Report - iupdate.exe

Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer UPX PE File PE32 MZP Format OS Processor Check URL Format
ScreenShot
Created 2024.10.16 11:34 Machine s1_win7_x6403
Filename iupdate.exe
Type PE32 executable (GUI) Intel 80386, for MS Windows
AI Score
4
Behavior Score
2.6
ZERO API file : mailcious
VT API (file) 28 detected (AIDetectMalware, Midie, Unsafe, Vvet, Malicious, Sonbokli, Artemis, Chgt, R002H09J924, susgen, PossibleThreat)
md5 8f2382e57ef226bcbf3f549280a59085
sha256 7610decf9c6c0fe1da22550d4542b9c42be3c7ede12a7c768200b74b45c4b470
ssdeep 49152:ncl8ezAQgB8NFiS9csAsNHdUCuR7JQ4tlps7LRDwlf+vJv23JHgXSu:ncCJQgBcjUCuR7Jlx4LRDwN+vGi
imphash a5d5c38edfe5a4011fc459b9f1adab46
impfuzzy 192:NcLqjQKyEx26wIluOUPmQgwkNv/bQ6cubiIPuFF8+oQGtm/hHKdgC:NcGhg647kNv/bRiIPu3Itm/hCgC
  Network IP location

Signature (6cnts)

Level Description
warning File has been identified by 28 AntiVirus engines on VirusTotal as malicious
watch Detects the presence of Wine emulator
notice Allocates read-write-execute memory (usually to unpack itself)
notice The binary likely contains encrypted or compressed data indicative of a packer
info The executable contains unknown PE section names indicative of a packer (could be a false positive)
info The executable uses a known packer

Rules (10cnts)

Level Name Description Collection
warning Generic_Malware_Zero Generic Malware binaries (upload)
watch Admin_Tool_IN_Zero Admin Tool Sysinternals binaries (upload)
watch Malicious_Library_Zero Malicious_Library binaries (upload)
watch Malicious_Packer_Zero Malicious Packer binaries (upload)
watch UPX_Zero UPX packed file binaries (upload)
info IsPE32 (no description) binaries (upload)
info mzp_file_format MZP(Delphi) file format binaries (upload)
info OS_Processor_Check_Zero OS Processor Check binaries (upload)
info PE_Header_Zero PE File Signature binaries (upload)
info url_file_format Microsoft Windows Internet Shortcut File Format binaries (download)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids

PE API

IAT(Import Address Table) Library

winspool.drv
 0x8a6a4c DocumentPropertiesW
 0x8a6a50 ClosePrinter
 0x8a6a54 OpenPrinterW
 0x8a6a58 GetDefaultPrinterW
 0x8a6a5c EnumPrintersW
comctl32.dll
 0x8a6a64 ImageList_GetImageInfo
 0x8a6a68 FlatSB_SetScrollInfo
 0x8a6a6c InitCommonControls
 0x8a6a70 ImageList_DragMove
 0x8a6a74 ImageList_Destroy
