Report - AazrkIaOnf.dll

PE64 DLL OS Processor Check PE File
ScreenShot
Created 2021.05.01 09:44 Machine s1_win7_x6401
Filename AazrkIaOnf.dll
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
AI Score Not founds Behavior Score
1.8
ZERO API file : clean
VT API (file) 24 detected (malicious, high confidence, Mekotio, FGHR, confidence, Eldorado, CLOUD, Softcnapp, ai score=85, R418241, Artemis)
md5 4ea2c49920dfc1dbcc1ffb5a7300c441
sha256 6ef0e93b9e0ddd5e3bbe36c5fdefa2dfd7a8d985fe36af2af5670b3671a1bd26
ssdeep 196608:hJ7In8fJaw8k9pDGOVSNatSyk8uwBtNf7lGGlswN27OZO5pBn:h+8fampDdshyk8hLG0gsOp
imphash ff750281199fd75b463a9612c10a02fe
impfuzzy 384:YcGok6y556PDRQLOWv5xTDx3VdqaCwYyJ+icg:YCkv56PDKTx3VewH
  Network IP location

Signature (5cnts)

Level Description
warning File has been identified by 24 AntiVirus engines on VirusTotal as malicious
notice The binary likely contains encrypted or compressed data indicative of a packer
info Checks if process is being debugged by a debugger
info One or more processes crashed
info The executable contains unknown PE section names indicative of a packer (could be a false positive)

Rules (4cnts)

Level Name Description Collection
info IsDLL (no description) binaries (upload)
info IsPE64 (no description) binaries (upload)
info OS_Processor_Check_Zero OS Processor Check binaries (upload)
info PE_Header_Zero PE File Signature binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids

PE API

IAT(Import Address Table) Library

winmm.dll
 0x11f9000 PlaySoundW
wininet.dll
 0x11f9010 InternetCloseHandle
 0x11f9018 InternetReadFile
 0x11f9020 InternetOpenW
 0x11f9028 InternetOpenUrlW
winspool.drv
 0x11f9038 DocumentPropertiesW
 0x11f9040 ClosePrinter
 0x11f9048 OpenPrinterW
 0x11f9050 GetDefaultPrinterW
 0x11f9058 EnumPrintersW
comctl32.dll
 0x11f9068 ImageList_GetImageInfo
 0x11f9070 FlatSB_SetScrollInfo
 0x11f9078 InitCommonControls
 0x11f9080 ImageList_DragMove
 0x11f9088 ImageList_Destroy
 0x11f9090 _TrackMouseEvent
 0x11f9098 ImageList_DragShowNolock
 0x11f90a0 ImageList_Add
 0x11f90a8 FlatSB_SetScrollProp
 0x11f90b0 ImageList_GetDragImage
 0x11f90b8 ImageList_Create
 0x11f90c0 ImageList_EndDrag
 0x11f90c8 ImageList_DrawEx
 0x11f90d0 ImageList_SetImageCount
 0x11f90d8 FlatSB_GetScrollPos
 0x11f90e0 FlatSB_SetScrollPos
 0x11f90e8 InitializeFlatSB
 0x11f90f0 ImageList_Copy
 0x11f90f8 FlatSB_GetScrollInfo
 0x11f9100 ImageList_Write
 0x11f9108 ImageList_SetBkColor
 0x11f9110 ImageList_GetBkColor
 0x11f9118 ImageList_BeginDrag
 0x11f9120 ImageList_GetIcon
 0x11f9128 ImageList_Replace
 0x11f9130 ImageList_GetImageCount
 0x11f9138 ImageList_DragEnter
 0x11f9140 ImageList_GetIconSize
 0x11f9148 ImageList_SetIconSize
 0x11f9150 ImageList_Read
 0x11f9158 ImageList_DragLeave
