msimg64.new
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: VirtualAllocEx, WriteProcessMemory
Exported functions 21
DllInitialize
#1 · 0x20a0
DriverProc
#2 · 0x1e10
InstallNTDSProvider
#3 · 0x20d0
LpkDllInitialize
#4 · 0x20d0
LpkDrawTextEx
#5 · 0x20d0
LpkEditControl
#6 · 0x20d0
LpkExtTextOut
#7 · 0x20d0
LpkGetCharacterPlacement
#8 · 0x20d0
LpkGetTextExtentExPoint
#9 · 0x20d0
LpkInitialize
#10 · 0x20d0
LpkPSMTextOut
#11 · 0x20d0
LpkTabbedTextOut
#12 · 0x20d0
LpkUseGDIWidthCache
#13 · 0x20d0
NSPStartup
#14 · 0x20d0
RemoveNTDSProvider
#15 · 0x20d0
vSetDdrawflag
#16 · 0x2090
widMessage
#17 · 0x1e60
wodMessage
#18 · 0x1eb0
AlphaBlend
#19 · 0x1f00
GradientFill
#20 · 0x2040
TransparentBlt
#21 · 0x1fa0
No function matches your filter.
Imported DLLs & functions 76
KERNEL32.dll
76
CloseHandle
0x18000a0c0
CreateFileW
0x18000a258
DecodePointer
0x18000a128
DeleteCriticalSection
0x18000a160
DisableThreadLibraryCalls
0x18000a080
EncodePointer
0x18000a120
EnterCriticalSection
0x18000a078
ExitProcess
0x18000a1c8
FlsAlloc
0x18000a1b0
FlsFree
0x18000a1a8
FlsGetValue
0x18000a1a0
FlsSetValue
0x18000a0d0
FlushFileBuffers
0x18000a250
FreeEnvironmentStringsW
0x18000a208
GetACP
0x18000a188
GetCommandLineA
0x18000a0d8
GetConsoleCP
0x18000a170
GetConsoleMode
0x18000a178
GetCPInfo
0x18000a180
GetCurrentProcess
0x18000a050
GetCurrentProcessId
0x18000a228
GetCurrentThreadId
0x18000a098
GetEnvironmentStringsW
0x18000a210
GetFileType
0x18000a150
GetLastError
0x18000a0b8
GetModuleFileNameA
0x18000a200
GetModuleFileNameW
0x18000a1f0
GetModuleHandleW
0x18000a008
GetOEMCP
0x18000a190
GetProcAddress
0x18000a028
GetStartupInfoW
0x18000a158
GetStdHandle
0x18000a148
GetStringTypeW
0x18000a1f8
GetSystemDirectoryW
0x18000a060
GetSystemTimeAsFileTime
0x18000a230
GetTickCount
0x18000a220
GetVersion
0x18000a1d8
HeapAlloc
0x18000a0a0
HeapCreate
0x18000a1e0
HeapDestroy
0x18000a1e8
HeapFree
0x18000a0a8
HeapReAlloc
0x18000a0c8
HeapSetInformation
0x18000a1d0
HeapSize
0x18000a238
InitializeCriticalSection
0x18000a058
InitializeCriticalSectionAndSpinCount
0x18000a138
IsDebuggerPresent
0x18000a090
IsValidCodePage
0x18000a198
LCMapStringW
0x18000a1b8
LeaveCriticalSection
0x18000a068
LoadLibraryW
0x18000a018
lstrcatW
0x18000a088
MultiByteToWideChar
0x18000a070
QueryPerformanceCounter
0x18000a218
RaiseException
0x18000a0e0
ReadProcessMemory
0x18000a020
RtlCaptureContext
0x18000a118
RtlLookupFunctionEntry
0x18000a110
RtlPcToFileHeader
0x18000a0e8
RtlUnwindEx
0x18000a130
RtlVirtualUnwind
0x18000a108
SetFilePointer
0x18000a048
SetHandleCount
0x18000a140
SetLastError
0x18000a0b0
SetStdHandle
0x18000a248
SetUnhandledExceptionFilter
0x18000a100
Sleep
0x18000a1c0
TerminateProcess
0x18000a0f0
UnhandledExceptionFilter
0x18000a0f8
VirtualAllocEx
0x18000a030
VirtualProtect
0x18000a038
VirtualQuery
0x18000a000
WideCharToMultiByte
0x18000a010
WriteConsoleW
0x18000a240
WriteFile
0x18000a168
WriteProcessMemory
0x18000a040
No function matches your filter.