 0x8a6a78 _TrackMouseEvent
 0x8a6a7c ImageList_DragShowNolock
 0x8a6a80 ImageList_Add
 0x8a6a84 FlatSB_SetScrollProp
 0x8a6a88 ImageList_GetDragImage
 0x8a6a8c ImageList_Create
 0x8a6a90 ImageList_EndDrag
 0x8a6a94 ImageList_DrawEx
 0x8a6a98 ImageList_SetImageCount
 0x8a6a9c FlatSB_GetScrollPos
 0x8a6aa0 FlatSB_SetScrollPos
 0x8a6aa4 InitializeFlatSB
 0x8a6aa8 ImageList_Copy
 0x8a6aac FlatSB_GetScrollInfo
 0x8a6ab0 ImageList_Write
 0x8a6ab4 ImageList_DrawIndirect
 0x8a6ab8 ImageList_SetBkColor
 0x8a6abc ImageList_GetBkColor
 0x8a6ac0 ImageList_BeginDrag
 0x8a6ac4 ImageList_GetIcon
 0x8a6ac8 ImageList_Replace
 0x8a6acc ImageList_GetImageCount
 0x8a6ad0 ImageList_DragEnter
 0x8a6ad4 ImageList_GetIconSize
 0x8a6ad8 ImageList_SetIconSize
 0x8a6adc ImageList_Read
 0x8a6ae0 ImageList_DragLeave
 0x8a6ae4 ImageList_LoadImageW
 0x8a6ae8 ImageList_Draw
 0x8a6aec ImageList_Remove
 0x8a6af0 ImageList_ReplaceIcon
 0x8a6af4 ImageList_SetOverlayImage
shell32.dll
 0x8a6afc Shell_NotifyIconW
 0x8a6b00 SHAppBarMessage
 0x8a6b04 ShellExecuteW
user32.dll
 0x8a6b0c MoveWindow
 0x8a6b10 CopyImage
 0x8a6b14 SetMenuItemInfoW
 0x8a6b18 GetMenuItemInfoW
 0x8a6b1c DefFrameProcW
 0x8a6b20 GetDlgCtrlID
 0x8a6b24 FrameRect
 0x8a6b28 RegisterWindowMessageW
 0x8a6b2c GetMenuStringW
 0x8a6b30 FillRect
 0x8a6b34 SendMessageA
 0x8a6b38 EnumWindows
 0x8a6b3c ShowOwnedPopups
 0x8a6b40 GetClassInfoExW
 0x8a6b44 GetClassInfoW
 0x8a6b48 GetScrollRange
 0x8a6b4c SetActiveWindow
 0x8a6b50 GetActiveWindow
 0x8a6b54 DrawEdge
 0x8a6b58 GetKeyboardLayoutList
 0x8a6b5c LoadBitmapW
 0x8a6b60 EnumChildWindows
 0x8a6b64 GetScrollBarInfo
 0x8a6b68 UnhookWindowsHookEx
 0x8a6b6c SetCapture
 0x8a6b70 GetCapture
 0x8a6b74 ShowCaret
 0x8a6b78 CreatePopupMenu
 0x8a6b7c GetMenuItemID
 0x8a6b80 CharLowerBuffW
 0x8a6b84 PostMessageW
 0x8a6b88 SetWindowLongW
 0x8a6b8c IsZoomed
 0x8a6b90 SetParent
 0x8a6b94 DrawMenuBar
 0x8a6b98 GetClientRect
 0x8a6b9c IsChild
 0x8a6ba0 IsIconic
 0x8a6ba4 CallNextHookEx
 0x8a6ba8 ShowWindow
 0x8a6bac GetWindowTextW
 0x8a6bb0 SetForegroundWindow
 0x8a6bb4 IsDialogMessageW
 0x8a6bb8 DestroyWindow
 0x8a6bbc RegisterClassW
 0x8a6bc0 EndMenu
 0x8a6bc4 CharNextW
 0x8a6bc8 GetFocus
 0x8a6bcc GetDC
 0x8a6bd0 SetFocus
 0x8a6bd4 ReleaseDC
 0x8a6bd8 GetClassLongW
 0x8a6bdc SetScrollRange
 0x8a6be0 DrawTextW
 0x8a6be4 PeekMessageA
 0x8a6be8 MessageBeep
