ntleah.dll
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: VirtualAllocEx, CreateRemoteThread, WriteProcessMemory
Exported functions 0
No exported functions.
No function matches your filter.
Imported DLLs & functions 136
KERNEL32.dll
68
CloseHandle
0x4053f0
CompareStringA
0x405410
CreateEventA
0x40548c
CreateFileA
0x40540c
CreateFileMappingA
0x4053e4
CreateFileW
0x405474
CreateProcessA
0x405414
CreateProcessW
0x405418
CreateRemoteThread
0x4054ac
CreateThread
0x4053b0
ExitProcess
0x405454
FlushInstructionCache
0x405470
GetACP
0x405400
GetCommandLineA
0x405434
GetCommandLineW
0x405438
GetCPInfo
0x405408
GetCurrentThreadId
0x4054b4
GetLastError
0x4053bc
GetModuleHandleA
0x4053e0
GetModuleHandleW
0x40545c
GetOEMCP
0x405404
GetProcAddress
0x4053fc
GetSystemDefaultLangID
0x40542c
GetSystemDefaultLCID
0x405424
GetSystemDirectoryA
0x405478
GetSystemDirectoryW
0x405460
GetThreadContext
0x4054a4
GetThreadLocale
0x405420
GetTimeZoneInformation
0x40541c
GetUserDefaultLangID
0x405430
GetUserDefaultLCID
0x405428
GetVersionExA
0x4053f4
GlobalAddAtomA
0x4053d0
GlobalFindAtomA
0x4053cc
HeapAlloc
0x4053b8
HeapCreate
0x4053ac
HeapFree
0x405458
IsBadWritePtr
0x4053dc
IsDBCSLeadByte
0x40543c
IsDBCSLeadByteEx
0x405448
LoadLibraryA
0x4053f8
LoadLibraryW
0x405468
lstrcatA
0x405480
lstrcatW
0x405464
lstrcmpiA
0x4053c8
lstrlenA
0x40547c
lstrlenW
0x405484
MapViewOfFile
0x4053e8
MultiByteToWideChar
0x4053d8
OpenEventA
0x405440
ReadFile
0x405488
ReadProcessMemory
0x405490
ResumeThread
0x405498
SetEvent
0x405444
SetLastError
0x4053c0
SetUnhandledExceptionFilter
0x40544c
Sleep
0x40549c
SuspendThread
0x4054a0
TerminateProcess
0x405450
TlsAlloc
0x4053a8
TlsGetValue
0x4053b4
TlsSetValue
0x4053c4
UnmapViewOfFile
0x4053ec
VirtualAllocEx
0x4054a8
VirtualProtect
0x40546c
WaitForMultipleObjects
0x4054b0
WideCharToMultiByte
0x4053d4
WriteProcessMemory
0x405494
RtlMultiByteToUnicodeSize
0x4055c8
RtlOemToUnicodeN
0x4055d0
RtlUnicodeToMultiByteSize
0x4055cc
RtlUnicodeToOemN
0x4055d4
USER32.dll
60
CallNextHookEx
0x4054cc
CallWindowProcA
0x4054e0
CallWindowProcW
0x4054ec
CharNextA
0x405560
CharNextExA
0x405568
CharPrevA
0x40555c
CharPrevExA
0x405564
CreateDialogIndirectParamA
0x40552c
CreateDialogIndirectParamW
0x405508
CreateDialogParamA
0x405530
CreateDialogParamW
0x40550c
CreateWindowExA
0x405534
CreateWindowExW
0x40558c
DefDlgProcA
0x40551c
DefDlgProcW
0x405598
DefFrameProcA
0x405520
DefFrameProcW
0x40559c
DefMDIChildProcA
0x405518
DefMDIChildProcW
0x405594
DefWindowProcA
0x405514
DefWindowProcW
0x405590
DialogBoxIndirectParamA
0x405528
DialogBoxIndirectParamW
0x405504
DialogBoxParamA
0x405524
DialogBoxParamW
0x405510
GetClassInfoA
0x4054bc
GetClassInfoW
0x4054c0
GetClassNameA
0x4054c8
GetForegroundWindow
0x405580
GetMenuItemInfoW
0x405570
GetMenuStringA
0x405558
GetMenuStringW
0x40556c
GetPropA
0x4054d0
GetWindowLongA
0x4054d8
GetWindowLongW
0x4054e4
GetWindowTextA
0x40553c
GetWindowTextW
0x405578
IsWindowUnicode
0x4054c4
MessageBoxA
0x405584
PostMessageA
0x405550
PostMessageW
0x4054f4
RemovePropA
0x4054e8
SendMessageA
0x405540
SendMessageCallbackA
0x405544
SendMessageCallbackW
0x4054fc
SendMessageTimeoutA
0x405548
SendMessageTimeoutW
0x405500
SendMessageW
0x4054f0
SendNotifyMessageA
0x40554c
SendNotifyMessageW
0x4054f8
SetMenuItemInfoW
0x405574
SetPropA
0x4054d4
SetWindowLongA
0x405554
SetWindowLongW
0x4054dc
SetWindowsHookExA
0x4055a0
SetWindowsHookExW
0x4055a4
SetWindowTextA
0x405538
SetWindowTextW
0x405588
UnhookWindowsHookEx
0x4055a8
wsprintfA
0x40557c
VerQueryValueA
0x4055b0
No function matches your filter.