 0x11f9160 ImageList_LoadImageW
 0x11f9168 ImageList_Draw
 0x11f9170 ImageList_Remove
 0x11f9178 ImageList_ReplaceIcon
 0x11f9180 ImageList_SetOverlayImage
shell32.dll
 0x11f9190 SHGetSpecialFolderLocation
 0x11f9198 Shell_NotifyIconW
 0x11f91a0 ShellExecuteW
 0x11f91a8 SHGetPathFromIDListW
user32.dll
 0x11f91b8 DdeSetUserHandle
 0x11f91c0 CopyImage
 0x11f91c8 SetMenuItemInfoW
 0x11f91d0 GetMenuItemInfoW
 0x11f91d8 DefFrameProcW
 0x11f91e0 GetDlgCtrlID
 0x11f91e8 FrameRect
 0x11f91f0 RegisterWindowMessageW
 0x11f91f8 GetMenuStringW
 0x11f9200 FillRect
 0x11f9208 DdeCmpStringHandles
 0x11f9210 SendMessageA
 0x11f9218 IsClipboardFormatAvailable
 0x11f9220 EnumWindows
 0x11f9228 ShowOwnedPopups
 0x11f9230 GetClassInfoW
 0x11f9238 GetScrollRange
 0x11f9240 SetActiveWindow
 0x11f9248 GetActiveWindow
 0x11f9250 DrawEdge
 0x11f9258 GetKeyboardLayoutList
 0x11f9260 LoadBitmapW
 0x11f9268 EnumChildWindows
 0x11f9270 GetScrollBarInfo
 0x11f9278 UnhookWindowsHookEx
 0x11f9280 SetCapture
 0x11f9288 GetCapture
 0x11f9290 ShowCaret
 0x11f9298 CreatePopupMenu
 0x11f92a0 GetMenuItemID
 0x11f92a8 CharLowerBuffW
 0x11f92b0 PostMessageW
 0x11f92b8 IsZoomed
 0x11f92c0 SetParent
 0x11f92c8 DrawMenuBar
 0x11f92d0 SetSystemCursor
 0x11f92d8 GetClientRect
 0x11f92e0 IsChild
 0x11f92e8 IsIconic
 0x11f92f0 CallNextHookEx
 0x11f92f8 DdeDisconnect
 0x11f9300 ShowWindow
 0x11f9308 GetWindowTextW
 0x11f9310 SetForegroundWindow
 0x11f9318 GetAsyncKeyState
 0x11f9320 IsDialogMessageW
 0x11f9328 DestroyWindow
 0x11f9330 RegisterClassW
 0x11f9338 EndMenu
 0x11f9340 CharNextW
 0x11f9348 GetFocus
 0x11f9350 GetDC
 0x11f9358 SetFocus
 0x11f9360 ReleaseDC
 0x11f9368 mouse_event
 0x11f9370 ExitWindowsEx
 0x11f9378 SetScrollRange
 0x11f9380 DrawTextW
 0x11f9388 PeekMessageA
 0x11f9390 MessageBeep
 0x11f9398 RemovePropW
 0x11f93a0 GetSubMenu
 0x11f93a8 DestroyIcon
 0x11f93b0 IsWindowVisible
 0x11f93b8 DispatchMessageA
 0x11f93c0 UnregisterClassW
 0x11f93c8 GetTopWindow
 0x11f93d0 SendMessageW
 0x11f93d8 GetMessageTime
 0x11f93e0 GetWindowLongPtrW
 0x11f93e8 SetWindowLongPtrW
 0x11f93f0 DdeNameService
 0x11f93f8 DdeAccessData
 0x11f9400 LoadStringW
 0x11f9408 CreateMenu
 0x11f9410 CharLowerW
 0x11f9418 SetWindowRgn
 0x11f9420 SetWindowPos
 0x11f9428 GetMenuItemCount
 0x11f9430 GetSysColorBrush
 0x11f9438 GetWindowDC
 0x11f9440 DdeQueryConvInfo
 0x11f9448 DrawTextExW
 0x11f9450 EnumClipboardFormats
 0x11f9458 GetScrollInfo
 0x11f9460 SetWindowTextW
 0x11f9468 GetMessageExtraInfo
 0x11f9470 GetSysColor
 0x11f9478 EnableScrollBar
 0x11f9480 TrackPopupMenu
 0x11f9488 DrawIconEx
 0x11f9490 DdePostAdvise
 0x11f9498 GetClassNameW
 0x11f94a0 DdeCreateDataHandle
 0x11f94a8 GetMessagePos
 0x11f94b0 GetIconInfo
 0x11f94b8 SetScrollInfo
 0x11f94c0 GetKeyNameTextW