 0x8a6bec SetClassLongW
 0x8a6bf0 RemovePropW
 0x8a6bf4 GetSubMenu
 0x8a6bf8 DestroyIcon
 0x8a6bfc IsWindowVisible
 0x8a6c00 PtInRect
 0x8a6c04 DispatchMessageA
 0x8a6c08 UnregisterClassW
 0x8a6c0c GetTopWindow
 0x8a6c10 SendMessageW
 0x8a6c14 GetComboBoxInfo
 0x8a6c18 LoadStringW
 0x8a6c1c CreateMenu
 0x8a6c20 CharLowerW
 0x8a6c24 SetWindowRgn
 0x8a6c28 SetWindowPos
 0x8a6c2c GetMenuItemCount
 0x8a6c30 GetSysColorBrush
 0x8a6c34 GetWindowDC
 0x8a6c38 DrawTextExW
 0x8a6c3c GetScrollInfo
 0x8a6c40 SetWindowTextW
 0x8a6c44 GetMessageExtraInfo
 0x8a6c48 GetSysColor
 0x8a6c4c EnableScrollBar
 0x8a6c50 TrackPopupMenu
 0x8a6c54 DrawIconEx
 0x8a6c58 GetClassNameW
 0x8a6c5c GetMessagePos
 0x8a6c60 GetIconInfo
 0x8a6c64 SetScrollInfo
 0x8a6c68 GetKeyNameTextW
 0x8a6c6c GetDesktopWindow
 0x8a6c70 SetCursorPos
 0x8a6c74 GetCursorPos
 0x8a6c78 SetMenu
 0x8a6c7c GetMenuState
 0x8a6c80 GetMenu
 0x8a6c84 SetRect
 0x8a6c88 GetKeyState
 0x8a6c8c IsRectEmpty
 0x8a6c90 ValidateRect
 0x8a6c94 GetCursor
 0x8a6c98 KillTimer
 0x8a6c9c WaitMessage
 0x8a6ca0 TranslateMDISysAccel
 0x8a6ca4 GetWindowPlacement
 0x8a6ca8 GetMenuItemRect
 0x8a6cac CreateIconIndirect
 0x8a6cb0 CreateWindowExW
 0x8a6cb4 GetDCEx
 0x8a6cb8 PeekMessageW
 0x8a6cbc MonitorFromWindow
 0x8a6cc0 GetUpdateRect
 0x8a6cc4 SetTimer
 0x8a6cc8 WindowFromPoint
 0x8a6ccc BeginPaint
 0x8a6cd0 RegisterClipboardFormatW
 0x8a6cd4 MapVirtualKeyW
 0x8a6cd8 OffsetRect
 0x8a6cdc IsWindowUnicode
 0x8a6ce0 DispatchMessageW
 0x8a6ce4 CreateAcceleratorTableW
 0x8a6ce8 DefMDIChildProcW
 0x8a6cec GetSystemMenu
 0x8a6cf0 SetScrollPos
 0x8a6cf4 GetScrollPos
 0x8a6cf8 InflateRect
 0x8a6cfc DrawFocusRect
 0x8a6d00 ReleaseCapture
 0x8a6d04 LoadCursorW
 0x8a6d08 ScrollWindow
 0x8a6d0c GetLastActivePopup
 0x8a6d10 GetSystemMetrics
 0x8a6d14 CharUpperBuffW
 0x8a6d18 SetClipboardData
 0x8a6d1c GetClipboardData
 0x8a6d20 ClientToScreen
 0x8a6d24 SetWindowPlacement
 0x8a6d28 GetMonitorInfoW
 0x8a6d2c CheckMenuItem
 0x8a6d30 CharUpperW
 0x8a6d34 DefWindowProcW
 0x8a6d38 GetForegroundWindow
 0x8a6d3c EnableWindow
 0x8a6d40 GetWindowThreadProcessId
 0x8a6d44 RedrawWindow
 0x8a6d48 EndPaint
 0x8a6d4c MsgWaitForMultipleObjectsEx
 0x8a6d50 LoadKeyboardLayoutW
 0x8a6d54 ActivateKeyboardLayout
 0x8a6d58 GetParent
 0x8a6d5c MonitorFromRect
 0x8a6d60 InsertMenuItemW
 0x8a6d64 GetPropW
 0x8a6d68 MessageBoxW
 0x8a6d6c SetPropW
