payload.dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 52
_GCC_specific_handler
#1 · 0x15d70
_Unwind_Backtrace
#2 · 0x161d0
_Unwind_DeleteException
#3 · 0x161b0
_Unwind_FindEnclosingFunction
#4 · 0x15d20
_Unwind_ForcedUnwind
#5 · 0x16180
_Unwind_GetCFA
#6 · 0x15cc0
_Unwind_GetDataRelBase
#7 · 0x15d50
_Unwind_GetGR
#8 · 0x15c80
_Unwind_GetIP
#9 · 0x15cd0
_Unwind_GetIPInfo
#10 · 0x15ce0
_Unwind_GetLanguageSpecificData
#11 · 0x15d00
_Unwind_GetRegionStart
#12 · 0x15d10
_Unwind_GetTextRelBase
#13 · 0x15d60
_Unwind_RaiseException
#14 · 0x16010
_Unwind_Resume
#15 · 0x16050
_Unwind_Resume_or_Rethrow
#16 · 0x16130
_Unwind_SetGR
#17 · 0x15ca0
_Unwind_SetIP
#18 · 0x15cf0
_Z10swprintf_sILy40EEiRAT__wPKwz
#19 · 0x24e30
_Z10swprintf_sILy96EEiRAT__wPKwz
#20 · 0x24e80
_ZN7Gdiplus10SolidBrushD0Ev
#21 · 0x25e80
_ZN7Gdiplus10SolidBrushD1Ev
#22 · 0x25eb0
_ZN7Gdiplus17PathGradientBrushD0Ev
#23 · 0x25ed0
_ZN7Gdiplus17PathGradientBrushD1Ev
#24 · 0x25f00
_ZN7Gdiplus19LinearGradientBrushD0Ev
#25 · 0x25f20
_ZN7Gdiplus19LinearGradientBrushD1Ev
#26 · 0x25f50
_ZN7Gdiplus5BrushD0Ev
#27 · 0x25f70
_ZN7Gdiplus5BrushD1Ev
#28 · 0x25fa0
_ZN7JNIEnv_13CallIntMethodEP8_jobjectP10_jmethodIDz
#29 · 0x25fc0
_ZN7JNIEnv_16CallObjectMethodEP8_jobjectP10_jmethodIDz
#30 · 0x25ff0
_ZNK7Gdiplus10SolidBrush5CloneEv
#31 · 0x26630
_ZNK7Gdiplus17PathGradientBrush5CloneEv
#32 · 0x26690
_ZNK7Gdiplus19LinearGradientBrush5CloneEv
#33 · 0x266f0
_ZNK7Gdiplus5Brush5CloneEv
#34 · 0x26750
_ZTIN7Gdiplus10SolidBrushE
#35 · 0x2c630
_ZTIN7Gdiplus11GdiplusBaseE
#36 · 0x2c650
_ZTIN7Gdiplus17PathGradientBrushE
#37 · 0x2c660
_ZTIN7Gdiplus19LinearGradientBrushE
#38 · 0x2c680
_ZTIN7Gdiplus5BrushE
#39 · 0x2c6a0
_ZTSN7Gdiplus10SolidBrushE
#40 · 0x2c860
_ZTSN7Gdiplus11GdiplusBaseE
#41 · 0x2c880
_ZTSN7Gdiplus17PathGradientBrushE
#42 · 0x2c8a0
_ZTSN7Gdiplus19LinearGradientBrushE
#43 · 0x2c8c0
_ZTSN7Gdiplus5BrushE
#44 · 0x2c8e0
_ZTVN7Gdiplus10SolidBrushE
#45 · 0x2cb60
_ZTVN7Gdiplus17PathGradientBrushE
#46 · 0x2cb90
_ZTVN7Gdiplus19LinearGradientBrushE
#47 · 0x2cbc0
_ZTVN7Gdiplus5BrushE
#48 · 0x2cbf0
__emutls_get_address
#49 · 0x16400
__emutls_register_common
#50 · 0x16660
_snprintf_s
#51 · 0x27030
swprintf_s
#52 · 0x27090
No function matches your filter.