 0x11f94c8 GetDesktopWindow
 0x11f94d0 SetCursorPos
 0x11f94d8 GetCursorPos
 0x11f94e0 SetMenu
 0x11f94e8 GetMenuState
 0x11f94f0 GetMenu
 0x11f94f8 SetRect
 0x11f9500 GetKeyState
 0x11f9508 GetCursor
 0x11f9510 KillTimer
 0x11f9518 WaitMessage
 0x11f9520 TranslateMDISysAccel
 0x11f9528 GetWindowPlacement
 0x11f9530 CreateWindowExW
 0x11f9538 GetMessageW
 0x11f9540 GetDCEx
 0x11f9548 PeekMessageW
 0x11f9550 MonitorFromWindow
 0x11f9558 SetTimer
 0x11f9560 WindowFromPoint
 0x11f9568 BeginPaint
 0x11f9570 RegisterClipboardFormatW
 0x11f9578 DdeUnaccessData
 0x11f9580 MapVirtualKeyW
 0x11f9588 IsWindowUnicode
 0x11f9590 DispatchMessageW
 0x11f9598 CreateAcceleratorTableW
 0x11f95a0 DefMDIChildProcW
 0x11f95a8 GetSystemMenu
 0x11f95b0 SetScrollPos
 0x11f95b8 GetScrollPos
 0x11f95c0 DdeClientTransaction
 0x11f95c8 DrawFocusRect
 0x11f95d0 SendInput
 0x11f95d8 ReleaseCapture
 0x11f95e0 LoadCursorW
 0x11f95e8 DdeConnect
 0x11f95f0 ScrollWindow
 0x11f95f8 GetLastActivePopup
 0x11f9600 DdeUninitialize
 0x11f9608 GetSystemMetrics
 0x11f9610 CharUpperBuffW
 0x11f9618 SetClassLongPtrW
 0x11f9620 GetClassLongPtrW
 0x11f9628 SetClipboardData
 0x11f9630 GetClipboardData
 0x11f9638 ClientToScreen
 0x11f9640 SetWindowPlacement
 0x11f9648 DdeFreeStringHandle
 0x11f9650 GetMonitorInfoW
 0x11f9658 CheckMenuItem
 0x11f9660 CharUpperW
 0x11f9668 DefWindowProcW
 0x11f9670 GetForegroundWindow
 0x11f9678 EnableWindow
 0x11f9680 GetWindowThreadProcessId
 0x11f9688 RedrawWindow
 0x11f9690 EndPaint
 0x11f9698 MsgWaitForMultipleObjectsEx
 0x11f96a0 LoadKeyboardLayoutW
 0x11f96a8 ActivateKeyboardLayout
 0x11f96b0 GetParent
 0x11f96b8 MonitorFromRect
 0x11f96c0 InsertMenuItemW
 0x11f96c8 DdeQueryStringA
 0x11f96d0 GetPropW
 0x11f96d8 MessageBoxW
 0x11f96e0 SetPropW
 0x11f96e8 UpdateWindow
 0x11f96f0 MsgWaitForMultipleObjects
 0x11f96f8 VkKeyScanW
 0x11f9700 DestroyMenu
 0x11f9708 SetWindowsHookExW
 0x11f9710 EmptyClipboard
 0x11f9718 AdjustWindowRectEx
 0x11f9720 IsWindow
 0x11f9728 DrawIcon
 0x11f9730 EnumThreadWindows
 0x11f9738 InvalidateRect
 0x11f9740 GetKeyboardState
 0x11f9748 ScreenToClient
 0x11f9750 DrawFrameControl
 0x11f9758 DdeFreeDataHandle
 0x11f9760 SetCursor
 0x11f9768 CreateIcon
 0x11f9770 DdeInitializeA
 0x11f9778 RemoveMenu
 0x11f9780 DdeCreateStringHandleA
 0x11f9788 GetKeyboardLayoutNameW
 0x11f9790 OpenClipboard
 0x11f9798 TranslateMessage
 0x11f97a0 MapWindowPoints
 0x11f97a8 EnumDisplayMonitors
 0x11f97b0 CountClipboardFormats
 0x11f97b8 CallWindowProcW
 0x11f97c0 CloseClipboard
 0x11f97c8 DestroyCursor
 0x11f97d0 PostMessageA
 0x11f97d8 CopyIcon
 0x11f97e0 PostQuitMessage
 0x11f97e8 DdeGetLastError
 0x11f97f0 ShowScrollBar
 0x11f97f8 EnableMenuItem
 0x11f9800 HideCaret
 0x11f9808 FindWindowExW
