebb8ce7b978df454a94b
SSDEEP 24576:cxcrYVkxc3bY9uB6TfuiBNNSuuOqF5Cb7KhU2k8V9TsfTlYN:cxc3cf6Tfu+YlfF8XL2bV9ToYN
TLSH
T14E457E21F501D132F8A704B286FD9B6E992CEA20071450D3E3D85CAA9EF15E27B3775B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Password

infected

Digest

c3:d8:b1:36:dc:11:5b:3b:4b:bb:94:33:f6:5c:81:a2:7f:c7:43:ce:6d:ac:dd:dc:9d:b0:45:32:6b:6d:b9:6c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\,Ltd.,O=Hithink RoyalFlush Information Network Co.\,Ltd.,L=杭州市,ST=浙江省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Feb 6, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

cd:c8:fc:d5:86:15:e8:1d:b1:3b:cf:60:0b:df:d7:c9:e4:bd:2f:26

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

Feb 6, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

Serial Number

01:fe:bc:8a:77:43:53:3e:07:0a:2a:48:0b:f5:10:b5

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 1, 2023 - Aug 2, 2026

Minor OS version

Major OS version

Entry point

784933

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\HDP_Future\sre\hxdaemonprocess.pdb

ws2_32

gethostname ioctlsocket getpeername sendto recvfrom freeaddrinfo getaddrinfo recv listen htonl getsockname connect bind accept select __WSAFDIsSet WSAIoctl setsockopt socket htons WSACleanup WSAStartup WSASetLastError ntohs WSAGetLastError closesocket WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent send getsockopt

wldap32

ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord117 ord41 ord208 ord73 ord216 ord14 ord46 ord219 ord145

crypt32

CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertFindExtension CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryW CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CertFreeCertificateChain

kernel32

GetTimeFormatW GetDateFormatW GetConsoleCP ReadConsoleW GetConsoleMode GetACP WriteFile ExitProcess HeapReAlloc HeapFree HeapAlloc SetFilePointerEx IsValidLocale FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW GetModuleHandleExW FreeLibraryAndExitThread ExitThread GetTimeZoneInformation LoadLibraryExW RtlUnwind RaiseException InitializeSListHead GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers DeleteFileW GetCurrentDirectoryW GetFullPathNameW SetStdHandle SetEndOfFile GetProcessHeap FindFirstFileExA GetFileAttributesExW GetPrivateProfileStringA WritePrivateProfileStringA SetLastError CreateDirectoryA GetTickCount OpenProcess TerminateProcess CloseHandle GetLongPathNameA GetCurrentProcessId GetLastError WaitForSingleObject FindClose IsValidCodePage DeleteFileA FindFirstFileA FindNextFileA GetCurrentProcess SetUnhandledExceptionFilter CreateThread GetCurrentThreadId InitializeCriticalSection EnterCriticalSection LeaveCriticalSection ResetEvent WaitForMultipleObjects MapViewOfFile CreateEventW CreateFileMappingW LoadLibraryW GetModuleFileNameW CreateProcessW GetFileAttributesW MultiByteToWideChar GetProcAddress GetLocalTime GetModuleHandleW SetCurrentDirectoryA GetCurrentDirectoryA GetDiskFreeSpaceExA WideCharToMultiByte DeleteCriticalSection FreeLibrary Sleep LoadLibraryExA GetModuleFileNameA GetModuleHandleA QueryPerformanceCounter QueryPerformanceFrequency CreateToolhelp32Snapshot Process32First Process32Next Module32First GetSystemTimeAsFileTime GetFileAttributesA GetSystemDirectoryW FormatMessageW MoveFileExW GetEnvironmentVariableA GetFileType GetStdHandle ReadFile HeapSize SleepEx VerSetConditionMask VerifyVersionInfoW GetFileSizeEx CreateFileW GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent UnhandledExceptionFilter WaitForSingleObjectEx SetEvent GetCPInfo GetStringTypeW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetLocaleInfoW LCMapStringW CompareStringW DecodePointer EncodePointer GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA WriteConsoleW RemoveDirectoryA PeekNamedPipe

user32

LoadIconA IsDialogMessageA SetWindowPos SetDlgItemTextA GetSystemMetrics LoadImageA SetTimer GetWindowThreadProcessId MessageBoxA GetPropA GetWindowRect EnumWindows LoadCursorA GetDesktopWindow SetWindowLongA GetWindowLongA RemovePropA SetPropA CreateDialogParamA ShowWindow DestroyWindow IsWindow CreateWindowExA RegisterClassA PostQuitMessage DefWindowProcA SendMessageA DispatchMessageA TranslateMessage GetMessageA PostMessageA