Imported DLLs & functions 200
_wtof
0x1db635b10
mbrtowc
0x1db635b18
mbsrtowcs
0x1db635b20
strtoul
0x1db635b28
wcrtomb
0x1db635b30
getenv
0x1db635b40
calloc
0x1db635b50
free
0x1db635b58
malloc
0x1db635b60
realloc
0x1db635b68
localeconv
0x1db635b78
__intrinsic_setjmp
0x1db635b88
longjmp
0x1db635b90
memcmp
0x1db635b98
memcpy
0x1db635ba0
memmove
0x1db635ba8
strchr
0x1db635bb0
wcschr
0x1db635bb8
_assert
0x1db635bc8
_beginthreadex
0x1db635bd0
_endthreadex
0x1db635bd8
_errno
0x1db635be0
_execute_onexit_table
0x1db635be8
_exit
0x1db635bf0
_initialize_onexit_table
0x1db635bf8
_initterm
0x1db635c00
_initterm_e
0x1db635c08
_register_onexit_function
0x1db635c10
_set_errno
0x1db635c18
abort
0x1db635c20
strerror
0x1db635c28
__acrt_iob_func
0x1db635c38
__stdio_common_vfprintf
0x1db635c40
__stdio_common_vsnprintf_s
0x1db635c48
__stdio_common_vsprintf
0x1db635c50
__stdio_common_vswprintf_s
0x1db635c58
_fileno
0x1db635c60
_setmode
0x1db635c68
fflush
0x1db635c70
fputc
0x1db635c78
fputs
0x1db635c80
fwrite
0x1db635c88
_strdup
0x1db635c98
memset
0x1db635ca0
strcmp
0x1db635ca8
strlen
0x1db635cb0
strncmp
0x1db635cb8
strncpy_s
0x1db635cc0
strnlen
0x1db635cc8
wcscpy_s
0x1db635cd0
wcslen
0x1db635cd8
wcsncpy_s
0x1db635ce0
wcsnlen
0x1db635ce8
BitBlt
0x1db6357c0
CreateCompatibleBitmap
0x1db6357c8
CreateCompatibleDC
0x1db6357d0
CreateRoundRectRgn
0x1db6357d8
DeleteDC
0x1db6357e0
DeleteObject
0x1db6357e8
SelectObject
0x1db6357f0
gdiplus.dll
38
GdipAddPathArc
0x1db635800
GdipAddPathEllipse
0x1db635808
GdipAlloc
0x1db635810
GdipCloneBrush
0x1db635818
GdipClosePathFigure
0x1db635820
GdipCreateFont
0x1db635828
GdipCreateFontFamilyFromName
0x1db635830
GdipCreateFromHDC
0x1db635838
GdipCreateLineBrush
0x1db635840
GdipCreatePath
0x1db635848
GdipCreatePathGradientFromPath
0x1db635850
GdipCreatePen1
0x1db635858
GdipCreateSolidFill
0x1db635860
GdipCreateStringFormat
0x1db635868
GdipDeleteBrush
0x1db635870
GdipDeleteFontFamily
0x1db635878
GdipDeleteGraphics
0x1db635880
GdipDeletePath
0x1db635888
GdipDeletePen
0x1db635890
GdipDeleteStringFormat
0x1db635898
GdipDrawEllipse
0x1db6358a0
GdipDrawLine
0x1db6358a8
GdipDrawPath
0x1db6358b0
GdipDrawRectangle
0x1db6358b8
GdipDrawString
0x1db6358c0
GdipFillEllipse
0x1db6358c8
GdipFillPath
0x1db6358d0
GdipFillRectangle
0x1db6358d8
GdipFree
0x1db6358e0
GdiplusShutdown
0x1db635920
GdiplusStartup
0x1db635928
GdipMeasureString
0x1db6358e8
GdipSetPathGradientCenterColor
0x1db6358f0
GdipSetPathGradientSurroundColorsWithCount
0x1db6358f8
GdipSetSmoothingMode
0x1db635900
GdipSetStringFormatAlign
0x1db635908
GdipSetStringFormatLineAlign
0x1db635910
GdipSetTextRenderingHint
0x1db635918
KERNEL32.dll
58
CloseHandle
0x1db635938
CreateEventA
0x1db635940
CreateSemaphoreA
0x1db635948
CreateThread
0x1db635950
