Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000BBA94 FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError, |
0_2_000BBA94 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000CD410 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW, |
0_2_000CD410 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000DC4F8 FindFirstFileExA, |
0_2_000DC4F8 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000B7AAF: __EH_prolog,_wcslen,_wcslen,CreateFileW,CloseHandle,CreateDirectoryW,CreateFileW,DeviceIoControl,CloseHandle,GetLastError,RemoveDirectoryW,DeleteFileW, |
0_2_000B7AAF |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000B92C6 |
0_2_000B92C6 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C7DCC |
0_2_000C7DCC |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C5001 |
0_2_000C5001 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C8243 |
0_2_000C8243 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C5272 |
0_2_000C5272 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000D6298 |
0_2_000D6298 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C02F7 |
0_2_000C02F7 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C13F6 |
0_2_000C13F6 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C741E |
0_2_000C741E |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000D64C7 |
0_2_000D64C7 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C55A0 |
0_2_000C55A0 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000DE5F0 |
0_2_000DE5F0 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C07A0 |
0_2_000C07A0 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000BD833 |
0_2_000BD833 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000C889F |
0_2_000C889F |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000B395A |
0_2_000B395A |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000B4A8E |
0_2_000B4A8E |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000DEA9E |
0_2_000DEA9E |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000E2BA4 |
0_2_000E2BA4 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000BFCCC |
0_2_000BFCCC |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000B2EB6 |
0_2_000B2EB6 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: String function: 000CFEEC appears 42 times |
|
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: String function: 000D0790 appears 31 times |
|
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: String function: 000CFFC0 appears 56 times |
|
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000CB6C2 FindResourceW,SizeofResource,LoadResource,LockResource,GlobalAlloc,GlobalLock,CreateStreamOnHGlobal,GdipCreateHBITMAPFromBitmap,GlobalUnlock,GlobalFree, |
0_2_000CB6C2 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: <pi-ms-win-core-synch-l1-2-0.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: <pi-ms-win-core-synch-l1-2-0.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: <pi-ms-win-core-localization-l1-2-1.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: dxgidebug.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: sfc_os.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: dwmapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: riched20.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: usp10.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: msls31.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: windowscodecs.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: textshaping.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: ieframe.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: iertutil.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: netapi32.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: userenv.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: winhttp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: wkscli.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: netutils.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: dataexchange.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: d3d11.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: dcomp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: dxgi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: twinapi.appcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: urlmon.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: srvcli.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: textinputframework.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: coreuicomponents.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: coremessaging.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: ntmarta.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: coremessaging.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: wintypes.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: wintypes.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: wintypes.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: msiso.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: windows.storage.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: wldp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: mshtml.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: powrprof.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: umpdc.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: srpapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: msimtf.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: d2d1.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: dwrite.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: resourcepolicyclient.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: d3d10warp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: dxcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: secur32.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: mlang.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: propsys.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: wininet.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: profapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: uiautomationcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: winmm.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: ondemandconnroutehelper.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: mswsock.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: iphlpapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Section loaded: winnsi.dll |
Jump to behavior |
Source: MpkkG8XzhJ.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT |
Source: MpkkG8XzhJ.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE |
Source: MpkkG8XzhJ.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC |
Source: MpkkG8XzhJ.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG |
Source: MpkkG8XzhJ.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG |
Source: MpkkG8XzhJ.exe |
Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT |
Source: MpkkG8XzhJ.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata |
Source: MpkkG8XzhJ.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc |
Source: MpkkG8XzhJ.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc |
Source: MpkkG8XzhJ.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata |
Source: MpkkG8XzhJ.exe |
Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000BBA94 FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError, |
0_2_000BBA94 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000CD410 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW, |
0_2_000CD410 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000DC4F8 FindFirstFileExA, |
0_2_000DC4F8 |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000D09FA IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, |
0_2_000D09FA |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000D0B8D SetUnhandledExceptionFilter, |
0_2_000D0B8D |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000D0D7A SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, |
0_2_000D0D7A |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000D4FDF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, |
0_2_000D4FDF |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\MpkkG8XzhJ.exe |
Code function: 0_2_000CF04C GetCommandLineW,OpenFileMappingW,MapViewOfFile,UnmapViewOfFile,CloseHandle,GetModuleFileNameW,SetEnvironmentVariableW,GetLocalTime,_swprintf,SetEnvironmentVariableW,GetModuleHandleW,LoadIconW,DialogBoxParamW,Sleep,DeleteObject,DeleteObject,CloseHandle, |
0_2_000CF04C |