advapi32

CryptAcquireContextW CryptGenRandom CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt CryptReleaseContext

shell32

ShellExecuteA SHFileOperationA SHCreateDirectoryExA ShellExecuteExA

shlwapi

StrStrIA PathCanonicalizeA PathFileExistsA StrStrA StrToInt64ExA PathAppendA

Name

.text

Size

947KB

Virtual Size

947KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

207KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

444B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

hdpGmS.DlL

IMPHASH 058daf5b860153b07612b3007115771c
SHA256 7ed71269e552cb42ad20d2f968613b415f04004a8afb6bb9f19b77e75f2c7163
MD5 7c47ff322a21a0ed9a5eeed417ef3db4
SHA1 385c8d7df0acd8ff6c4537144f6c69d64b238033
SHA512 28e9058cf887bd06d395ced83889dc6dbfd50d49f6b82a869d71f7563b9aa45d55dfa2356d845d69983b6df26e61026f8d8316f87f2e529f626c4a442dba4238
SSDEEP 98304:Jjv0DwP38wtCkCUyFJeT5ihmAcmI5J3ROVYoZ4OiZrq1DfPHNADtV6v+zM+rwroX:Jjb38w9bkmAcmIfMV9Z4O7NADtV6v+zn
TLSH
T17356D0117DEC0467E0AB03318EAAF2BC35BEBDA43F2561672784F61EF9313515A1522B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

1575471

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\iProject\NvPluginWatchdog\Release\NvPluginWatchdog.pdb

kernel32

GetTimeZoneInformation SetFilePointerEx GetConsoleMode GetConsoleOutputCP EnumSystemLocalesW IsValidLocale GetStdHandle GetFileType SetStdHandle HeapQueryInformation ReadConsoleW GetCommandLineA QueryPerformanceFrequency VirtualQuery GetSystemInfo FreeLibraryAndExitThread ExitThread InterlockedFlushSList RtlUnwind GetCPInfo LCMapStringW GetStringTypeW OutputDebugStringW FindFirstFileExW FindNextFileW GetACP IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx FindResourceExW SystemTimeToTzSpecificLocalTime LocalFileTimeToFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime GetStringTypeExW MoveFileW DuplicateHandle UnlockFile SetEndOfFile ReadFile LockFile GetVolumeInformationW GetShortPathNameW FlushFileBuffers FindFirstFileW FindClose SearchPathW GetProfileIntW SetFilePointer GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW CompareStringW LocalReAlloc LocalAlloc GlobalHandle TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GetThreadLocale WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW CompareStringA GetVersionExW GetCurrentThread GlobalGetAtomNameW lstrcmpA lstrcmpiW GetWindowsDirectoryW GetUserDefaultLCID ReplaceFileW SetFileTime GetTempFileNameW GetFullPathNameW GetFileTime GetDiskFreeSpaceW GetCurrentDirectoryW ResumeThread SetThreadPriority GlobalReAlloc VerifyVersionInfoW VerSetConditionMask GetCurrentProcessId FileTimeToSystemTime GlobalFindAtomW GlobalAddAtomW LoadLibraryA lstrcmpW GlobalDeleteAtom LoadLibraryExW GetModuleHandleA FreeResource FreeLibrary EncodePointer OutputDebugStringA MulDiv GlobalFree GlobalUnlock GlobalLock GlobalSize GlobalAlloc GetProcessHeap DecodePointer RaiseException HeapReAlloc HeapSize InitializeCriticalSectionEx GetTempPathW CreateMutexW SystemTimeToFileTime CreateThread GetLocalTime DeviceIoControl Process32NextW Process32FirstW CreateToolhelp32Snapshot ExitProcess CreateDirectoryW GetTickCount VirtualProtect GetSystemDirectoryW GetModuleHandleW WriteProcessMemory lstrcpyW CreateProcessW MultiByteToWideChar CopyFileW GetModuleFileNameW GetFileAttributesW lstrcatW LocalFree GetCurrentProcess DeleteFileW WriteFile UnmapViewOfFile MapViewOfFile CreateFileMappingW GetFileSize CreateFileW GetModuleHandleExW FindResourceW LoadResource LockResource SizeofResource TryEnterCriticalSection GetProcAddress LoadLibraryW SetWaitableTimer CreateWaitableTimerW lstrlenW VirtualFree WideCharToMultiByte ResetEvent CancelIo CreateEventW SetLastError SwitchToThread GetCurrentThreadId GetLastError FormatMessageW SetEvent Sleep WaitForSingleObject CloseHandle CreateEventA HeapDestroy HeapCreate LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapFree HeapAlloc VirtualAlloc GetCommandLineW

