Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00C9BA94 FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError, |
0_2_00C9BA94 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CBC4F8 FindFirstFileExA, |
0_2_00CBC4F8 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CAD410 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW, |
0_2_00CAD410 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00C97AAF: __EH_prolog,_wcslen,_wcslen,CreateFileW,CloseHandle,CreateDirectoryW,CreateFileW,DeviceIoControl,CloseHandle,GetLastError,RemoveDirectoryW,DeleteFileW, |
0_2_00C97AAF |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00C992C6 |
0_2_00C992C6 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA7DCC |
0_2_00CA7DCC |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA5001 |
0_2_00CA5001 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA02F7 |
0_2_00CA02F7 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CB6298 |
0_2_00CB6298 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA8243 |
0_2_00CA8243 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA5272 |
0_2_00CA5272 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA13F6 |
0_2_00CA13F6 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CB64C7 |
0_2_00CB64C7 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA741E |
0_2_00CA741E |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CBE5F0 |
0_2_00CBE5F0 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA55A0 |
0_2_00CA55A0 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA07A0 |
0_2_00CA07A0 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CA889F |
0_2_00CA889F |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00C9D833 |
0_2_00C9D833 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00C9395A |
0_2_00C9395A |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00C94A8E |
0_2_00C94A8E |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CBEA9E |
0_2_00CBEA9E |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CC2BA4 |
0_2_00CC2BA4 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00C9FCCC |
0_2_00C9FCCC |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00C92EB6 |
0_2_00C92EB6 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: String function: 00CAFFC0 appears 56 times |
|
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: String function: 00CB0790 appears 31 times |
|
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: String function: 00CAFEEC appears 42 times |
|
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CAB6C2 FindResourceW,SizeofResource,LoadResource,LockResource,GlobalAlloc,GlobalLock,CreateStreamOnHGlobal,GdipCreateHBITMAPFromBitmap,GlobalUnlock,GlobalFree, |
0_2_00CAB6C2 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: <pi-ms-win-core-synch-l1-2-0.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: <pi-ms-win-core-synch-l1-2-0.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: <pi-ms-win-core-localization-l1-2-1.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: dxgidebug.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: sfc_os.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: dwmapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: riched20.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: usp10.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: msls31.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: windowscodecs.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: textshaping.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: ieframe.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: iertutil.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: netapi32.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: userenv.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: winhttp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: wkscli.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: netutils.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: dataexchange.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: d3d11.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: dcomp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: dxgi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: twinapi.appcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: urlmon.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: srvcli.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: textinputframework.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: coreuicomponents.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: coremessaging.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: ntmarta.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: wintypes.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: wintypes.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: wintypes.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: msiso.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: windows.storage.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: wldp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: mshtml.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: powrprof.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: umpdc.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: srpapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: msimtf.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: d2d1.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: dwrite.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: resourcepolicyclient.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: d3d10warp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: dxcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: secur32.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: mlang.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: propsys.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: wininet.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: profapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: uiautomationcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: winmm.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: ondemandconnroutehelper.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: mswsock.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: iphlpapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Section loaded: winnsi.dll |
Jump to behavior |
Source: oJK2UKac7G.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT |
Source: oJK2UKac7G.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE |
Source: oJK2UKac7G.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC |
Source: oJK2UKac7G.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG |
Source: oJK2UKac7G.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG |
Source: oJK2UKac7G.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT |
Source: oJK2UKac7G.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata |
Source: oJK2UKac7G.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc |
Source: oJK2UKac7G.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc |
Source: oJK2UKac7G.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata |
Source: oJK2UKac7G.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00C9BA94 FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError, |
0_2_00C9BA94 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CBC4F8 FindFirstFileExA, |
0_2_00CBC4F8 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CAD410 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW, |
0_2_00CAD410 |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CB09FA IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, |
0_2_00CB09FA |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CB0B8D SetUnhandledExceptionFilter, |
0_2_00CB0B8D |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CB0D7A SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, |
0_2_00CB0D7A |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CB4FDF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, |
0_2_00CB4FDF |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\oJK2UKac7G.exe |
Code function: 0_2_00CAF04C GetCommandLineW,OpenFileMappingW,MapViewOfFile,UnmapViewOfFile,CloseHandle,GetModuleFileNameW,SetEnvironmentVariableW,GetLocalTime,_swprintf,SetEnvironmentVariableW,GetModuleHandleW,LoadIconW,DialogBoxParamW,Sleep,DeleteObject,DeleteObject,CloseHandle, |
0_2_00CAF04C |