2d67608f5ac8e719ee778333e234329383d30345078a44c760675e11dc37e78a
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
#3 · 0x14c9
#4 · 0x1c9c
No function matches your filter.
Imported DLLs & functions 131
ADVAPI32.dll
29
AccessCheck
0x1000e018
AddAccessAllowedAce
0x1000e05c
AllocateAndInitializeSid
0x1000e034
DuplicateTokenEx
0x1000e064
FreeSid
0x1000e038
GetSidIdentifierAuthority
0x1000e06c
GetSidSubAuthority
0x1000e028
GetSidSubAuthorityCount
0x1000e024
GetTokenInformation
0x1000e020
GetUserNameW
0x1000e02c
InitializeAcl
0x1000e060
InitializeSecurityDescriptor
0x1000e058
IsValidSid
0x1000e014
LookupAccountNameA
0x1000e008
LookupAccountSidA
0x1000e010
LookupAccountSidW
0x1000e030
OpenProcessToken
0x1000e01c
OpenThreadToken
0x1000e068
RegCloseKey
0x1000e048
RegCreateKeyExA
0x1000e044
RegDeleteValueA
0x1000e000
RegEnumKeyExA
0x1000e00c
RegEnumValueA
0x1000e004
RegOpenKeyExA
0x1000e03c
RegQueryValueExA
0x1000e040
RegSetValueExA
0x1000e04c
SetSecurityDescriptorDacl
0x1000e070
SetSecurityDescriptorGroup
0x1000e050
SetSecurityDescriptorOwner
0x1000e054
KERNEL32.dll
64
BeginUpdateResourceA
0x1000e140
CloseHandle
0x1000e130
CopyFileA
0x1000e164
CreateFileA
0x1000e128
CreateFileMappingA
0x1000e110
CreateFileW
0x1000e100
CreateMutexA
0x1000e088
CreateMutexW
0x1000e0d0
CreateProcessA
0x1000e13c
CreateThread
0x1000e120
DeleteFileA
0x1000e15c
EndUpdateResourceA
0x1000e148
FindClose
0x1000e078
FindFirstFileA
0x1000e07c
FindNextFileA
0x1000e094
FindResourceA
0x1000e14c
FreeLibrary
0x1000e098
GetComputerNameA
0x1000e0b0
GetCurrentProcess
0x1000e0c8
GetCurrentProcessId
0x1000e170
GetCurrentThread
0x1000e0cc
GetEnvironmentVariableA
0x1000e16c
GetEnvironmentVariableW
0x1000e104
GetFileSize
0x1000e174
GetFileTime
0x1000e134
GetLastError
0x1000e160
GetModuleFileNameA
0x1000e0bc
GetModuleHandleA
0x1000e0f4
GetProcAddress
0x1000e11c
GetSystemDirectoryA
0x1000e0a0
GetSystemTime
0x1000e0a4
GetTempPathA
0x1000e09c
GetVersion
0x1000e0dc
GetVersionExA
0x1000e0b8
GetVolumeInformationA
0x1000e080
IsBadReadPtr
0x1000e0fc
LoadLibraryA
0x1000e114
LoadLibraryExA
0x1000e0f8
LoadLibraryW
0x1000e108
LoadResource
0x1000e150
LocalAlloc
0x1000e0c4
LocalFree
0x1000e0c0
LockResource
0x1000e158
lstrcatA
0x1000e0e0
lstrcpyA
0x1000e0d8
lstrcpynA
0x1000e0ac
lstrlenA
0x1000e0a8
MapViewOfFile
0x1000e10c
OpenMutexA
0x1000e08c
OpenMutexW
0x1000e0f0
OpenProcess
0x1000e0b4
ReadFile
0x1000e090
ReleaseMutex
0x1000e0e8
SetFileAttributesA
0x1000e168
SetFilePointer
0x1000e118
SetFileTime
0x1000e138
SetLastError
0x1000e0d4
SizeofResource
0x1000e154
Sleep
0x1000e124
UpdateResourceA
0x1000e144
VirtualAlloc
0x1000e0ec
VirtualFree
0x1000e0e4
WaitForSingleObject
0x1000e084
WriteFile
0x1000e12c
MSVCRT.dll
31
_abnormal_termination
0x1000e1e0
_adjust_fdiv
0x1000e198
_ftol
0x1000e1d8
_initterm
0x1000e1f4
_itoa
0x1000e19c
_local_unwind2
0x1000e180
_mbschr
0x1000e17c
_snprintf
0x1000e1d4
_stricmp
0x1000e1a0
_wcsicmp
0x1000e194
??2@YAPAXI@Z
0x1000e1f0
??3@YAXPAX@Z
0x1000e1ec
free
0x1000e1c8
malloc
0x1000e1c0
memcmp
0x1000e1d0
memcpy
0x1000e1b8
memset
0x1000e1ac
realloc
0x1000e1dc
sscanf
0x1000e1a4
strcat
0x1000e1a8
strcmp
0x1000e184
strcpy
0x1000e1c4
strlen
0x1000e1bc
strncat
0x1000e1cc
strncmp
0x1000e190
strncpy
0x1000e1b4
strstr
0x1000e1b0
wcscmp
0x1000e1e4
wcscpy
0x1000e18c
wcslen
0x1000e1e8
wcsncat
0x1000e188
CreateWindowExW
0x1000e204
DestroyWindow
0x1000e208
SetPropA
0x1000e200
UnregisterClassA
0x1000e1fc
UnregisterClassW
0x1000e210
wsprintfA
0x1000e20c
htonl
0x1000e218
No function matches your filter.