 0x11f9810 MonitorFromPoint
 0x11f9818 LoadIconW
 0x11f9820 SystemParametersInfoW
 0x11f9828 GetWindow
 0x11f9830 GetWindowRect
 0x11f9838 InsertMenuW
 0x11f9840 PostThreadMessageW
 0x11f9848 IsWindowEnabled
 0x11f9850 IsDialogMessageA
 0x11f9858 FindWindowW
 0x11f9860 GetKeyboardLayout
 0x11f9868 DeleteMenu
version.dll
 0x11f9878 GetFileVersionInfoSizeW
 0x11f9880 VerQueryValueW
 0x11f9888 GetFileVersionInfoW
oleaut32.dll
 0x11f9898 GetErrorInfo
 0x11f98a0 SysFreeString
 0x11f98a8 VariantClear
 0x11f98b0 VariantInit
 0x11f98b8 SysReAllocStringLen
 0x11f98c0 SafeArrayCreate
 0x11f98c8 SafeArrayGetElement
 0x11f98d0 GetActiveObject
 0x11f98d8 SysAllocStringLen
 0x11f98e0 SafeArrayPtrOfIndex
 0x11f98e8 SafeArrayGetUBound
 0x11f98f0 SafeArrayGetLBound
 0x11f98f8 VariantCopy
 0x11f9900 VariantChangeType
advapi32.dll
 0x11f9910 RegSetValueExW
 0x11f9918 RegConnectRegistryW
 0x11f9920 GetUserNameW
 0x11f9928 RegQueryInfoKeyW
 0x11f9930 RegUnLoadKeyW
 0x11f9938 IsValidAcl
 0x11f9940 RegSaveKeyW
 0x11f9948 RegReplaceKeyW
 0x11f9950 RegCreateKeyExW
 0x11f9958 InitializeAcl
 0x11f9960 RegLoadKeyW
 0x11f9968 RegEnumKeyExW
 0x11f9970 AdjustTokenPrivileges
 0x11f9978 RegDeleteKeyW
 0x11f9980 SetSecurityInfo
 0x11f9988 LookupPrivilegeValueW
 0x11f9990 RegOpenKeyExW
 0x11f9998 OpenProcessToken
 0x11f99a0 RegDeleteValueW
 0x11f99a8 RegFlushKey
 0x11f99b0 RegEnumValueW
 0x11f99b8 RegQueryValueExW
 0x11f99c0 RegCloseKey
 0x11f99c8 RegRestoreKeyW
netapi32.dll
 0x11f99d8 NetWkstaGetInfo
 0x11f99e0 NetApiBufferFree
msvcrt.dll
 0x11f99f0 memcpy
 0x11f99f8 memset
winhttp.dll
 0x11f9a08 WinHttpGetIEProxyConfigForCurrentUser
 0x11f9a10 WinHttpSetTimeouts
 0x11f9a18 WinHttpSetStatusCallback
 0x11f9a20 WinHttpConnect
 0x11f9a28 WinHttpReceiveResponse
 0x11f9a30 WinHttpQueryAuthSchemes
 0x11f9a38 WinHttpGetProxyForUrl
 0x11f9a40 WinHttpReadData
 0x11f9a48 WinHttpCloseHandle
 0x11f9a50 WinHttpQueryHeaders
 0x11f9a58 WinHttpOpenRequest
 0x11f9a60 WinHttpAddRequestHeaders
 0x11f9a68 WinHttpOpen
 0x11f9a70 WinHttpWriteData
 0x11f9a78 WinHttpSetCredentials
 0x11f9a80 WinHttpQueryDataAvailable
 0x11f9a88 WinHttpSetOption
 0x11f9a90 WinHttpSendRequest
 0x11f9a98 WinHttpQueryOption
kernel32.dll
 0x11f9aa8 SetFileAttributesW
 0x11f9ab0 GetFileType
 0x11f9ab8 SetFileTime
 0x11f9ac0 RtlUnwindEx
 0x11f9ac8 QueryDosDeviceW
 0x11f9ad0 GetACP
 0x11f9ad8 CloseHandle
 0x11f9ae0 LocalFree
 0x11f9ae8 GetCurrentProcessId
 0x11f9af0 SizeofResource
 0x11f9af8 VirtualProtect
 0x11f9b00 TlsAlloc
 0x11f9b08 TerminateThread
 0x11f9b10 QueryPerformanceFrequency
 0x11f9b18 SetProcessWorkingSetSize
 0x11f9b20 IsDebuggerPresent
 0x11f9b28 FindNextFileW
 0x11f9b30 GetFullPathNameW
 0x11f9b38 VirtualFree
 0x11f9b40 HeapAlloc
 0x11f9b48 ExitProcess