user32

WindowFromPoint GetCursorPos SetCursor MessageBeep DeleteMenu GetSystemMenu ReleaseCapture SetCapture GetAsyncKeyState CharUpperW IsZoomed TrackMouseEvent IntersectRect DrawIconEx IsRectEmpty OffsetRect DrawFocusRect SetWindowRgn DrawStateW DrawFrameControl DrawEdge EnumDisplayMonitors SystemParametersInfoW LoadCursorW GetSysColorBrush SetLayeredWindowAttributes GetWindowThreadProcessId GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW ReleaseDC GetDC MapVirtualKeyW GetKeyNameTextW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem IsDialogMessageW SetWindowTextW IsWindowEnabled CheckDlgButton SetDlgItemTextW MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo LoadIconW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW NotifyWinEvent GetLastActivePopup GetTopWindow GetClassNameW GetClassLongW SetWindowLongW GetWindowLongW PtInRect EqualRect CopyRect MapWindowPoints AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW SendNotifyMessageW GetScrollRange SetScrollRange GetScrollPos MonitorFromPoint InSendMessage IsClipboardFormatAvailable SetCursorPos DestroyCursor PeekMessageW TranslateMessage DispatchMessageW SetScrollPos ScrollWindow ValidateRect EndPaint BeginPaint SetForegroundWindow GetForegroundWindow SetActiveWindow TrackPopupMenu SetMenu GetMenu GetCapture GetKeyState SetFocus GetDlgCtrlID GetDlgItem IsIconic IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos DestroyWindow IsMenu GetClassInfoExW GetClassInfoW CallWindowProcW GetMessageTime GetMessagePos CreatePopupMenu DestroyMenu GetMenuDefaultItem SetMenuDefaultItem OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DestroyIcon CopyImage BringWindowToTop GetUpdateRect LockWindowUpdate SetRect UnionRect RegisterWindowMessageW RemoveMenu AppendMenuW InsertMenuW GetDesktopWindow GetMenuItemInfoW RegisterClipboardFormatW SetClassLongW GetActiveWindow DestroyAcceleratorTable SetParent UpdateLayeredWindow GetWindow EnableScrollBar MsgWaitForMultipleObjects EnableWindow LoadBitmapW GetClientRect FillRect InflateRect GetParent SetRectEmpty LoadMenuW GetSubMenu SendMessageW GetKeyboardState ScreenToClient InvalidateRect UpdateWindow GetWindowRect GetSysColor IsChild GetFocus LoadImageW GetSystemMetrics RedrawWindow CharUpperBuffW PostMessageW SetTimer KillTimer PostQuitMessage DefWindowProcW RegisterClassW CreateWindowExW UnregisterClassW GetMessageW IsWindow MessageBoxW ClientToScreen GetMenuStringW GetMenuState GetMenuItemID GetMenuItemCount GetIconInfo ModifyMenuW LoadAcceleratorsW TranslateAcceleratorW CopyAcceleratorTableW CreateMenu InsertMenuItemW UnpackDDElParam ReuseDDElParam WaitMessage SetWindowContextHelpId MapDialogRect CreateDialogIndirectParamW EndDialog GetNextDlgTabItem PostThreadMessageW ShowOwnedPopups FrameRect HideCaret InvertRect SendDlgItemMessageA RealChildWindowFromPoint ToUnicodeEx GetKeyboardLayout GetWindowRgn MapVirtualKeyExW IsCharLowerW InvalidateRgn CharNextW GetNextDlgGroupItem GetComboBoxInfo DrawIcon EnumChildWindows TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar SubtractRect CopyIcon GetDoubleClickTime CreateAcceleratorTableW ShowScrollBar

gdi32

RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign StartDocW MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo GetTextMetricsW CombineRgn CreateEllipticRgn Ellipse GetBkColor RectVisible CreatePolygonRgn Polygon Polyline GetMapMode SetRectRgn DPtoLP CreateRoundRectRgn GetDIBits RealizePalette SetPixel StretchBlt CreateDIBSection SetDIBColorTable GetWindowOrgEx Rectangle RoundRect EndDoc StartPage EndPage AbortDoc SetAbortProc GetRgnBox OffsetRgn LPtoDP CreatePalette GetPaletteEntries ExtFloodFill SetPaletteEntries EnumFontFamiliesExW FillRgn FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx GetNearestPaletteIndex GetSystemPaletteEntries GetTextFaceW SetPixelV PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetClipBox ExcludeClipRect Escape CreateSolidBrush CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush CreateCompatibleDC BitBlt PatBlt CreateRectRgnIndirect CreateBitmap SetTextColor SetBkColor GetDeviceCaps CreateDCW CopyMetaFileW DeleteDC CreateFontIndirectW DeleteObject GetTextExtentPoint32W GetStockObject GetTextColor GetObjectType GetObjectW

