VTI SCORE: 98/100
Dynamic Analysis Report |
Classification: Trojan, Keylogger, Spyware |
2b277c411944cb25bf454ad5dc38d32e8eed45eac058304982c15646720990cf (SHA256)
beckky.exe
Windows Exe (x86-32)
Created at 2018-10-24 12:43:00
Notifications (2/3)
The operating system was rebooted during the analysis.
This is a filtered view
This list contains only the embedded files and created files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
File Reputation Information
»
Severity |
Blacklisted
|
First Seen | 2018-10-24 12:42 (UTC+2) |
Last Seen | 2018-10-24 12:42 (UTC+2) |
Names | Win32.Trojan.Hpursnif |
Families | Hpursnif |
Classification | Trojan |
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x4081cf |
Size Of Code | 0x17e00 |
Size Of Initialized Data | 0xbb400 |
File Type | executable |
Subsystem | windows_gui |
Machine Type | i386 |
Compile Timestamp | 2018-10-23 21:49:58+00:00 |
Version Information (9)
»
LegalCopyright | Copyright ©ironSource 2013. All rights reserved. |
InternalName | Synchronization Hbmis |
CompanyName | ironSource |
Comments | Head Telephnic Ratios Signature Ada Ac97 |
ProductName | Synchronization Hbmis |
Languages | English |
ProductVersion | 5.2.5.6 |
FileDescription | Head Telephnic Ratios Signature Ada Ac97 |
OriginalFilename | Synchronization Hbmis.exe |
Sections (4)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x17c02 | 0x17e00 | 0x400 | cnt_code, mem_execute, mem_read | 6.71 |
.rdata | 0x419000 | 0x8612 | 0x8800 | 0x18200 | cnt_initialized_data, mem_read | 6.67 |
.data | 0x422000 | 0x3498 | 0x1800 | 0x20a00 | cnt_initialized_data, mem_read, mem_write | 3.51 |
.rsrc | 0x426000 | 0xb1350 | 0xb1400 | 0x22200 | cnt_initialized_data, mem_read | 7.74 |
Imports (15)
»
KERNEL32.dll (96)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
WriteConsoleW | 0x0 | 0x419090 | 0x20480 | 0x1f680 | 0x48c |
GetConsoleOutputCP | 0x0 | 0x419094 | 0x20484 | 0x1f684 | 0x199 |
WriteConsoleA | 0x0 | 0x419098 | 0x20488 | 0x1f688 | 0x482 |
SetEnvironmentVariableA | 0x0 | 0x41909c | 0x2048c | 0x1f68c | 0x3d0 |
CompareStringW | 0x0 | 0x4190a0 | 0x20490 | 0x1f690 | 0x55 |
CompareStringA | 0x0 | 0x4190a4 | 0x20494 | 0x1f694 | 0x52 |
SetFilePointer | 0x0 | 0x4190a8 | 0x20498 | 0x1f698 | 0x3df |
FlushFileBuffers | 0x0 | 0x4190ac | 0x2049c | 0x1f69c | 0x141 |
GetConsoleCP | 0x0 | 0x4190b0 | 0x204a0 | 0x1f6a0 | 0x183 |
InitializeCriticalSectionAndSpinCount | 0x0 | 0x4190b4 | 0x204a4 | 0x1f6a4 | 0x2b5 |
GetLocaleInfoA | 0x0 | 0x4190b8 | 0x204a8 | 0x1f6a8 | 0x1e8 |
GetStringTypeW | 0x0 | 0x4190bc | 0x204ac | 0x1f6ac | 0x240 |
GetStringTypeA | 0x0 | 0x4190c0 | 0x204b0 | 0x1f6b0 | 0x23d |