 0x11f9b50 GetCPInfoExW
 0x11f9b58 GlobalSize
 0x11f9b60 RtlUnwind
 0x11f9b68 GetCPInfo
 0x11f9b70 EnumSystemLocalesW
 0x11f9b78 GetStdHandle
 0x11f9b80 GetTimeZoneInformation
 0x11f9b88 FileTimeToLocalFileTime
 0x11f9b90 SystemTimeToTzSpecificLocalTime
 0x11f9b98 GetModuleHandleW
 0x11f9ba0 FreeLibrary
 0x11f9ba8 TryEnterCriticalSection
 0x11f9bb0 HeapDestroy
 0x11f9bb8 FileTimeToDosDateTime
 0x11f9bc0 ReadFile
 0x11f9bc8 GetUserDefaultLCID
 0x11f9bd0 CreateProcessW
 0x11f9bd8 HeapSize
 0x11f9be0 GetLastError
 0x11f9be8 GetModuleFileNameW
 0x11f9bf0 SetLastError
 0x11f9bf8 GlobalAlloc
 0x11f9c00 GlobalUnlock
 0x11f9c08 FindResourceW
 0x11f9c10 CreateThread
 0x11f9c18 CompareStringW
 0x11f9c20 CopyFileW
 0x11f9c28 MapViewOfFile
 0x11f9c30 CreateMutexW
 0x11f9c38 LoadLibraryA
 0x11f9c40 GetVolumeInformationW
 0x11f9c48 ResetEvent
 0x11f9c50 MulDiv
 0x11f9c58 FreeResource
 0x11f9c60 GetDriveTypeW
 0x11f9c68 GetVersion
 0x11f9c70 RaiseException
 0x11f9c78 GlobalAddAtomW
 0x11f9c80 FormatMessageW
 0x11f9c88 OpenProcess
 0x11f9c90 SwitchToThread
 0x11f9c98 GetExitCodeThread
 0x11f9ca0 OutputDebugStringW
 0x11f9ca8 GetCurrentThread
 0x11f9cb0 GetLogicalDrives
 0x11f9cb8 GetFileAttributesExW
 0x11f9cc0 LoadLibraryExW
 0x11f9cc8 TerminateProcess
 0x11f9cd0 LockResource
 0x11f9cd8 FileTimeToSystemTime
 0x11f9ce0 GetCurrentThreadId
 0x11f9ce8 UnhandledExceptionFilter
 0x11f9cf0 GlobalFindAtomW
 0x11f9cf8 VirtualQuery
 0x11f9d00 GlobalFree
 0x11f9d08 VirtualQueryEx
 0x11f9d10 Sleep
 0x11f9d18 EnterCriticalSection
 0x11f9d20 SetFilePointer
 0x11f9d28 LoadResource
 0x11f9d30 SuspendThread
 0x11f9d38 GetTickCount
 0x11f9d40 GetFileSize
 0x11f9d48 GlobalDeleteAtom
 0x11f9d50 GetStartupInfoW
 0x11f9d58 GetFileAttributesW
 0x11f9d60 InitializeCriticalSection
 0x11f9d68 GetThreadPriority
 0x11f9d70 GetCurrentProcess
 0x11f9d78 GlobalLock
 0x11f9d80 SetThreadPriority
 0x11f9d88 VirtualAlloc
 0x11f9d90 GetTempPathW
 0x11f9d98 GetCommandLineW
 0x11f9da0 GetSystemInfo
 0x11f9da8 LeaveCriticalSection
 0x11f9db0 GetProcAddress
 0x11f9db8 ResumeThread
 0x11f9dc0 GetLogicalDriveStringsW
 0x11f9dc8 WinExec
 0x11f9dd0 GetVersionExW
 0x11f9dd8 VerifyVersionInfoW
 0x11f9de0 HeapCreate
 0x11f9de8 LCMapStringW
 0x11f9df0 GetDiskFreeSpaceW
 0x11f9df8 VerSetConditionMask
 0x11f9e00 FindFirstFileW
 0x11f9e08 GetUserDefaultUILanguage
 0x11f9e10 TlsFree
 0x11f9e18 GetConsoleOutputCP
 0x11f9e20 UnmapViewOfFile
 0x11f9e28 GetConsoleCP
 0x11f9e30 lstrlenW
 0x11f9e38 SetEndOfFile
 0x11f9e40 QueryPerformanceCounter
 0x11f9e48 HeapFree
 0x11f9e50 WideCharToMultiByte
 0x11f9e58 FindClose
 0x11f9e60 MultiByteToWideChar
 0x11f9e68 LoadLibraryW
 0x11f9e70 SetEvent
 0x11f9e78 GetLocaleInfoW
 0x11f9e80 CreateFileW
 0x11f9e88 SystemTimeToFileTime
