final_payload.bin
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 0
No exported functions.
No function matches your filter.
Imported DLLs & functions 223
ADVAPI32.dll
10
CreateProcessWithTokenW
0x52400c
DuplicateTokenEx
0x524010
GetTokenInformation
0x524004
GetUserNameA
0x524000
OpenProcessToken
0x524024
RegCloseKey
0x52401c
RegCreateKeyA
0x524008
RegDeleteTreeA
0x524018
RegOpenKeyExA
0x524014
RegSetValueExA
0x524020
BCryptCloseAlgorithmProvider
0x524374
BCryptDecrypt
0x524364
BCryptDestroyKey
0x524360
BCryptGenerateSymmetricKey
0x524368
BCryptGetProperty
0x524378
BCryptOpenAlgorithmProvider
0x524370
BCryptSetProperty
0x52436c
D3D11CreateDevice
0x524380
dxgi.dll
1
CreateDXGIFactory1
0x524388
GDI32.dll
10
BitBlt
0x524038
CreateCompatibleBitmap
0x52402c
CreateCompatibleDC
0x524030
CreateSolidBrush
0x52403c
DeleteDC
0x524040
DeleteObject
0x524044
GetDIBits
0x524048
SelectObject
0x524034
SetStretchBltMode
0x524050
StretchBlt
0x52404c
KERNEL32.dll
129
AcquireSRWLockExclusive
0x524258
CloseHandle
0x524100
CompareStringW
0x5240a8
CopyFileW
0x5241b0
CreateDirectoryW
0x5241a8
CreateEventW
0x524228
CreateFileA
0x5241c8
CreateFileW
0x524124
CreateProcessA
0x524194
CreateProcessW
0x5241fc
CreateThread
0x524088
CreateToolhelp32Snapshot
0x5241b4
DecodePointer
0x524064
DeleteCriticalSection
0x524218
DeleteFileA
0x5241d4
DeleteFileW
0x524208
EncodePointer
0x5240a0
EnterCriticalSection
0x52420c
ExitProcess
0x524170
ExitThread
0x524084
FileTimeToLocalFileTime
0x524130
FileTimeToSystemTime
0x524134
FindClose
0x52414c
FindFirstFileA
0x5241a4
FindFirstFileExW
0x5240b4
FindFirstFileW
0x524144
FindNextFileA
0x5241dc
FindNextFileW
0x524148
FlushFileBuffers
0x5240e4
FreeEnvironmentStringsW
0x5240cc
FreeLibrary
0x5241d0
FreeLibraryAndExitThread
0x524080
GetACP
0x5240bc
GetCommandLineA
0x524070
GetCommandLineW
0x52406c
GetComputerNameA
0x524104
GetConsoleMode
0x5240ec
GetConsoleOutputCP
0x5240e8
GetCPInfo
0x5240c4
GetCurrentProcess
0x5240fc
GetCurrentProcessId
0x524234
GetCurrentThreadId
0x5240f4
GetEnvironmentStringsW
0x5240c8
GetEnvironmentVariableA
0x52419c
GetEnvironmentVariableW
0x5241ac
GetExitCodeThread
0x524264
GetFileAttributesA
0x5241a0
GetFileAttributesExW
0x524120
GetFileAttributesW
0x52418c
GetFileSize
0x524128
GetFileSizeEx
0x5241f8
GetFileType
0x524068
GetLastError
0x524158
GetModuleFileNameA
0x524154
GetModuleFileNameW
0x524074
GetModuleHandleA
0x524114
GetModuleHandleExW
0x52407c
GetModuleHandleW
0x52422c
GetOEMCP
0x5240c0
GetProcAddress
0x524118
GetProcessHeap
0x524108
GetProcessTimes
0x5241ec
GetStartupInfoW
0x524248
GetStdHandle
0x524078
GetStringTypeW
0x5240d8
GetSystemDirectoryA
0x524198
GetSystemDirectoryW
0x5241e0
GetSystemInfo
0x524138
GetSystemTimeAsFileTime
0x5241d8
GetSystemTimes
0x5241e8
GetTempFileNameA
0x5241c4
GetTempPathA
0x5241c0
GetTempPathW
0x524188
GetTickCount
0x524180
GetTickCount64
0x524140
GetWindowsDirectoryA