HeapSize | 0x0 | 0x4190c4 | 0x204b4 | 0x1f6b4 | 0x2a6 |
RtlUnwind | 0x0 | 0x4190c8 | 0x204b8 | 0x1f6b8 | 0x392 |
HeapReAlloc | 0x0 | 0x4190cc | 0x204bc | 0x1f6bc | 0x2a4 |
GetTickCount | 0x0 | 0x4190d0 | 0x204c0 | 0x1f6c0 | 0x266 |
QueryPerformanceCounter | 0x0 | 0x4190d4 | 0x204c4 | 0x1f6c4 | 0x354 |
VirtualFree | 0x0 | 0x4190d8 | 0x204c8 | 0x1f6c8 | 0x457 |
HeapCreate | 0x0 | 0x4190dc | 0x204cc | 0x1f6cc | 0x29f |
DeleteCriticalSection | 0x0 | 0x4190e0 | 0x204d0 | 0x1f6d0 | 0xbe |
GetFileType | 0x0 | 0x4190e4 | 0x204d4 | 0x1f6d4 | 0x1d7 |
SetHandleCount | 0x0 | 0x4190e8 | 0x204d8 | 0x1f6d8 | 0x3e8 |
GetEnvironmentStringsW | 0x0 | 0x4190ec | 0x204dc | 0x1f6dc | 0x1c1 |
FreeEnvironmentStringsW | 0x0 | 0x4190f0 | 0x204e0 | 0x1f6e0 | 0x14b |
SetStdHandle | 0x0 | 0x4190f4 | 0x204e4 | 0x1f6e4 | 0x3fc |
FreeEnvironmentStringsA | 0x0 | 0x4190f8 | 0x204e8 | 0x1f6e8 | 0x14a |
GetModuleFileNameA | 0x0 | 0x4190fc | 0x204ec | 0x1f6ec | 0x1f4 |
GetStdHandle | 0x0 | 0x419100 | 0x204f0 | 0x1f6f0 | 0x23b |
ExitProcess | 0x0 | 0x419104 | 0x204f4 | 0x1f6f4 | 0x104 |
Sleep | 0x0 | 0x419108 | 0x204f8 | 0x1f6f8 | 0x421 |
LeaveCriticalSection | 0x0 | 0x41910c | 0x204fc | 0x1f6fc | 0x2ef |
EnterCriticalSection | 0x0 | 0x419110 | 0x20500 | 0x1f700 | 0xd9 |
LCMapStringW | 0x0 | 0x419114 | 0x20504 | 0x1f704 | 0x2e3 |
MultiByteToWideChar | 0x0 | 0x419118 | 0x20508 | 0x1f708 | 0x31a |
LCMapStringA | 0x0 | 0x41911c | 0x2050c | 0x1f70c | 0x2e1 |
GetCurrentThreadId | 0x0 | 0x419120 | 0x20510 | 0x1f710 | 0x1ad |
SetLastError | 0x0 | 0x419124 | 0x20514 | 0x1f714 | 0x3ec |
TlsFree | 0x0 | 0x419128 | 0x20518 | 0x1f718 | 0x433 |
TlsSetValue | 0x0 | 0x41912c | 0x2051c | 0x1f71c | 0x435 |
TlsAlloc | 0x0 | 0x419130 | 0x20520 | 0x1f720 | 0x432 |
TlsGetValue | 0x0 | 0x419134 | 0x20524 | 0x1f724 | 0x434 |
GetModuleHandleW | 0x0 | 0x419138 | 0x20528 | 0x1f728 | 0x1f9 |
IsValidCodePage | 0x0 | 0x41913c | 0x2052c | 0x1f72c | 0x2db |
GetOEMCP | 0x0 | 0x419140 | 0x20530 | 0x1f730 | 0x213 |
GetACP | 0x0 | 0x419144 | 0x20534 | 0x1f734 | 0x152 |
InterlockedDecrement | 0x0 | 0x419148 | 0x20538 | 0x1f738 | 0x2bc |
InterlockedIncrement | 0x0 | 0x41914c | 0x2053c | 0x1f73c | 0x2c0 |
GetCPInfo | 0x0 | 0x419150 | 0x20540 | 0x1f740 | 0x15b |
GetTimeZoneInformation | 0x0 | 0x419154 | 0x20544 | 0x1f744 | 0x26b |
RaiseException | 0x0 | 0x419158 | 0x20548 | 0x1f748 | 0x35a |
HeapFree | 0x0 | 0x41915c | 0x2054c | 0x1f74c | 0x2a1 |
GetStartupInfoA | 0x0 | 0x419160 | 0x20550 | 0x1f750 | 0x239 |
GetCurrentProcessId | 0x0 | 0x419164 | 0x20554 | 0x1f754 | 0x1aa |
FileTimeToLocalFileTime | 0x0 | 0x419168 | 0x20558 | 0x1f758 | 0x10f |