 0x11f9e90 EnumResourceNamesW
 0x11f9e98 DeleteFileW
 0x11f9ea0 IsDBCSLeadByteEx
 0x11f9ea8 GetEnvironmentVariableW
 0x11f9eb0 GetLocalTime
 0x11f9eb8 WaitForSingleObject
 0x11f9ec0 WriteFile
 0x11f9ec8 CreateFileMappingW
 0x11f9ed0 ExitThread
 0x11f9ed8 DeleteCriticalSection
 0x11f9ee0 GetDateFormatW
 0x11f9ee8 TlsGetValue
 0x11f9ef0 SetErrorMode
 0x11f9ef8 GetComputerNameW
 0x11f9f00 TzSpecificLocalTimeToSystemTime
 0x11f9f08 IsValidLocale
 0x11f9f10 TlsSetValue
 0x11f9f18 CreateDirectoryW
 0x11f9f20 GetSystemDefaultUILanguage
 0x11f9f28 EnumCalendarInfoW
 0x11f9f30 LocalAlloc
 0x11f9f38 RemoveDirectoryW
 0x11f9f40 CreateEventW
 0x11f9f48 WaitForMultipleObjectsEx
 0x11f9f50 GetThreadLocale
 0x11f9f58 SetThreadLocale
wsock32.dll
 0x11f9f68 gethostbyaddr
 0x11f9f70 WSACleanup
 0x11f9f78 gethostbyname
 0x11f9f80 ind
 0x11f9f88 gethostname
 0x11f9f90 closesocket
 0x11f9f98 WSAGetLastError
 0x11f9fa0 connect
 0x11f9fa8 inet_addr
 0x11f9fb0 getpeername
 0x11f9fb8 WSAAsyncSelect
 0x11f9fc0 WSAAsyncGetServByName
 0x11f9fc8 WSACancelAsyncRequest
 0x11f9fd0 send
 0x11f9fd8 ntohs
 0x11f9fe0 htons
 0x11f9fe8 WSAStartup
 0x11f9ff0 getservbyname
 0x11f9ff8 getsockname
 0x11fa000 listen
 0x11fa008 socket
 0x11fa010 recv
 0x11fa018 inet_ntoa
 0x11fa020 ioctlsocket
 0x11fa028 WSAAsyncGetHostByName
ole32.dll
 0x11fa038 OleRegEnumVerbs
 0x11fa040 IsAccelerator
 0x11fa048 CreateBindCtx
 0x11fa050 MkParseDisplayName
 0x11fa058 CoCreateInstance
 0x11fa060 CoUninitialize
 0x11fa068 IsEqualGUID
 0x11fa070 ProgIDFromCLSID
 0x11fa078 CreateStreamOnHGlobal
 0x11fa080 OleInitialize
 0x11fa088 CLSIDFromProgID
 0x11fa090 OleUninitialize
 0x11fa098 CoGetClassObject
 0x11fa0a0 CoInitialize
 0x11fa0a8 CoTaskMemFree
 0x11fa0b0 OleDraw
 0x11fa0b8 CoTaskMemAlloc
 0x11fa0c0 StringFromCLSID
 0x11fa0c8 OleSetMenuDescriptor
gdi32.dll
 0x11fa0d8 Pie
 0x11fa0e0 SetBkMode
 0x11fa0e8 CreateCompatibleBitmap
 0x11fa0f0 GetEnhMetaFileHeader
 0x11fa0f8 CloseEnhMetaFile
 0x11fa100 RectVisible
 0x11fa108 AngleArc
 0x11fa110 ResizePalette
 0x11fa118 SetAbortProc
 0x11fa120 SetTextColor
 0x11fa128 StretchBlt
 0x11fa130 RoundRect
 0x11fa138 RestoreDC
 0x11fa140 SetRectRgn
 0x11fa148 GetTextMetricsW
 0x11fa150 GetWindowOrgEx
 0x11fa158 CreatePalette
 0x11fa160 PolyBezierTo
 0x11fa168 CreateICW
 0x11fa170 CreateDCW
 0x11fa178 GetStockObject
 0x11fa180 CreateSolidBrush
 0x11fa188 Polygon
 0x11fa190 MoveToEx
 0x11fa198 PlayEnhMetaFile
 0x11fa1a0 Ellipse
 0x11fa1a8 StartPage
 0x11fa1b0 GetBitmapBits
 0x11fa1b8 StartDocW
 0x11fa1c0 AbortDoc
 0x11fa1c8 GetSystemPaletteEntries
 0x11fa1d0 GetEnhMetaFileBits
 0x11fa1d8 GetEnhMetaFilePaletteEntries
 0x11fa1e0 CreatePenIndirect
 0x11fa1e8 SetMapMode
 0x11fa1f0 CreateFontIndirectW
 0x11fa1f8 PolyBezier
 0x11fa200 LPtoDP