msimg32

AlphaBlend TransparentBlt

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter GetJobW

advapi32

CloseServiceHandle GetTokenInformation ConvertSidToStringSidW RegEnumValueW RegEnumKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegCreateKeyExW SetFileSecurityW GetFileSecurityW RegSetValueW DeleteService ControlService StartServiceW OpenServiceW OpenProcessToken CreateServiceW OpenSCManagerW RegDeleteTreeW AdjustTokenPrivileges LookupPrivilegeValueW FreeSid CheckTokenMembership AllocateAndInitializeSid RegCreateKeyW RegQueryValueExW RegCloseKey RegSetValueExW RegDeleteValueW RegOpenKeyExW

shell32

SHGetMalloc ShellExecuteExW ExtractIconW SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetDesktopFolder SHAppBarMessage DragQueryFileW SHAddToRecentDocs SHBrowseForFolderW SHGetFolderPathW ShellExecuteW DragFinish

comctl32

ImageList_Draw ImageList_AddMasked InitCommonControlsEx

shlwapi

PathStripPathW PathFileExistsW PathFindExtensionW PathFindFileNameW PathIsUNCW PathStripToRootW StrFormatKBSizeW PathRemoveFileSpecW

uxtheme

IsThemeBackgroundPartiallyTransparent GetThemePartSize IsAppThemed DrawThemeText GetWindowTheme DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName GetThemeSysColor

ole32

GetClassFile RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleCreateFromFile OleLoad OleSave OleSaveToStream OleSetContainedObject OleLockRunning OleGetIconOfClass GetHGlobalFromILockBytes CreateILockBytesOnHGlobal OleSetMenuDescriptor StgCreateDocfile StgOpenStorage StgIsStorageFile CreateFileMoniker CoFreeUnusedLibraries OleInitialize OleUninitialize CLSIDFromProgID CoDisconnectObject OleFlushClipboard OleIsCurrentClipboard DoDragDrop OleGetClipboard CoGetClassObject OleCreateLinkToFile OleCreateStaticFromData OleCreate WriteClassStm CreateItemMoniker CreateGenericComposite StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateStreamOnHGlobal SetConvertStg OleRegGetUserType ReleaseStgMedium OleDuplicateData ReadFmtUserTypeStg WriteFmtUserTypeStg WriteClassStg ReadClassStg CreateBindCtx CoTreatAsClass CoTaskMemFree CoTaskMemAlloc StringFromCLSID CoCreateInstance CoUninitialize CLSIDFromString CoInitialize StringFromGUID2 CoCreateGuid CoRevokeClassObject CoRegisterMessageFilter CoInitializeEx OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator

oleaut32

SysFreeString SysStringLen SafeArrayDestroy VariantTimeToSystemTime SysAllocStringLen VariantCopy VarBstrFromDate LoadTypeLi OleCreateFontIndirect SystemTimeToVariantTime VariantChangeType VariantInit SysAllocString VariantClear

oledlg

OleUIAddVerbMenuW OleUIInsertObjectW OleUIEditLinksW OleUIConvertW OleUIBusyW

gdiplus

GdipGetImagePaletteSize GdipDrawImageRectI GdipSetInterpolationMode GdiplusShutdown GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipGetImagePalette GdipCreateBitmapFromStream GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipDeleteGraphics GdipDrawImageI GdipCreateBitmapFromHBITMAP GdipCreateFromHDC

ws2_32

WSASetLastError shutdown WSACloseEvent WSAResetEvent WSAEnumNetworkEvents WSAWaitForMultipleEvents WSAEventSelect WSACreateEvent WSAGetLastError send recv select WSAIoctl connect htons gethostbyname socket closesocket setsockopt WSACleanup WSAStartup

winmm

PlaySoundW timeGetTime

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

427KB

Virtual Size

426KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

32KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

116KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.giats

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.NVX0

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

149KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

20082026_0430_17082026_INV-No.20260817021957.EXE.iso

out.iso

INV-No.20260817021957.EXE

ws2_32

wldap32

crypt32

kernel32

user32

advapi32

shell32

shlwapi

generic

hdpGmS.DlL

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

winmm

oleacc

imm32

generic