CloseHandle | 0x0 | 0x41916c | 0x2055c | 0x1f75c | 0x43 |
Module32NextW | 0x0 | 0x419170 | 0x20560 | 0x1f760 | 0x310 |
CreateToolhelp32Snapshot | 0x0 | 0x419174 | 0x20564 | 0x1f764 | 0xac |
ConvertDefaultLocale | 0x0 | 0x419178 | 0x20568 | 0x1f768 | 0x5a |
Module32FirstW | 0x0 | 0x41917c | 0x2056c | 0x1f76c | 0x30e |
CreateEventW | 0x0 | 0x419180 | 0x20570 | 0x1f770 | 0x75 |
LoadLibraryA | 0x0 | 0x419184 | 0x20574 | 0x1f774 | 0x2f1 |
CancelIoEx | 0x0 | 0x419188 | 0x20578 | 0x1f778 | 0x34 |
GlobalFree | 0x0 | 0x41918c | 0x2057c | 0x1f77c | 0x28c |
LocalLock | 0x0 | 0x419190 | 0x20580 | 0x1f780 | 0x2ff |
VirtualAlloc | 0x0 | 0x419194 | 0x20584 | 0x1f784 | 0x454 |
GetProcAddress | 0x0 | 0x419198 | 0x20588 | 0x1f788 | 0x220 |
GetLastError | 0x0 | 0x41919c | 0x2058c | 0x1f78c | 0x1e6 |
GetOverlappedResult | 0x0 | 0x4191a0 | 0x20590 | 0x1f790 | 0x214 |
CreateFileW | 0x0 | 0x4191a4 | 0x20594 | 0x1f794 | 0x7f |
ReadFile | 0x0 | 0x4191a8 | 0x20598 | 0x1f798 | 0x368 |
FileTimeToSystemTime | 0x0 | 0x4191ac | 0x2059c | 0x1f79c | 0x110 |
CreateEventA | 0x0 | 0x4191b0 | 0x205a0 | 0x1f7a0 | 0x72 |
VirtualAllocExNuma | 0x0 | 0x4191b4 | 0x205a4 | 0x1f7a4 | 0x456 |
GetConsoleMode | 0x0 | 0x4191b8 | 0x205a8 | 0x1f7a8 | 0x195 |
GetModuleHandleA | 0x0 | 0x4191bc | 0x205ac | 0x1f7ac | 0x1f6 |
WideCharToMultiByte | 0x0 | 0x4191c0 | 0x205b0 | 0x1f7b0 | 0x47a |
GlobalAlloc | 0x0 | 0x4191c4 | 0x205b4 | 0x1f7b4 | 0x285 |
WriteFile | 0x0 | 0x4191c8 | 0x205b8 | 0x1f7b8 | 0x48d |
GetCompressedFileSizeW | 0x0 | 0x4191cc | 0x205bc | 0x1f7bc | 0x174 |
GetProcessHeap | 0x0 | 0x4191d0 | 0x205c0 | 0x1f7c0 | 0x223 |
GetTimeFormatA | 0x0 | 0x4191d4 | 0x205c4 | 0x1f7c4 | 0x268 |
WaitForSingleObject | 0x0 | 0x4191d8 | 0x205c8 | 0x1f7c8 | 0x464 |
GetCommandLineA | 0x0 | 0x4191dc | 0x205cc | 0x1f7cc | 0x16f |
GetSystemTimeAsFileTime | 0x0 | 0x4191e0 | 0x205d0 | 0x1f7d0 | 0x24f |
IsDebuggerPresent | 0x0 | 0x4191e4 | 0x205d4 | 0x1f7d4 | 0x2d1 |
SetUnhandledExceptionFilter | 0x0 | 0x4191e8 | 0x205d8 | 0x1f7d8 | 0x415 |
UnhandledExceptionFilter | 0x0 | 0x4191ec | 0x205dc | 0x1f7dc | 0x43e |
GetCurrentProcess | 0x0 | 0x4191f0 | 0x205e0 | 0x1f7e0 | 0x1a9 |
TerminateProcess | 0x0 | 0x4191f4 | 0x205e4 | 0x1f7e4 | 0x42d |
HeapAlloc | 0x0 | 0x4191f8 | 0x205e8 | 0x1f7e8 | 0x29d |
CreateThread | 0x0 | 0x4191fc | 0x205ec | 0x1f7ec | 0xa3 |
ExitThread | 0x0 | 0x419200 | 0x205f0 | 0x1f7f0 | 0x105 |
lstrcpyA | 0x0 | 0x419204 | 0x205f4 | 0x1f7f4 | 0x4af |
GetEnvironmentStrings | 0x0 | 0x419208 | 0x205f8 | 0x1f7f8 | 0x1bf |
CreateFileA | 0x0 | 0x41920c | 0x205fc | 0x1f7fc | 0x78 |
USER32.dll (61)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