DeleteCriticalSection
0x1db635958
DisableThreadLibraryCalls
0x1db635960
DuplicateHandle
0x1db635968
EnterCriticalSection
0x1db635970
FileTimeToSystemTime
0x1db635978
FreeLibrary
0x1db635980
FreeLibraryAndExitThread
0x1db635988
GetCurrentProcess
0x1db635990
GetCurrentProcessId
0x1db635998
GetCurrentThread
0x1db6359a0
GetCurrentThreadId
0x1db6359a8
GetLastError
0x1db6359b0
GetModuleHandleA
0x1db6359b8
GetProcAddress
0x1db6359c0
GetProcessAffinityMask
0x1db6359c8
GetProcessTimes
0x1db6359d0
GetSystemTimeAdjustment
0x1db6359d8
GetSystemTimeAsFileTime
0x1db6359e0
GetThreadContext
0x1db6359e8
GetThreadPriority
0x1db6359f0
GetThreadTimes
0x1db6359f8
GetTickCount
0x1db635a00
InitializeCriticalSection
0x1db635a08
LeaveCriticalSection
0x1db635a10
LoadLibraryA
0x1db635a18
MultiByteToWideChar
0x1db635a20
OpenProcess
0x1db635a28
OutputDebugStringA
0x1db635a30
QueryPerformanceCounter
0x1db635a38
QueryPerformanceFrequency
0x1db635a40
RaiseException
0x1db635a48
ReleaseSemaphore
0x1db635a50
ResetEvent
0x1db635a58
ResumeThread
0x1db635a60
RtlCaptureContext
0x1db635a68
RtlLookupFunctionEntry
0x1db635a70
RtlUnwindEx
0x1db635a78
RtlVirtualUnwind
0x1db635a80
SetEvent
0x1db635a88
SetLastError
0x1db635a90
SetProcessAffinityMask
0x1db635a98
SetSystemTime
0x1db635aa0
SetThreadContext
0x1db635aa8
SetThreadPriority
0x1db635ab0
Sleep
0x1db635ab8
SuspendThread
0x1db635ac0
TlsAlloc
0x1db635ac8
TlsGetValue
0x1db635ad0
TlsSetValue
0x1db635ad8
TryEnterCriticalSection
0x1db635ae0
VirtualProtect
0x1db635ae8
VirtualQuery
0x1db635af0
WaitForMultipleObjects
0x1db635af8
WaitForSingleObject
0x1db635b00
USER32.dll
42
BeginPaint
0x1db635cf8
CallNextHookEx
0x1db635d00
CreateWindowExW
0x1db635d08
DefWindowProcW
0x1db635d10
DestroyWindow
0x1db635d18
DispatchMessageW
0x1db635d20
EndPaint
0x1db635d28
EnumWindows
0x1db635d30
GetAsyncKeyState
0x1db635d38
GetForegroundWindow
0x1db635d40
GetKeyNameTextW
0x1db635d48
GetMessageW
0x1db635d50
GetSystemMetrics
0x1db635d58
GetWindow
0x1db635d60
GetWindowTextA
0x1db635d68
GetWindowThreadProcessId
0x1db635d70
InvalidateRect
0x1db635d78
IsWindow
0x1db635d80
IsWindowVisible
0x1db635d88
KillTimer
0x1db635d90
LoadCursorA
0x1db635d98
MapVirtualKeyW
0x1db635da0
PostMessageW
0x1db635da8
PostQuitMessage
0x1db635db0
PostThreadMessageW
0x1db635db8
RegisterClassExW
0x1db635dc0
ReleaseCapture
0x1db635dc8
SendInput
0x1db635dd0
SendMessageW
0x1db635dd8
SetCapture
0x1db635de0
SetFocus
0x1db635de8
SetLayeredWindowAttributes
0x1db635df0
SetTimer
0x1db635df8
SetWindowPos
0x1db635e00
SetWindowRgn
0x1db635e08
SetWindowsHookExW
0x1db635e10
ShowWindow
0x1db635e18
TrackMouseEvent
0x1db635e20
TranslateMessage
0x1db635e28
UnhookWindowsHookEx
0x1db635e30
UnregisterClassW
0x1db635e38
UpdateWindow
0x1db635e40
No function matches your filter.