 0x11fa208 EndDoc
 0x11fa210 GetObjectW
 0x11fa218 GetWinMetaFileBits
 0x11fa220 SetROP2
 0x11fa228 GetEnhMetaFileDescriptionW
 0x11fa230 ArcTo
 0x11fa238 CreateEnhMetaFileW
 0x11fa240 Arc
 0x11fa248 SelectPalette
 0x11fa250 ExcludeClipRect
 0x11fa258 MaskBlt
 0x11fa260 SetWindowOrgEx
 0x11fa268 EndPage
 0x11fa270 DeleteEnhMetaFile
 0x11fa278 Chord
 0x11fa280 SetDIBits
 0x11fa288 SetViewportOrgEx
 0x11fa290 CreateRectRgn
 0x11fa298 RealizePalette
 0x11fa2a0 SetDIBColorTable
 0x11fa2a8 GetDIBColorTable
 0x11fa2b0 CreateBrushIndirect
 0x11fa2b8 PatBlt
 0x11fa2c0 SetEnhMetaFileBits
 0x11fa2c8 CreateEllipticRgn
 0x11fa2d0 Rectangle
 0x11fa2d8 SaveDC
 0x11fa2e0 DeleteDC
 0x11fa2e8 BitBlt
 0x11fa2f0 FrameRgn
 0x11fa2f8 GetDeviceCaps
 0x11fa300 GetTextExtentPoint32W
 0x11fa308 GetClipBox
 0x11fa310 IntersectClipRect
 0x11fa318 Polyline
 0x11fa320 CreateBitmap
 0x11fa328 CombineRgn
 0x11fa330 SetWinMetaFileBits
 0x11fa338 GetStretchBltMode
 0x11fa340 CreateDIBitmap
 0x11fa348 SetStretchBltMode
 0x11fa350 GetDIBits
 0x11fa358 CreateDIBSection
 0x11fa360 LineTo
 0x11fa368 GetRgnBox
 0x11fa370 EnumFontsW
 0x11fa378 CreateHalftonePalette
 0x11fa380 SelectObject
 0x11fa388 DeleteObject
 0x11fa390 ExtFloodFill
 0x11fa398 UnrealizeObject
 0x11fa3a0 CopyEnhMetaFileW
 0x11fa3a8 SetBkColor
 0x11fa3b0 CreateCompatibleDC
 0x11fa3b8 GetBrushOrgEx
 0x11fa3c0 GetCurrentPositionEx
 0x11fa3c8 GetNearestPaletteIndex
 0x11fa3d0 GetTextExtentPointW
 0x11fa3d8 ExtTextOutW
 0x11fa3e0 SetBrushOrgEx
 0x11fa3e8 GetPixel
 0x11fa3f0 GdiFlush
 0x11fa3f8 SetPixel
 0x11fa400 EnumFontFamiliesExW
 0x11fa408 StretchDIBits
 0x11fa410 GetPaletteEntries
WTSAPI32.dll
 0x11fa420 WTSSendMessageW
kernel32.dll
 0x11fa430 GetSystemTimeAsFileTime
 0x11fa438 GetModuleHandleA
 0x11fa440 CreateEventA
 0x11fa448 GetModuleFileNameW
 0x11fa450 LoadLibraryA
 0x11fa458 TerminateProcess
 0x11fa460 GetCurrentProcess
 0x11fa468 CreateToolhelp32Snapshot
 0x11fa470 Thread32First
 0x11fa478 GetCurrentProcessId
 0x11fa480 GetCurrentThreadId
 0x11fa488 OpenThread
 0x11fa490 Thread32Next
 0x11fa498 CloseHandle
 0x11fa4a0 SuspendThread
 0x11fa4a8 ResumeThread
 0x11fa4b0 WriteProcessMemory
 0x11fa4b8 GetSystemInfo
 0x11fa4c0 VirtualAlloc
 0x11fa4c8 VirtualProtect
 0x11fa4d0 VirtualFree
 0x11fa4d8 GetProcessAffinityMask
 0x11fa4e0 SetProcessAffinityMask
 0x11fa4e8 GetCurrentThread
 0x11fa4f0 SetThreadAffinityMask
 0x11fa4f8 Sleep
 0x11fa500 FreeLibrary
 0x11fa508 GetTickCount
 0x11fa510 SystemTimeToFileTime
 0x11fa518 FileTimeToSystemTime
 0x11fa520 GlobalFree
 0x11fa528 LocalAlloc
 0x11fa530 LocalFree
 0x11fa538 GetProcAddress
 0x11fa540 ExitProcess
 0x11fa548 EnterCriticalSection
 0x11fa550 LeaveCriticalSection
 0x11fa558 InitializeCriticalSection