PostMessageA | 0x0 | 0x41924c | 0x2063c | 0x1f83c | 0x21e |
GetDesktopWindow | 0x0 | 0x419250 | 0x20640 | 0x1f840 | 0x11c |
DefWindowProcA | 0x0 | 0x419254 | 0x20644 | 0x1f844 | 0x95 |
CreateWindowExA | 0x0 | 0x419258 | 0x20648 | 0x1f848 | 0x67 |
MessageBoxA | 0x0 | 0x41925c | 0x2064c | 0x1f84c | 0x1f8 |
DispatchMessageA | 0x0 | 0x419260 | 0x20650 | 0x1f850 | 0xa8 |
ShowWindow | 0x0 | 0x419264 | 0x20654 | 0x1f854 | 0x2b8 |
TranslateMessage | 0x0 | 0x419268 | 0x20658 | 0x1f858 | 0x2d5 |
SendMessageA | 0x0 | 0x41926c | 0x2065c | 0x1f85c | 0x25e |
GetWindowTextLengthA | 0x0 | 0x419270 | 0x20660 | 0x1f860 | 0x18d |
LoadCursorA | 0x0 | 0x419274 | 0x20664 | 0x1f864 | 0x1d2 |
GetFocus | 0x0 | 0x419278 | 0x20668 | 0x1f868 | 0x124 |
SetForegroundWindow | 0x0 | 0x41927c | 0x2066c | 0x1f86c | 0x27a |
GetClassInfoExA | 0x0 | 0x419280 | 0x20670 | 0x1f870 | 0x105 |
PostQuitMessage | 0x0 | 0x419284 | 0x20674 | 0x1f874 | 0x220 |
RegisterClassExA | 0x0 | 0x419288 | 0x20678 | 0x1f878 | 0x234 |
GetWindowRect | 0x0 | 0x41928c | 0x2067c | 0x1f87c | 0x188 |
GetMessageA | 0x0 | 0x419290 | 0x20680 | 0x1f880 | 0x14a |
DestroyWindow | 0x0 | 0x419294 | 0x20684 | 0x1f884 | 0xa0 |
DialogBoxParamA | 0x0 | 0x419298 | 0x20688 | 0x1f888 | 0xa5 |
SetWindowTextA | 0x0 | 0x41929c | 0x2068c | 0x1f88c | 0x2ab |
UpdateWindow | 0x0 | 0x4192a0 | 0x20690 | 0x1f890 | 0x2e9 |
GetWindowTextA | 0x0 | 0x4192a4 | 0x20694 | 0x1f894 | 0x18c |
EnableWindow | 0x0 | 0x4192a8 | 0x20698 | 0x1f898 | 0xd1 |
GetTopWindow | 0x0 | 0x4192ac | 0x2069c | 0x1f89c | 0x175 |
DrawIconEx | 0x0 | 0x4192b0 | 0x206a0 | 0x1f8a0 | 0xc0 |
GetParent | 0x0 | 0x4192b4 | 0x206a4 | 0x1f8a4 | 0x155 |
DrawIcon | 0x0 | 0x4192b8 | 0x206a8 | 0x1f8a8 | 0xbf |
FindWindowW | 0x0 | 0x4192bc | 0x206ac | 0x1f8ac | 0xf3 |
EnumWindows | 0x0 | 0x4192c0 | 0x206b0 | 0x1f8b0 | 0xeb |
SetScrollRange | 0x0 | 0x4192c4 | 0x206b4 | 0x1f8b4 | 0x295 |
GetIconInfo | 0x0 | 0x4192c8 | 0x206b8 | 0x1f8b8 | 0x128 |
GetDC | 0x0 | 0x4192cc | 0x206bc | 0x1f8bc | 0x11a |
SetFocus | 0x0 | 0x4192d0 | 0x206c0 | 0x1f8c0 | 0x279 |
GetMenu | 0x0 | 0x4192d4 | 0x206c4 | 0x1f8c4 | 0x13c |
GetWindowWord | 0x0 | 0x4192d8 | 0x206c8 | 0x1f8c8 | 0x191 |
GetCursorInfo | 0x0 | 0x4192dc | 0x206cc | 0x1f8cc | 0x118 |
CopyIcon | 0x0 | 0x4192e0 | 0x206d0 | 0x1f8d0 | 0x4d |
IntersectRect | 0x0 | 0x4192e4 | 0x206d4 | 0x1f8d4 | 0x1a9 |
GetWindowLongA | 0x0 | 0x4192e8 | 0x206d8 | 0x1f8d8 | 0x181 |
ReleaseDC | 0x0 | 0x4192ec | 0x206dc | 0x1f8dc | 0x24c |
GetDlgItem | 0x0 | 0x4192f0 | 0x206e0 | 0x1f8e0 | 0x11f |
GetCursorPos | 0x0 | 0x4192f4 | 0x206e4 | 0x1f8e4 | 0x119 |
GetMenuItemInfoA | 0x0 | 0x4192f8 | 0x206e8 | 0x1f8e8 | 0x144 |