 0x8a6d70 UpdateWindow
 0x8a6d74 MsgWaitForMultipleObjects
 0x8a6d78 DestroyMenu
 0x8a6d7c SetWindowsHookExW
 0x8a6d80 EmptyClipboard
 0x8a6d84 GetDlgItem
 0x8a6d88 AdjustWindowRectEx
 0x8a6d8c IsWindow
 0x8a6d90 DrawIcon
 0x8a6d94 EnumThreadWindows
 0x8a6d98 InvalidateRect
 0x8a6d9c GetKeyboardState
 0x8a6da0 ScreenToClient
 0x8a6da4 DrawFrameControl
 0x8a6da8 SetCursor
 0x8a6dac CreateIcon
 0x8a6db0 RemoveMenu
 0x8a6db4 GetKeyboardLayoutNameW
 0x8a6db8 OpenClipboard
 0x8a6dbc TranslateMessage
 0x8a6dc0 MapWindowPoints
 0x8a6dc4 EnumDisplayMonitors
 0x8a6dc8 CallWindowProcW
 0x8a6dcc CloseClipboard
 0x8a6dd0 DestroyCursor
 0x8a6dd4 CopyIcon
 0x8a6dd8 CharUpperBuffA
 0x8a6ddc PostQuitMessage
 0x8a6de0 ShowScrollBar
 0x8a6de4 EnableMenuItem
 0x8a6de8 HideCaret
 0x8a6dec FindWindowExW
 0x8a6df0 MonitorFromPoint
 0x8a6df4 LoadIconW
 0x8a6df8 SystemParametersInfoW
 0x8a6dfc GetWindow
 0x8a6e00 GetWindowRect
 0x8a6e04 GetWindowLongW
 0x8a6e08 InsertMenuW
 0x8a6e0c IsWindowEnabled
 0x8a6e10 IsDialogMessageA
 0x8a6e14 FindWindowW
 0x8a6e18 GetKeyboardLayout
 0x8a6e1c DeleteMenu
version.dll
 0x8a6e24 GetFileVersionInfoSizeW
 0x8a6e28 VerQueryValueW
 0x8a6e2c GetFileVersionInfoW
oleaut32.dll
 0x8a6e34 SafeArrayPutElement
 0x8a6e38 GetErrorInfo
 0x8a6e3c VariantInit
 0x8a6e40 VariantClear
 0x8a6e44 SysFreeString
 0x8a6e48 SafeArrayAccessData
 0x8a6e4c SysReAllocStringLen
 0x8a6e50 SafeArrayCreate
 0x8a6e54 SafeArrayGetElement
 0x8a6e58 SysAllocStringLen
 0x8a6e5c SafeArrayUnaccessData
 0x8a6e60 SafeArrayPtrOfIndex
 0x8a6e64 VariantCopy
 0x8a6e68 SafeArrayGetUBound
 0x8a6e6c SafeArrayGetLBound
 0x8a6e70 VariantCopyInd
 0x8a6e74 VariantChangeType
WTSAPI32.DLL
 0x8a6e7c WTSUnRegisterSessionNotification
 0x8a6e80 WTSRegisterSessionNotification
advapi32.dll
 0x8a6e88 RegSetValueExW
 0x8a6e8c RegConnectRegistryW
 0x8a6e90 RegEnumKeyExW
 0x8a6e94 RegLoadKeyW
 0x8a6e98 RegDeleteKeyW
 0x8a6e9c RegOpenKeyExW
 0x8a6ea0 RegQueryInfoKeyW
 0x8a6ea4 RegUnLoadKeyW
 0x8a6ea8 RegSaveKeyW
 0x8a6eac RegDeleteValueW
 0x8a6eb0 RegReplaceKeyW
 0x8a6eb4 RegFlushKey
 0x8a6eb8 RegQueryValueExW
 0x8a6ebc RegEnumValueW
 0x8a6ec0 RegCloseKey
 0x8a6ec4 RegCreateKeyExW
 0x8a6ec8 RegRestoreKeyW
msvcrt.dll
 0x8a6ed0 memcpy
 0x8a6ed4 memset
IMAGEHLP.DLL
 0x8a6edc ImageDirectoryEntryToData
kernel32.dll
 0x8a6ee4 SetFileAttributesW
 0x8a6ee8 GetFileType
 0x8a6eec SetFileTime