 0x11fa560 DeleteCriticalSection
 0x11fa568 GetModuleHandleW
 0x11fa570 LoadResource
 0x11fa578 MultiByteToWideChar
 0x11fa580 FindResourceExW
 0x11fa588 FindResourceExA
 0x11fa590 WideCharToMultiByte
 0x11fa598 GetThreadLocale
 0x11fa5a0 GetUserDefaultLCID
 0x11fa5a8 GetSystemDefaultLCID
 0x11fa5b0 EnumResourceNamesA
 0x11fa5b8 EnumResourceNamesW
 0x11fa5c0 EnumResourceLanguagesA
 0x11fa5c8 EnumResourceLanguagesW
 0x11fa5d0 EnumResourceTypesA
 0x11fa5d8 EnumResourceTypesW
 0x11fa5e0 CreateFileW
 0x11fa5e8 LoadLibraryW
 0x11fa5f0 GetLastError
 0x11fa5f8 FlushFileBuffers
 0x11fa600 CreateFileA
 0x11fa608 WriteConsoleW
 0x11fa610 GetConsoleOutputCP
 0x11fa618 WriteConsoleA
 0x11fa620 SetStdHandle
 0x11fa628 FlsSetValue
 0x11fa630 GetCommandLineA
 0x11fa638 RaiseException
 0x11fa640 RtlPcToFileHeader
 0x11fa648 RtlLookupFunctionEntry
 0x11fa650 RtlUnwindEx
 0x11fa658 HeapFree
 0x11fa660 GetCPInfo
 0x11fa668 GetACP
 0x11fa670 GetOEMCP
 0x11fa678 IsValidCodePage
 0x11fa680 EncodePointer
 0x11fa688 DecodePointer
 0x11fa690 FlsGetValue
 0x11fa698 FlsFree
 0x11fa6a0 SetLastError
 0x11fa6a8 FlsAlloc
 0x11fa6b0 UnhandledExceptionFilter
 0x11fa6b8 SetUnhandledExceptionFilter
 0x11fa6c0 IsDebuggerPresent
 0x11fa6c8 RtlVirtualUnwind
 0x11fa6d0 RtlCaptureContext
 0x11fa6d8 HeapAlloc
 0x11fa6e0 LCMapStringA
 0x11fa6e8 LCMapStringW
 0x11fa6f0 SetHandleCount
 0x11fa6f8 GetStdHandle
 0x11fa700 GetFileType
 0x11fa708 GetStartupInfoA
 0x11fa710 GetModuleFileNameA
 0x11fa718 FreeEnvironmentStringsA
 0x11fa720 GetEnvironmentStrings
 0x11fa728 FreeEnvironmentStringsW
 0x11fa730 GetEnvironmentStringsW
 0x11fa738 HeapSetInformation
 0x11fa740 HeapCreate
 0x11fa748 HeapDestroy
 0x11fa750 QueryPerformanceCounter
 0x11fa758 GetStringTypeA
 0x11fa760 GetStringTypeW
 0x11fa768 GetLocaleInfoA
 0x11fa770 HeapSize
 0x11fa778 WriteFile
 0x11fa780 SetFilePointer
 0x11fa788 GetConsoleCP
 0x11fa790 GetConsoleMode
 0x11fa798 HeapReAlloc
 0x11fa7a0 InitializeCriticalSectionAndSpinCount
user32.dll
 0x11fa7b0 GetUserObjectInformationW
 0x11fa7b8 CharUpperBuffW
 0x11fa7c0 MessageBoxW
 0x11fa7c8 GetProcessWindowStation
kernel32.dll
 0x11fa7d8 LocalAlloc
 0x11fa7e0 GetModuleFileNameW
 0x11fa7e8 LocalFree
 0x11fa7f0 GetProcessAffinityMask
 0x11fa7f8 SetProcessAffinityMask
 0x11fa800 SetThreadAffinityMask
 0x11fa808 Sleep
 0x11fa810 ExitProcess
 0x11fa818 FreeLibrary
 0x11fa820 LoadLibraryA
 0x11fa828 GetModuleHandleA
 0x11fa830 GetProcAddress
user32.dll
 0x11fa840 GetProcessWindowStation
 0x11fa848 GetUserObjectInformationW

EAT(Export Address Table) Library

0x9f53c0 Fi0KUsFNBsfDy53hFM5ulsq62
0x49e670 TMethodImplementationIntercept
0x41cef0 __dbk_fcall_wrapper
0xaa1298 dbkFCallWrapperAddr


Similarity measure (PE file only) - Checking for service failure