CreatePopupMenu | 0x0 | 0x4192fc | 0x206ec | 0x1f8ec | 0x65 |
GetSystemMetrics | 0x0 | 0x419300 | 0x206f0 | 0x1f8f0 | 0x16f |
LoadImageA | 0x0 | 0x419304 | 0x206f4 | 0x1f8f4 | 0x1d8 |
DestroyIcon | 0x0 | 0x419308 | 0x206f8 | 0x1f8f8 | 0x9d |
GetWindowThreadProcessId | 0x0 | 0x41930c | 0x206fc | 0x1f8fc | 0x190 |
GetWindow | 0x0 | 0x419310 | 0x20700 | 0x1f900 | 0x17d |
EndPaint | 0x0 | 0x419314 | 0x20704 | 0x1f904 | 0xd5 |
DrawTextA | 0x0 | 0x419318 | 0x20708 | 0x1f908 | 0xc5 |
LoadStringA | 0x0 | 0x41931c | 0x2070c | 0x1f90c | 0x1e3 |
LoadIconA | 0x0 | 0x419320 | 0x20710 | 0x1f910 | 0x1d6 |
GetClientRect | 0x0 | 0x419324 | 0x20714 | 0x1f914 | 0x10d |
BeginPaint | 0x0 | 0x419328 | 0x20718 | 0x1f918 | 0xe |
TranslateAcceleratorA | 0x0 | 0x41932c | 0x2071c | 0x1f91c | 0x2d2 |
EndDialog | 0x0 | 0x419330 | 0x20720 | 0x1f920 | 0xd3 |
LoadAcceleratorsA | 0x0 | 0x419334 | 0x20724 | 0x1f924 | 0x1ce |
IsWindow | 0x0 | 0x419338 | 0x20728 | 0x1f928 | 0x1c5 |
InflateRect | 0x0 | 0x41933c | 0x2072c | 0x1f92c | 0x1a1 |
GDI32.dll (26)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CreateFontIndirectA | 0x0 | 0x41901c | 0x2040c | 0x1f60c | 0x3b |
GetBitmapBits | 0x0 | 0x419020 | 0x20410 | 0x1f610 | 0x191 |
BitBlt | 0x0 | 0x419024 | 0x20414 | 0x1f614 | 0x12 |
GetTextMetricsW | 0x0 | 0x419028 | 0x20418 | 0x1f618 | 0x20d |
SetTextColor | 0x0 | 0x41902c | 0x2041c | 0x1f61c | 0x28d |
DeleteDC | 0x0 | 0x419030 | 0x20420 | 0x1f620 | 0xcd |
CreateDIBSection | 0x0 | 0x419034 | 0x20424 | 0x1f624 | 0x33 |
CreateFontA | 0x0 | 0x419038 | 0x20428 | 0x1f628 | 0x3a |
GetDeviceCaps | 0x0 | 0x41903c | 0x2042c | 0x1f62c | 0x1b5 |
ExcludeClipRect | 0x0 | 0x419040 | 0x20430 | 0x1f630 | 0x11c |
CreatePalette | 0x0 | 0x419044 | 0x20434 | 0x1f634 | 0x47 |
SetBkMode | 0x0 | 0x419048 | 0x20438 | 0x1f638 | 0x266 |
SelectObject | 0x0 | 0x41904c | 0x2043c | 0x1f63c | 0x25e |
CreateCompatibleDC | 0x0 | 0x419050 | 0x20440 | 0x1f640 | 0x2e |
CombineRgn | 0x0 | 0x419054 | 0x20444 | 0x1f644 | 0x21 |
SetMapMode | 0x0 | 0x419058 | 0x20448 | 0x1f648 | 0x27b |
GetMapMode | 0x0 | 0x41905c | 0x2044c | 0x1f64c | 0x1d7 |
AddFontResourceExW | 0x0 | 0x419060 | 0x20450 | 0x1f650 | 0x5 |
CreateRectRgn | 0x0 | 0x419064 | 0x20454 | 0x1f654 | 0x4d |
SetTextAlign | 0x0 | 0x419068 | 0x20458 | 0x1f658 | 0x28b |
GetPixel | 0x0 | 0x41906c | 0x2045c | 0x1f65c | 0x1eb |
GetObjectA | 0x0 | 0x419070 | 0x20460 | 0x1f660 | 0x1e2 |
GetStockObject | 0x0 | 0x419074 | 0x20464 | 0x1f664 | 0x1f4 |
CreateSolidBrush | 0x0 | 0x419078 | 0x20468 | 0x1f668 | 0x52 |
TextOutA | 0x0 | 0x41907c | 0x2046c | 0x1f66c | 0x29f |
DeleteObject | 0x0 | 0x419080 | 0x20470 | 0x1f670 | 0xd0 |