 0x8a6ef0 QueryDosDeviceW
 0x8a6ef4 GetACP
 0x8a6ef8 CloseHandle
 0x8a6efc LocalFree
 0x8a6f00 GetCurrentProcessId
 0x8a6f04 VirtualProtectEx
 0x8a6f08 SizeofResource
 0x8a6f0c TerminateThread
 0x8a6f10 QueryPerformanceFrequency
 0x8a6f14 IsDebuggerPresent
 0x8a6f18 FindNextFileW
 0x8a6f1c GetFullPathNameW
 0x8a6f20 VirtualFree
 0x8a6f24 GetProcessHeap
 0x8a6f28 ExitProcess
 0x8a6f2c HeapAlloc
 0x8a6f30 GetCPInfoExW
 0x8a6f34 WriteProcessMemory
 0x8a6f38 RtlUnwind
 0x8a6f3c GetCPInfo
 0x8a6f40 EnumSystemLocalesW
 0x8a6f44 GetStdHandle
 0x8a6f48 GetTimeZoneInformation
 0x8a6f4c FileTimeToLocalFileTime
 0x8a6f50 GetModuleHandleW
 0x8a6f54 FreeLibrary
 0x8a6f58 TryEnterCriticalSection
 0x8a6f5c HeapDestroy
 0x8a6f60 FileTimeToDosDateTime
 0x8a6f64 ReadFile
 0x8a6f68 DosDateTimeToFileTime
 0x8a6f6c GetLastError
 0x8a6f70 GetModuleFileNameW
 0x8a6f74 WaitNamedPipeW
 0x8a6f78 SetLastError
 0x8a6f7c GlobalAlloc
 0x8a6f80 GlobalUnlock
 0x8a6f84 FindResourceW
 0x8a6f88 CreateThread
 0x8a6f8c CompareStringW
 0x8a6f90 MapViewOfFile
 0x8a6f94 CreateMutexW
 0x8a6f98 LoadLibraryA
 0x8a6f9c GetVolumeInformationW
 0x8a6fa0 ResetEvent
 0x8a6fa4 MulDiv
 0x8a6fa8 FreeResource
 0x8a6fac GetDriveTypeW
 0x8a6fb0 GetVersion
 0x8a6fb4 RaiseException
 0x8a6fb8 MoveFileW
 0x8a6fbc GlobalAddAtomW
 0x8a6fc0 FormatMessageW
 0x8a6fc4 SwitchToThread
 0x8a6fc8 GetExitCodeThread
 0x8a6fcc GetCurrentThread
 0x8a6fd0 LocalFileTimeToFileTime
 0x8a6fd4 GetFileAttributesExW
 0x8a6fd8 SetNamedPipeHandleState
 0x8a6fdc LoadLibraryExW
 0x8a6fe0 LockResource
 0x8a6fe4 FileTimeToSystemTime
 0x8a6fe8 GetCurrentThreadId
 0x8a6fec UnhandledExceptionFilter
 0x8a6ff0 GlobalFindAtomW
 0x8a6ff4 VirtualQuery
 0x8a6ff8 GlobalFree
 0x8a6ffc VirtualQueryEx
 0x8a7000 Sleep
 0x8a7004 EnterCriticalSection
 0x8a7008 SetFilePointer
 0x8a700c ReleaseMutex
 0x8a7010 LoadResource
 0x8a7014 SuspendThread
 0x8a7018 GetTickCount
 0x8a701c WritePrivateProfileStringW
 0x8a7020 lstrcmpiA
 0x8a7024 GetFileSize
 0x8a7028 GlobalDeleteAtom
 0x8a702c GetStartupInfoW
 0x8a7030 GetFileAttributesW
 0x8a7034 InitializeCriticalSection
 0x8a7038 GetThreadPriority
 0x8a703c GetCurrentProcess
 0x8a7040 GlobalLock
 0x8a7044 SetThreadPriority
 0x8a7048 VirtualAlloc
 0x8a704c GetTempPathW
 0x8a7050 GetCommandLineW
 0x8a7054 GetSystemInfo
 0x8a7058 LeaveCriticalSection
 0x8a705c GetProcAddress
 0x8a7060 ResumeThread
