preloader.dll

v38395.60189.38889.40405 64-bit Windows NT Analyzed
Download
Description
—
Authors
Unknown
File size
45.4 KB
Uploaded
2026-06-13 13:07
Views
279
SHA-256
319a1b10c37449e150fabf2b6d627143

Exported functions 2

#1 · 0xb010
#2 · 0x34a0

Imported DLLs & functions 54

ADVAPI32.dll 1
RegGetValueW 0x1800041c0
GDI32.dll 1
Pie 0x1800041b0
ntdll.dll 44
__C_specific_handler 0x180004120
__chkstk 0x180004128
_snwprintf_s 0x180004130
LdrAccessResource 0x180004000
LdrFindEntryForAddress 0x180004008
LdrFindResource_U 0x180004010
LdrGetProcedureAddress 0x180004018
mbstowcs 0x180004138
MD5Init 0x180004020
memcmp 0x180004140
memset 0x180004148
NtAllocateVirtualMemory 0x180004028
NtCreateSection 0x180004030
NtMapViewOfSection 0x180004038
NtOpenFile 0x180004040
NtProtectVirtualMemory 0x180004048
NtReadFile 0x180004050
NtTerminateProcess 0x180004058
NtYieldExecution 0x180004060
RtlAllocateHeap 0x180004068
RtlAppendUnicodeToString 0x180004070
RtlCopyUnicodeString 0x180004078
RtlCreateEnvironment 0x180004080
RtlCreateProcessParametersEx 0x180004088
RtlDosPathNameToNtPathName_U_WithStatus 0x180004090
RtlExpandEnvironmentStrings 0x180004098
RtlFindCharInUnicodeString 0x1800040a0
RtlFindMessage 0x1800040a8
RtlPcToFileHeader 0x1800040b0
RtlQueryEnvironmentVariable 0x1800040b8
RtlQueryEnvironmentVariable_U 0x1800040c0
wcsncat 0x180004150
wcstoul 0x180004158
ZwClose 0x1800040c8
ZwCreateFile 0x1800040d0
ZwCreateThreadEx 0x1800040d8
ZwCreateUserProcess 0x1800040e0
ZwDeleteFile 0x1800040e8
ZwQueryDirectoryFile 0x1800040f0
ZwQueryInformationFile 0x1800040f8
ZwQueryInformationProcess 0x180004100
ZwQuerySystemInformation 0x180004108
ZwSetInformationFile 0x180004110
ZwWaitForSingleObject 0x180004118
USER32.dll 8
CallNextHookEx 0x180004168
DefWindowProcW 0x180004170
GetProcessWindowStation 0x180004178
GetUserObjectInformationW 0x180004180
GetWindowLongPtrW 0x180004188
IsChild 0x180004190
MessageBoxW 0x180004198
SetWindowLongPtrW 0x1800041a0