COMDLG32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetOpenFileNameA | 0x0 | 0x419014 | 0x20404 | 0x1f604 | 0xb |
SHELL32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
ExtractIconExA | 0x0 | 0x41923c | 0x2062c | 0x1f82c | 0x2a |
ole32.dll (4)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RegisterDragDrop | 0x0 | 0x419358 | 0x20748 | 0x1f948 | 0x119 |
CoLockObjectExternal | 0x0 | 0x41935c | 0x2074c | 0x1f94c | 0x46 |
RevokeDragDrop | 0x0 | 0x419360 | 0x20750 | 0x1f950 | 0x11b |
OleInitialize | 0x0 | 0x419364 | 0x20754 | 0x1f954 | 0xf4 |
ODBC32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
(by ordinal) | 0x29 | 0x419214 | 0x20604 | 0x1f804 | - |
OPENGL32.dll (4)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
glMatrixMode | 0x0 | 0x41921c | 0x2060c | 0x1f80c | 0xb5 |
glViewport | 0x0 | 0x419220 | 0x20610 | 0x1f810 | 0x156 |
glLoadIdentity | 0x0 | 0x419224 | 0x20614 | 0x1f814 | 0xa4 |
glOrtho | 0x0 | 0x419228 | 0x20618 | 0x1f818 | 0xc4 |
GLU32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
gluLookAt | 0x0 | 0x419088 | 0x20478 | 0x1f678 | 0x15 |
AVICAP32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
capGetDriverDescriptionA | 0x0 | 0x419000 | 0x203f0 | 0x1f5f0 | 0x3 |
SHLWAPI.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
ColorRGBToHLS | 0x0 | 0x419244 | 0x20634 | 0x1f834 | 0xd |
COMCTL32.dll (2)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
ImageList_GetIconSize | 0x0 | 0x419008 | 0x203f8 | 0x1f5f8 | 0x62 |
CreateToolbarEx | 0x0 | 0x41900c | 0x203fc | 0x1f5fc | 0xe |
RPCRT4.dll (2)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
UuidCreate | 0x0 | 0x419230 | 0x20620 | 0x1f820 | 0x1f3 |
UuidToStringA | 0x0 | 0x419234 | 0x20624 | 0x1f824 | 0x1fb |
gdiplus.dll (4)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GdipCreateBitmapFromHICON | 0x0 | 0x419344 | 0x20734 | 0x1f934 | 0x4e |
GdipBitmapSetPixel | 0x0 | 0x419348 | 0x20738 | 0x1f938 | 0x2c |
GdipDisposeImage | 0x0 | 0x41934c | 0x2073c | 0x1f93c | 0x98 |
GdipBitmapGetPixel | 0x0 | 0x419350 | 0x20740 | 0x1f940 | 0x2a |
urlmon.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CreateFormatEnumerator | 0x0 | 0x41936c | 0x2075c | 0x1f95c | 0x21 |
C:\Users\CIIHMN~1\AppData\Local\Temp\D232\4099.tmp | Created File | Unknown |
Whitelisted
|
...
|
»
File Reputation Information
»
Severity |
Whitelisted
|
First Seen | 2011-05-27 11:27 (UTC+2) |
Last Seen | 2017-04-19 12:47 (UTC+2) |
C:\Users\CIIHMN~1\AppData\Local\Temp\D232\4099.bat | Created File | Text |
Unknown
|
...
|
»
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\adsldraw\autoclb.exe | Created File | Stream |
Unknown
|
...
|
»