 0x8a7064 GetLogicalDriveStringsW
 0x8a7068 GetVersionExW
 0x8a706c VerifyVersionInfoW
 0x8a7070 HeapCreate
 0x8a7074 LCMapStringW
 0x8a7078 GetDiskFreeSpaceW
 0x8a707c VerSetConditionMask
 0x8a7080 FindFirstFileW
 0x8a7084 GetUserDefaultUILanguage
 0x8a7088 GetConsoleOutputCP
 0x8a708c UnmapViewOfFile
 0x8a7090 GetConsoleCP
 0x8a7094 lstrlenW
 0x8a7098 CompareStringA
 0x8a709c QueryPerformanceCounter
 0x8a70a0 SetEndOfFile
 0x8a70a4 HeapFree
 0x8a70a8 WideCharToMultiByte
 0x8a70ac FindClose
 0x8a70b0 MultiByteToWideChar
 0x8a70b4 LoadLibraryW
 0x8a70b8 SetEvent
 0x8a70bc GetLocaleInfoW
 0x8a70c0 CreateFileW
 0x8a70c4 EnumResourceNamesW
 0x8a70c8 DeleteFileW
 0x8a70cc IsDBCSLeadByteEx
 0x8a70d0 GetEnvironmentVariableW
 0x8a70d4 GetLocalTime
 0x8a70d8 WaitForSingleObject
 0x8a70dc WriteFile
 0x8a70e0 CreateFileMappingW
 0x8a70e4 ExitThread
 0x8a70e8 DeleteCriticalSection
 0x8a70ec GetDateFormatW
 0x8a70f0 TlsGetValue
 0x8a70f4 SetErrorMode
 0x8a70f8 GetComputerNameW
 0x8a70fc IsValidLocale
 0x8a7100 TlsSetValue
 0x8a7104 GetSystemDefaultUILanguage
 0x8a7108 CreateDirectoryW
 0x8a710c EnumCalendarInfoW
 0x8a7110 LocalAlloc
 0x8a7114 RemoveDirectoryW
 0x8a7118 CreateEventW
 0x8a711c GetPrivateProfileStringW
 0x8a7120 WaitForMultipleObjectsEx
 0x8a7124 GetThreadLocale
 0x8a7128 SetThreadLocale
wsock32.dll
 0x8a7130 accept
 0x8a7134 htons
 0x8a7138 ntohs
 0x8a713c getsockopt
 0x8a7140 setsockopt
 0x8a7144 select
 0x8a7148 WSAStartup
 0x8a714c __WSAFDIsSet
 0x8a7150 WSACleanup
 0x8a7154 getsockname
 0x8a7158 listen
 0x8a715c gethostbyname
 0x8a7160 ind
 0x8a7164 closesocket
 0x8a7168 inet_ntoa
 0x8a716c socket
 0x8a7170 recv
 0x8a7174 ioctlsocket
 0x8a7178 WSAGetLastError
 0x8a717c connect
 0x8a7180 shutdown
 0x8a7184 inet_addr
 0x8a7188 send
ole32.dll
 0x8a7190 IsEqualGUID
 0x8a7194 OleInitialize
 0x8a7198 OleUninitialize
 0x8a719c CoInitialize
 0x8a71a0 CoCreateInstance
 0x8a71a4 CoUninitialize
 0x8a71a8 CoTaskMemFree
 0x8a71ac CoTaskMemAlloc
gdi32.dll
 0x8a71b4 Pie
 0x8a71b8 SetBkMode
 0x8a71bc CreateCompatibleBitmap
 0x8a71c0 GetEnhMetaFileHeader
 0x8a71c4 RectVisible
 0x8a71c8 AngleArc
 0x8a71cc ResizePalette
 0x8a71d0 SetAbortProc
 0x8a71d4 SetTextColor
 0x8a71d8 GetTextColor
 0x8a71dc StretchBlt
 0x8a71e0 RoundRect
 0x8a71e4 SelectClipRgn
 0x8a71e8 RestoreDC
 0x8a71ec SetRectRgn
 0x8a71f0 GetTextMetricsW
 0x8a71f4 GetWindowOrgEx