0x524190
GlobalLock
0x524174
GlobalMemoryStatusEx
0x52413c
GlobalUnlock
0x524178
HeapAlloc
0x52410c
HeapFree
0x524110
HeapReAlloc
0x5240e0
HeapSize
0x5240dc
InitializeCriticalSectionAndSpinCount
0x524214
InitializeCriticalSectionEx
0x52425c
InitializeSListHead
0x524238
InitializeSRWLock
0x524250
IsDebuggerPresent
0x52423c
IsProcessorFeaturePresent
0x52424c
IsValidCodePage
0x5240b8
K32GetProcessMemoryInfo
0x5241e4
LCMapStringW
0x5240b0
LeaveCriticalSection
0x524210
LoadLibraryA
0x5241cc
LoadLibraryExW
0x52408c
lstrlenA
0x52415c
MultiByteToWideChar
0x524150
OpenProcess
0x524160
Process32First
0x5241b8
Process32Next
0x5241bc
QueryFullProcessImageNameA
0x5241f0
QueryPerformanceCounter
0x524230
RaiseException
0x5240ac
ReadFile
0x52412c
ReleaseSRWLockExclusive
0x524254
RemoveDirectoryW
0x524200
ResetEvent
0x524220
RtlUnwind
0x5240f0
SetEndOfFile
0x52416c
SetEnvironmentVariableW
0x5240d0
SetEvent
0x52421c
SetFileAttributesW
0x524204
SetFilePointer
0x524164
SetFilePointerEx
0x5241f4
SetLastError
0x5240a4
SetStdHandle
0x5240d4
SetUnhandledExceptionFilter
0x524244
Sleep
0x5240f8
TerminateProcess
0x52417c
TlsAlloc
0x52409c
TlsFree
0x524090
TlsGetValue
0x524098
TlsSetValue
0x524094
TryEnterCriticalSection
0x524260
UnhandledExceptionFilter
0x524240
WaitForSingleObjectEx
0x524224
WideCharToMultiByte
0x52411c
WriteConsoleW
0x524184
WriteFile
0x524168
CoCreateInstance
0x524394
CoGetObject
0x524398
CoInitializeEx
0x5243a4
CoTaskMemFree
0x52439c
CoUninitialize
0x5243a0
CreateStreamOnHGlobal
0x524390
ShellExecuteA
0x524270
ShellExecuteExA
0x52426c
ShellExecuteW
0x524274
SHGetKnownFolderPath
0x524278
USER32.dll
37
ChildWindowFromPoint
0x5242dc
ClientToScreen
0x524308
CloseClipboard
0x5242d4
CloseDesktop
0x5242a0
CreateDesktopA
0x524280
EnumDisplayDevicesA
0x5242bc
EnumDisplayMonitors
0x5242ac
ExitWindowsEx
0x5242c0
FillRect
0x524290
GetAncestor
0x524304
GetClassNameA
0x524300
GetClipboardData
0x524310
GetDC
0x5242b4
GetForegroundWindow
0x5242e0
GetShellWindow
0x5242d0
GetSystemMetrics
0x5242b0
GetThreadDesktop
0x524284
GetTopWindow
0x52428c
GetWindow
0x524294
GetWindowPlacement
0x5242f0
GetWindowRect
0x52429c
GetWindowThreadProcessId
0x5242cc
IsWindow
0x52430c
IsWindowVisible
0x524298
MapVirtualKeyA
0x5242e8
OpenClipboard
0x5242c4
OpenDesktopA
0x5242c8
PostMessageA
0x5242fc
PrintWindow
0x5242d8
ReleaseDC
0x5242b8
ScreenToClient
0x5242a8
SendMessageA
0x5242f4
SetFocus
0x5242f8
SetThreadDesktop
0x524288
SetWindowPlacement
0x5242ec
WindowFromPoint
0x5242a4
wsprintfA
0x5242e4
InternetCloseHandle
0x524318
InternetOpenA
0x524324
InternetOpenUrlA
0x524320
InternetReadFile
0x52431c
WS2_32.dll
12
closesocket
0x524348
freeaddrinfo
0x524344
getaddrinfo
0x52434c
inet_ntop
0x52432c
ntohs
0x524330
recv
0x524334
send
0x524358
setsockopt
0x524338
shutdown
0x524340
socket
0x524350
WSAIoctl
0x52433c
WSAStartup
0x524354
No function matches your filter.