thefinal.dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: CreateRemoteThread, WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported functions 1
ReflectiveLoader
#1 · 0x194d4
No function matches your filter.
Imported DLLs & functions 202
ADVAPI32.dll
21
AdjustTokenPrivileges
0x180032098
AllocateAndInitializeSid
0x180032050
CheckTokenMembership
0x180032028
CreateProcessAsUserA
0x180032080
CreateProcessWithLogonW
0x180032078
CreateProcessWithTokenW
0x180032070
CryptAcquireContextA
0x180032018
CryptGenRandom
0x180032020
CryptReleaseContext
0x180032010
DuplicateTokenEx
0x180032030
FreeSid
0x180032048
GetTokenInformation
0x180032000
GetUserNameA
0x180032068
ImpersonateLoggedOnUser
0x180032088
ImpersonateNamedPipeClient
0x180032058
LogonUserA
0x180032038
LookupAccountSidA
0x180032040
LookupPrivilegeValueA
0x180032090
OpenProcessToken
0x180032008
OpenThreadToken
0x1800320a0
RevertToSelf
0x180032060
KERNEL32.dll
144
AreFileApisANSI
0x180032468
CloseHandle
0x180032268
CompareStringW
0x180032398
ConnectNamedPipe
0x180032238
CopyFileA
0x180032118
CreateDirectoryW
0x1800323d8
CreateFileA
0x180032188
CreateFileMappingA
0x180032288
CreateFileW
0x180032370
CreateNamedPipeA
0x1800320b0
CreatePipe
0x1800322e0
CreateProcessA
0x1800320c0
CreateRemoteThread
0x180032230
CreateThread
0x180032130
CreateToolhelp32Snapshot
0x180032138
DecodePointer
0x180032458
DeleteCriticalSection
0x1800324c8
DeleteFileW
0x1800323e0
DeleteProcThreadAttributeList
0x1800321d0
DisconnectNamedPipe
0x1800322d8
DuplicateHandle
0x180032270
EncodePointer
0x180032450
EnterCriticalSection
0x1800324b0
ExitProcess
0x180032290
ExitThread
0x180032298
ExpandEnvironmentStringsA
0x1800320f8
FileTimeToSystemTime
0x1800320f0
FindClose
0x1800320e0
FindFirstFileA
0x180032108
FindNextFileA
0x180032110
FlushFileBuffers
0x1800322f8
FreeEnvironmentStringsW
0x1800323b8
FreeLibrary
0x180032448
GetACP
0x1800321b0
GetCommandLineA
0x180032480
GetComputerNameA
0x1800321a0
GetComputerNameExA
0x180032200
GetConsoleCP
0x180032410
GetConsoleMode
0x180032408
GetCPInfo
0x180032420
GetCurrentDirectoryA
0x1800322c0
GetCurrentDirectoryW
0x1800320c8
GetCurrentProcess
0x1800322b0
GetCurrentProcessId
0x180032128
GetCurrentThread
0x1800322a8
GetCurrentThreadId
0x180032488
GetEnvironmentStringsW
0x1800323c0
GetFileAttributesA
0x180032100
GetFileType
0x1800323e8
GetFullPathNameA
0x1800320d0
GetLastError
0x180032328
GetLocalTime
0x1800322f0
GetLogicalDrives
0x1800320d8
GetModuleFileNameA
0x180032198
GetModuleFileNameW
0x180032498
GetModuleHandleA
0x180032318
GetModuleHandleExW
0x180032460
GetModuleHandleW
0x180032520
GetOEMCP
0x1800321b8
GetProcAddress
0x180032438
GetProcessHeap
0x1800321c0
GetStartupInfoA
0x1800322d0
GetStartupInfoW
0x180032518
GetStdHandle
0x180032490
GetStringTypeW
0x180032388
GetSystemTimeAsFileTime
0x180032470
GetThreadContext
0x180032250
GetTickCount
0x1800322e8
GetVersionExA
0x1800321a8
HeapAlloc
0x180032350
HeapCreate
0x180032360
HeapDestroy
0x180032358
HeapFree
0x180032330
HeapReAlloc