 0x8a71f8 CreatePalette
 0x8a71fc CreateDCW
 0x8a7200 PolyBezierTo
 0x8a7204 CreateICW
 0x8a7208 GetStockObject
 0x8a720c CreateSolidBrush
 0x8a7210 GetBkMode
 0x8a7214 Polygon
 0x8a7218 MoveToEx
 0x8a721c PlayEnhMetaFile
 0x8a7220 Ellipse
 0x8a7224 StartPage
 0x8a7228 GetBitmapBits
 0x8a722c StartDocW
 0x8a7230 AbortDoc
 0x8a7234 GetSystemPaletteEntries
 0x8a7238 GetEnhMetaFileBits
 0x8a723c GetEnhMetaFilePaletteEntries
 0x8a7240 CreatePenIndirect
 0x8a7244 CreateFontIndirectW
 0x8a7248 PolyBezier
 0x8a724c EndDoc
 0x8a7250 GetObjectW
 0x8a7254 GetCurrentObject
 0x8a7258 GetWinMetaFileBits
 0x8a725c SetROP2
 0x8a7260 GetEnhMetaFileDescriptionW
 0x8a7264 ArcTo
 0x8a7268 Arc
 0x8a726c SelectPalette
 0x8a7270 SetGraphicsMode
 0x8a7274 ExcludeClipRect
 0x8a7278 MaskBlt
 0x8a727c SetWindowOrgEx
 0x8a7280 EndPage
 0x8a7284 DeleteEnhMetaFile
 0x8a7288 Chord
 0x8a728c SetDIBits
 0x8a7290 GetViewportOrgEx
 0x8a7294 SetViewportOrgEx
 0x8a7298 CreateRectRgn
 0x8a729c RealizePalette
 0x8a72a0 SetDIBColorTable
 0x8a72a4 GetDIBColorTable
 0x8a72a8 CreateBrushIndirect
 0x8a72ac PatBlt
 0x8a72b0 SetEnhMetaFileBits
 0x8a72b4 Rectangle
 0x8a72b8 SaveDC
 0x8a72bc DeleteDC
 0x8a72c0 BitBlt
 0x8a72c4 SetWorldTransform
 0x8a72c8 FrameRgn
 0x8a72cc GetDeviceCaps
 0x8a72d0 GetTextExtentPoint32W
 0x8a72d4 GetClipBox
 0x8a72d8 IntersectClipRect
 0x8a72dc Polyline
 0x8a72e0 CreateBitmap
 0x8a72e4 CombineRgn
 0x8a72e8 SetWinMetaFileBits
 0x8a72ec GetStretchBltMode
 0x8a72f0 CreateDIBitmap
 0x8a72f4 SetStretchBltMode
 0x8a72f8 GetDIBits
 0x8a72fc CreateDIBSection
 0x8a7300 ExtCreateRegion
 0x8a7304 LineTo
 0x8a7308 GetRgnBox
 0x8a730c EnumFontsW
 0x8a7310 CreateHalftonePalette
 0x8a7314 SelectObject
 0x8a7318 DeleteObject
 0x8a731c ExtFloodFill
 0x8a7320 UnrealizeObject
 0x8a7324 CopyEnhMetaFileW
 0x8a7328 SetBkColor
 0x8a732c CreateCompatibleDC
 0x8a7330 GetBrushOrgEx
 0x8a7334 GetCurrentPositionEx
 0x8a7338 SetDCPenColor
 0x8a733c GetNearestPaletteIndex
 0x8a7340 CreateRoundRectRgn
 0x8a7344 GetTextExtentPointW
 0x8a7348 ExtTextOutW
 0x8a734c SetBrushOrgEx
 0x8a7350 GetPixel
 0x8a7354 GdiFlush
 0x8a7358 SetPixel
 0x8a735c EnumFontFamiliesExW
 0x8a7360 StretchDIBits
 0x8a7364 GetPaletteEntries

EAT(Export Address Table) Library

0x412788 __dbk_fcall_wrapper
0x88d648 dbkFCallWrapperAddr


Similarity measure (PE file only) - Checking for service failure