stage_ransomware.dll

vUnknown 64-bit Unknown OS Analyzed
Download
Description
—
Authors
Unknown
File size
511.5 KB
Uploaded
2026-03-26 09:54
Views
65
SHA-256
6ace71a92b08f70a76c04b4b6b29c30f

Exported functions 1

Exit #1 · 0x2fd0

Imported DLLs & functions 116

KERNEL32.dll 114
ChangeTimerQueueTimer 0x180055228
CloseHandle 0x180055010
CreateEventW 0x180055100
CreateFileW 0x180055000
CreateThread 0x180055200
CreateTimerQueue 0x1800552d8
CreateTimerQueueTimer 0x180055220
DecodePointer 0x180055158
DeleteCriticalSection 0x1800550e0
DeleteFileW 0x180055018
DeleteTimerQueueTimer 0x180055230
DuplicateHandle 0x1800552a0
EncodePointer 0x180055150
EnterCriticalSection 0x1800550c8
ExitProcess 0x180055310
FindClose 0x180055350
FindFirstFileExA 0x180055358
FindFirstFileW 0x180055020
FindNextFileA 0x180055360
FindNextFileW 0x180055040
FlushFileBuffers 0x1800550b8
FreeEnvironmentStringsW 0x1800550c0
FreeLibrary 0x180055260
FreeLibraryAndExitThread 0x180055268
GetACP 0x180055330
GetCommandLineA 0x180055378
GetCommandLineW 0x180055380
GetConsoleCP 0x1800550b0
GetConsoleMode 0x1800550a8
GetCPInfo 0x180055170
GetCurrentProcess 0x1800551c0
GetCurrentProcessId 0x1800551d8
GetCurrentThread 0x180055080
GetCurrentThreadId 0x1800550e8
GetEnvironmentStringsW 0x180055388
GetFileSizeEx 0x180055028
GetFileType 0x180055348
GetLastError 0x180055060
GetLogicalProcessorInformation 0x180055218
GetModuleFileNameA 0x180055320
GetModuleFileNameW 0x180055270
GetModuleHandleA 0x180055278
GetModuleHandleExW 0x180055318
GetModuleHandleW 0x180055140
GetNumaHighestNodeNumber 0x180055238
GetOEMCP 0x180055370
GetProcAddress 0x180055048
GetProcessAffinityMask 0x180055240
GetProcessHeap 0x180055338
GetStartupInfoW 0x1800551e8
GetStdHandle 0x180055340
GetStringTypeW 0x180055168
GetSystemTimeAsFileTime 0x180055130
GetThreadPriority 0x180055210
GetThreadTimes 0x180055088
GetTickCount 0x180055138
GetVersionExW 0x180055288
HeapAlloc 0x1800552f8
HeapFree 0x180055300
HeapReAlloc 0x180055308
HeapSize 0x180055328
InitializeCriticalSectionAndSpinCount 0x1800550f8
InitializeSListHead 0x180055178
InterlockedFlushSList 0x1800552c0
InterlockedPopEntrySList 0x1800552b0
InterlockedPushEntrySList 0x1800552b8
IsDebuggerPresent 0x1800551e0
IsProcessorFeaturePresent 0x1800551d0
IsValidCodePage 0x180055368
LCMapStringW 0x180055160
LeaveCriticalSection 0x1800550d0
LoadLibraryExW 0x180055280
LoadLibraryW 0x180055050
MultiByteToWideChar 0x180055148
QueryDepthSList 0x1800552c8
QueryPerformanceCounter 0x180055070
QueryPerformanceFrequency 0x180055078
RaiseException 0x1800552f0
ReadFile 0x180055008
RegisterWaitForSingleObject 0x180055250
ReleaseSemaphore 0x1800552a8
ResetEvent 0x180055188
RtlCaptureContext 0x180055198
RtlLookupFunctionEntry 0x1800551a0
RtlPcToFileHeader 0x1800552e8
RtlUnwindEx 0x1800552e0
RtlVirtualUnwind 0x1800551a8
SetEvent 0x180055180
SetFilePointer 0x180055030
SetFilePointerEx 0x180055098
SetLastError 0x180055068
SetStdHandle 0x1800550a0
SetThreadAffinityMask 0x180055248
SetThreadPriority 0x180055208
SetUnhandledExceptionFilter 0x1800551b8
SignalObjectAndWait 0x1800551f0
Sleep 0x180055108
SwitchToThread 0x1800551f8
TerminateProcess 0x1800551c8
TlsAlloc 0x180055110
TlsFree 0x180055128
TlsGetValue 0x180055118
TlsSetValue 0x180055120
TryEnterCriticalSection 0x1800550d8
UnhandledExceptionFilter 0x1800551b0
UnregisterWait 0x180055258
UnregisterWaitEx 0x1800552d0
VirtualAlloc 0x180055290
VirtualFree 0x180055298
VirtualProtect 0x180055058
WaitForSingleObjectEx 0x180055190
WideCharToMultiByte 0x1800550f0
WriteConsoleW 0x180055090
WriteFile 0x180055038
SHELL32.dll 1
SHGetSpecialFolderPathW 0x180055398
urlmon.dll 1
URLDownloadToFileW 0x1800553a8