0x180032478
HeapSize
0x1800323a0
InitializeCriticalSectionAndSpinCount
0x1800324c0
InitializeProcThreadAttributeList
0x1800321c8
IsDebuggerPresent
0x1800324a0
IsProcessorFeaturePresent
0x1800324a8
IsValidCodePage
0x180032428
LCMapStringW
0x180032390
LeaveCriticalSection
0x1800324b8
LoadLibraryA
0x180032320
LoadLibraryExW
0x180032528
LoadLibraryW
0x1800323a8
MapViewOfFile
0x180032278
MoveFileA
0x180032120
MultiByteToWideChar
0x1800322b8
OpenProcess
0x180032228
OpenThread
0x180032440
OutputDebugStringW
0x1800323b0
PeekNamedPipe
0x180032180
Process32First
0x1800321f0
Process32Next
0x1800321f8
ProcessIdToSessionId
0x1800321e8
QueryPerformanceCounter
0x1800323c8
RaiseException
0x180032338
ReadConsoleW
0x180032400
ReadFile
0x1800322a0
ReadProcessMemory
0x180032240
RemoveDirectoryW
0x1800323d0
ResumeThread
0x180032260
RtlCaptureContext
0x1800324d0
RtlLookupFunctionEntry
0x1800324d8
RtlUnwindEx
0x180032430
RtlVirtualUnwind
0x1800324e0
SetCurrentDirectoryA
0x1800322c8
SetEndOfFile
0x180032368
SetEnvironmentVariableA
0x180032348
SetEnvironmentVariableW
0x180032340
SetErrorMode
0x1800321d8
SetFilePointer
0x1800323f8
SetFilePointerEx
0x1800323f0
SetLastError
0x180032170
SetNamedPipeHandleState
0x180032178
SetStdHandle
0x180032380
SetThreadContext
0x180032258
SetUnhandledExceptionFilter
0x1800324f0
Sleep
0x180032310
SystemTimeToTzSpecificLocalTime
0x1800320e8
TerminateProcess
0x1800320b8
Thread32First
0x180032140
Thread32Next
0x180032148
TlsAlloc
0x1800324f8
TlsFree
0x180032510
TlsGetValue
0x180032500
TlsSetValue
0x180032508
UnhandledExceptionFilter
0x1800324e8
UnmapViewOfFile
0x180032280
UpdateProcThreadAttribute
0x1800321e0
VirtualAlloc
0x180032160
VirtualAllocEx
0x180032218
VirtualFree
0x180032208
VirtualProtect
0x180032168
VirtualProtectEx
0x180032220
VirtualQuery
0x180032210
WaitForSingleObject
0x180032308
WaitNamedPipeA
0x180032190
WideCharToMultiByte
0x180032418
Wow64GetThreadContext
0x180032150
Wow64SetThreadContext
0x180032158
WriteConsoleW
0x180032378
WriteFile
0x180032300
WriteProcessMemory
0x180032248
WININET.dll
12
HttpAddRequestHeadersA
0x180032578
HttpOpenRequestA
0x180032570
HttpQueryInfoA
0x180032588
HttpSendRequestA
0x180032580
InternetCloseHandle
0x180032540
InternetConnectA
0x180032548
InternetOpenA
0x180032590
InternetQueryDataAvailable
0x180032550
InternetQueryOptionA
0x180032558
InternetReadFile
0x180032538
InternetSetOptionA
0x180032560
InternetSetStatusCallback
0x180032568
WS2_32.dll
25
__WSAFDIsSet
0x180032620
accept
0x180032628
bind
0x180032630
closesocket
0x1800325e8
connect
0x1800325c0
gethostbyname
0x1800325a8
htonl
0x180032600
htons
0x1800325f8
inet_addr
0x180032638
ioctlsocket
0x1800325c8
listen
0x180032640
ntohl
0x1800325f0
ntohs
0x1800325a0
recv
0x180032608
recvfrom
0x180032648
select
0x180032650
send
0x1800325b8
sendto
0x180032658
shutdown
0x180032610
socket
0x1800325b0
WSACleanup
0x1800325d8
WSAGetLastError
0x180032618
WSAIoctl
0x1800325d0
WSASocketA
0x180032660
WSAStartup
0x1800325e0
No function matches your filter.